Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/fa14e8-f716-4075-8614-3f495bf99431/1/91e9yF9Tf7PVgXnUQvheAdf-6Us.roa
File: 91e9yF9Tf7PVgXnUQvheAdf-6Us.roa (raw, json)
Hash identifier: 98Ii+uAjQhKWebR7PAPkmqEpVcWs6e6h4lYnAI9zFHo=
Subject key identifier: F7:57:BD:C8:5F:53:7F:B3:D5:81:79:D4:42:F8:5E:01:D7:FE:E9:4B
Certificate issuer: /CN=db4ea2aa8d34d43b4b641a3af30642849bf4a8fe
Certificate serial: 019F23474F2B4A1178B1D5A0B7311731BFBE
Authority key identifier: DB:4E:A2:AA:8D:34:D4:3B:4B:64:1A:3A:F3:06:42:84:9B:F4:A8:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/206iqo001DtLZBo68wZChJv0qP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/fa14e8-f716-4075-8614-3f495bf99431/1/91e9yF9Tf7PVgXnUQvheAdf-6Us.roa
Signing time: Thu 02 Jul 2026 14:41:43 +0000
ROA not before: Thu 02 Jul 2026 14:41:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204761
IP address blocks: 185.31.56.0/22 maxlen: 32
185.31.56.0/23 maxlen: 32
185.31.56.0/24 maxlen: 32
185.31.57.0/24 maxlen: 32
185.31.58.0/23 maxlen: 32
185.31.58.0/24 maxlen: 32
185.31.59.0/24 maxlen: 32
194.53.60.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/fa14e8-f716-4075-8614-3f495bf99431/1/206iqo001DtLZBo68wZChJv0qP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/fa14e8-f716-4075-8614-3f495bf99431/1/206iqo001DtLZBo68wZChJv0qP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/206iqo001DtLZBo68wZChJv0qP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:47:4f:2b:4a:11:78:b1:d5:a0:b7:31:17:31:bf:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db4ea2aa8d34d43b4b641a3af30642849bf4a8fe
Validity
Not Before: Jul 2 14:41:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f757bdc85f537fb3d58179d442f85e01d7fee94b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a9:32:3d:fc:1f:85:cd:05:fa:cd:e4:04:48:
21:1a:d5:36:74:4f:59:87:eb:51:14:5c:fc:d1:b6:
43:a6:24:07:ef:05:d9:24:d3:11:b2:df:da:c5:08:
a6:cb:65:41:17:b5:ab:25:ce:67:2a:76:96:7c:df:
f2:3c:a7:af:a9:72:39:32:ac:0f:cd:47:1f:8b:39:
02:65:ff:f8:b7:18:98:1a:66:66:a6:b7:29:ae:2f:
79:ab:c0:84:33:a2:32:04:5a:61:c2:8a:83:14:db:
b9:d6:db:e4:30:b4:0b:e6:20:ea:f0:76:17:5e:6c:
e7:70:62:36:f9:0b:6f:54:d8:fc:f9:bb:1b:96:24:
21:05:38:cf:8f:d4:22:80:ce:23:5f:a3:9d:20:18:
4e:e6:cf:7e:e1:a0:1d:15:71:d8:1f:23:6e:80:2f:
48:30:38:75:77:ba:a1:0f:ba:54:6e:ee:95:a8:a3:
16:54:26:65:71:5d:e0:e8:36:ff:21:e3:1f:b5:ee:
34:4d:91:14:96:fc:94:62:85:cb:9d:f3:5e:54:cf:
32:c8:5b:df:42:60:c7:fe:53:54:e6:3f:20:7e:d6:
27:30:71:40:73:19:0f:33:42:76:45:d7:68:bf:af:
49:3f:cb:d8:ca:12:d5:8e:4b:6c:5e:e3:b4:fe:9f:
09:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:57:BD:C8:5F:53:7F:B3:D5:81:79:D4:42:F8:5E:01:D7:FE:E9:4B
X509v3 Authority Key Identifier:
keyid:DB:4E:A2:AA:8D:34:D4:3B:4B:64:1A:3A:F3:06:42:84:9B:F4:A8:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/206iqo001DtLZBo68wZChJv0qP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fa14e8-f716-4075-8614-3f495bf99431/1/91e9yF9Tf7PVgXnUQvheAdf-6Us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/fa14e8-f716-4075-8614-3f495bf99431/1/206iqo001DtLZBo68wZChJv0qP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.56.0/22
194.53.60.0/24
Signature Algorithm: sha256WithRSAEncryption
82:49:41:19:4b:9a:ed:79:cc:13:4d:70:8d:d8:87:a8:7b:ef:
e8:7c:23:99:9f:b5:ba:05:3b:69:da:c8:a0:bc:58:c8:85:1f:
a9:36:72:43:9b:39:82:70:60:a6:6d:4b:5b:ab:37:f6:8f:26:
55:1e:0b:b9:c8:37:8b:56:9d:ab:9a:70:61:15:94:a2:9e:b7:
a3:4e:7f:c8:ea:6f:27:74:da:48:04:87:6b:89:31:30:fc:56:
7e:c8:15:e7:f1:08:93:ab:aa:e6:f0:3d:3b:66:89:29:ce:69:
21:0f:d1:a8:66:b4:be:d5:37:04:ad:57:d9:53:aa:35:4c:0c:
07:56:54:15:a2:1b:36:97:ea:8f:05:71:fc:69:e7:af:58:85:
6c:44:22:94:2c:cd:d5:b9:f8:36:f5:13:52:09:02:3c:c6:54:
65:55:f6:ca:73:3d:76:39:90:7f:38:bf:8a:d5:c5:5a:9d:d0:
7b:69:75:5d:e9:a8:d2:45:42:f5:59:b8:50:09:30:18:8e:be:
7e:f0:56:1c:0b:91:27:73:e3:a0:78:29:75:b1:94:26:aa:0f:
d0:a2:ec:a2:5f:d6:2c:eb:97:30:72:e3:a5:92:90:99:8f:57:
4b:bf:5d:5f:d1:6d:42:0d:5b:b7:38:32:8e:19:e7:07:36:20:
93:0e:9d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:40:06 2026 by rpki-client