Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/ddIfNiRppOj1v3M6aJwVqmijL0I.roa
File: ddIfNiRppOj1v3M6aJwVqmijL0I.roa (raw, json)
Hash identifier: EfC5UqZXOZKbq7DWkiDFRsm66HUflEVOFO98FL8DAwE=
Subject key identifier: 75:D2:1F:36:24:69:A4:E8:F5:BF:73:3A:68:9C:15:AA:68:A3:2F:42
Certificate issuer: /CN=f0cd2b3b9ed83126d45dba12003d6c6e35a6b380
Certificate serial: 019F8FFB3AEF5D396C5BE7B1497FD9DA604D
Authority key identifier: F0:CD:2B:3B:9E:D8:31:26:D4:5D:BA:12:00:3D:6C:6E:35:A6:B3:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8M0rO57YMSbUXboSAD1sbjWms4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/ddIfNiRppOj1v3M6aJwVqmijL0I.roa
Signing time: Thu 23 Jul 2026 17:17:14 +0000
ROA not before: Thu 23 Jul 2026 17:17:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47389
IP address blocks: 91.206.32.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8M0rO57YMSbUXboSAD1sbjWms4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:fb:3a:ef:5d:39:6c:5b:e7:b1:49:7f:d9:da:60:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cd2b3b9ed83126d45dba12003d6c6e35a6b380
Validity
Not Before: Jul 23 17:17:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=75d21f362469a4e8f5bf733a689c15aa68a32f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:96:d3:7c:11:19:cf:3b:aa:9a:c2:46:06:ec:
a4:76:2d:f1:c4:bc:0b:8f:66:54:34:c9:f6:4f:e1:
0b:55:11:f9:e4:3e:36:f5:d2:b5:cc:3a:d4:f9:3d:
76:01:42:92:01:6c:9d:1a:c0:12:2f:79:15:00:88:
ea:c2:9a:01:c7:ea:f2:90:b2:54:b9:80:07:20:da:
94:f8:2f:81:68:1b:57:a9:0e:47:51:b4:3b:d3:59:
1c:ba:b3:8d:27:d0:93:ea:4e:4c:cf:a5:9f:ff:8d:
aa:de:a2:2c:ac:af:65:a9:fa:f8:02:8f:f1:43:e7:
68:a3:8f:f0:62:d7:dc:7b:8b:b0:1f:1f:91:9c:00:
b0:8c:34:13:9a:77:e6:3e:6c:d9:47:2e:7d:c0:e4:
42:42:fa:4f:f9:13:be:8d:a3:31:5c:c4:66:8c:d5:
00:62:14:c6:42:2f:36:88:54:c8:10:5a:cd:8a:68:
6f:01:8f:df:70:9c:9c:ff:e8:36:86:37:dd:20:e4:
7c:f7:66:c4:d6:a7:1f:9e:2c:f2:14:92:c6:47:f2:
42:91:cc:5b:1e:83:76:e8:2a:b9:ed:e6:9c:45:0f:
1e:93:90:a6:cc:2d:74:37:d0:6c:d1:b7:5f:3b:08:
c9:b2:43:70:86:84:97:03:2b:8a:85:00:97:85:b9:
f9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D2:1F:36:24:69:A4:E8:F5:BF:73:3A:68:9C:15:AA:68:A3:2F:42
X509v3 Authority Key Identifier:
keyid:F0:CD:2B:3B:9E:D8:31:26:D4:5D:BA:12:00:3D:6C:6E:35:A6:B3:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M0rO57YMSbUXboSAD1sbjWms4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/ddIfNiRppOj1v3M6aJwVqmijL0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.32.0/23
Signature Algorithm: sha256WithRSAEncryption
37:c3:8e:41:49:37:52:ec:be:18:1c:aa:d9:18:b5:db:69:2f:
0e:3c:5c:7a:84:13:a1:f5:0a:dd:54:70:03:31:2a:5c:53:d9:
44:cb:bf:77:d8:67:95:50:57:a1:6e:25:da:57:54:c8:9d:28:
18:d9:b8:4d:97:8c:26:7b:5c:b1:01:85:7d:01:61:d2:cc:f5:
39:b5:99:d7:2a:ae:e6:90:6c:fe:5e:3f:fe:c7:0a:1e:7f:ad:
fd:ff:20:57:dd:e0:04:40:16:4d:bc:0b:6a:d6:55:02:13:a3:
b9:4d:43:fd:11:1a:c0:32:20:65:19:e4:7b:9a:23:40:f2:9f:
49:d6:f9:84:04:f8:64:5a:fe:4f:e7:8b:63:e5:20:2f:2e:f3:
63:be:90:af:2c:7a:e6:31:7a:b3:03:99:ab:8d:3f:48:47:7d:
e7:ab:63:3e:c4:99:81:66:08:7f:a9:df:a2:2d:3e:f6:dc:f8:
68:38:8b:aa:08:b4:c4:40:0e:d5:13:fe:96:ae:33:7e:bf:49:
13:b4:c7:4f:ed:f8:c3:9c:11:4d:c5:4e:80:56:fe:99:95:32:
97:3d:ce:77:f5:75:0e:37:22:b0:ca:b5:53:02:ac:31:7c:d8:
e3:4f:a9:63:87:dc:db:2a:4c:ff:75:c1:35:ea:6b:05:ce:0f:
17:59:e2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:12:25 2026 by rpki-client