Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/p9Ga5zssyIhFHrJi5MZ47Pyznvo.roa
File: p9Ga5zssyIhFHrJi5MZ47Pyznvo.roa (raw, json)
Hash identifier: Ott2sOPVA987hz4zVP2oRFvzjlidIeKw8Px9ILdJfjs=
Subject key identifier: A7:D1:9A:E7:3B:2C:C8:88:45:1E:B2:62:E4:C6:78:EC:FC:B3:9E:FA
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 019F38081DBCA9F7AAC20FF3C633978DA4D6
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/p9Ga5zssyIhFHrJi5MZ47Pyznvo.roa
Signing time: Mon 06 Jul 2026 15:24:43 +0000
ROA not before: Mon 06 Jul 2026 15:24:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197170
IP address blocks: 91.92.40.0/24 maxlen: 24
91.92.42.0/24 maxlen: 24
91.92.47.0/24 maxlen: 24
93.152.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:38:08:1d:bc:a9:f7:aa:c2:0f:f3:c6:33:97:8d:a4:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jul 6 15:24:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7d19ae73b2cc888451eb262e4c678ecfcb39efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a6:59:f6:ee:96:3f:d3:84:c4:ea:77:3d:c3:
08:1d:d1:49:74:5e:9d:da:8f:c2:e8:4d:89:18:ce:
fb:2c:74:75:f2:99:43:71:04:8f:4a:7b:04:3a:95:
59:2c:de:48:e4:03:c8:70:51:c2:6f:0b:7c:8c:2e:
7f:62:79:43:67:65:dc:c5:24:0b:5a:39:e4:13:d1:
ea:0b:87:f7:87:31:a0:ec:61:c7:8b:bc:69:bb:c5:
34:6f:1e:7f:fd:b7:52:18:dd:36:9f:3f:e5:ea:59:
6f:a7:fa:e9:f6:df:f7:99:1b:d4:9c:e2:7d:b4:1b:
f8:e6:79:b0:92:cb:e8:59:f8:11:4e:67:be:c9:b3:
a8:76:33:c2:82:1d:84:a0:02:9b:4d:64:f4:0a:f2:
2a:ce:45:ee:8c:30:b7:87:88:4a:37:43:49:df:02:
ac:91:1a:8a:5b:f1:d2:0b:e2:b7:5f:61:bd:1b:af:
e1:ae:b6:14:ec:c9:60:80:8d:21:08:01:31:a8:c0:
bc:fe:2b:7b:ac:f6:43:e5:a6:1c:15:50:34:8b:8c:
82:0f:c0:52:90:cd:87:e9:a9:04:36:49:57:a6:b4:
48:77:68:f5:67:f6:f7:29:86:b7:39:a3:29:44:0f:
aa:63:92:33:ad:5d:8b:b5:5c:18:c2:ca:a4:19:ea:
b1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D1:9A:E7:3B:2C:C8:88:45:1E:B2:62:E4:C6:78:EC:FC:B3:9E:FA
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/p9Ga5zssyIhFHrJi5MZ47Pyznvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.40.0/24
91.92.42.0/24
91.92.47.0/24
93.152.221.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:2b:b0:34:6e:62:66:c8:a0:7a:3e:57:59:01:78:c5:b2:8a:
57:8a:fd:76:fb:3e:b1:df:af:33:f3:fe:8b:5b:f0:3b:4b:80:
9c:9b:ff:2f:6b:73:26:f1:56:a8:97:3b:e9:ac:17:d4:0a:29:
a2:5d:cd:1a:21:ae:29:e1:67:f1:14:c2:35:90:39:1d:c0:f4:
27:72:32:44:63:4a:9a:44:84:47:d4:4c:20:76:a1:94:1b:05:
14:49:86:aa:cc:35:53:5d:ee:09:f4:7b:63:00:58:4a:51:43:
0b:0d:4c:8d:a0:2a:ef:2f:8b:53:fe:bd:1b:a0:02:c6:3a:7e:
f4:96:c3:ce:31:a6:4e:ab:31:64:33:68:be:d1:51:69:96:87:
37:2f:cd:e4:1f:91:42:fe:e7:7b:2a:15:33:5d:30:bc:1b:66:
a2:c8:fa:4b:9f:18:84:ea:8e:3b:8d:f2:b7:34:3e:d5:dd:fe:
51:91:f0:45:60:6d:cb:3c:12:5d:1d:3b:6e:c1:65:b2:4a:31:
4d:bb:37:30:4d:67:60:9f:a4:6e:fd:dc:d1:22:d9:c2:75:75:
44:37:bf:0a:f8:a8:a2:63:6b:9c:af:4d:b5:37:c0:53:82:fe:
e2:c3:51:5e:fd:7a:22:16:65:8b:dd:e9:46:88:ba:93:06:c5:
f9:d7:10:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:29:43 2026 by rpki-client