Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/fJZnROmLnxIif5r6LfrCNlQM388.roa
File: fJZnROmLnxIif5r6LfrCNlQM388.roa (raw, json)
Hash identifier: omiAcWGmAC/XgzTcHB7uKlZ0hHthzPTQ0m/SvrKJDHs=
Subject key identifier: 7C:96:67:44:E9:8B:9F:12:22:7F:9A:FA:2D:FA:C2:36:54:0C:DF:CF
Certificate issuer: /CN=0f62a07378223ace56a84cefd3078228cb0be52e
Certificate serial: 019F67673BD5ACA449C4EEED5F8103F7359B
Authority key identifier: 0F:62:A0:73:78:22:3A:CE:56:A8:4C:EF:D3:07:82:28:CB:0B:E5:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Kgc3giOs5WqEzv0weCKMsL5S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/fJZnROmLnxIif5r6LfrCNlQM388.roa
Signing time: Wed 15 Jul 2026 20:10:46 +0000
ROA not before: Wed 15 Jul 2026 20:10:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209740
IP address blocks: 91.90.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/D2Kgc3giOs5WqEzv0weCKMsL5S4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/D2Kgc3giOs5WqEzv0weCKMsL5S4.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2Kgc3giOs5WqEzv0weCKMsL5S4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:67:67:3b:d5:ac:a4:49:c4:ee:ed:5f:81:03:f7:35:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f62a07378223ace56a84cefd3078228cb0be52e
Validity
Not Before: Jul 15 20:10:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c966744e98b9f12227f9afa2dfac236540cdfcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:55:be:67:a3:cb:01:1e:1a:32:ac:b0:35:b5:
8f:5f:4b:a0:16:b3:50:f2:9e:24:c7:73:04:04:76:
b4:43:7f:f0:11:00:c1:b0:27:f0:49:44:23:5b:e0:
f2:6e:92:f8:31:3e:07:71:a4:5e:04:bb:9e:45:b8:
9f:54:e7:8a:1e:96:a8:8c:d4:64:fa:33:26:5b:32:
f2:f4:85:1d:f5:f1:23:f2:2c:6d:8d:71:3b:5f:b3:
c0:ee:80:70:bf:e2:cb:16:4b:16:8e:d4:c7:90:57:
22:a2:62:fa:21:9b:c3:a3:30:75:76:a7:ed:10:f7:
0b:11:c2:c8:2b:9d:f5:6f:89:f9:a8:7a:a0:68:c0:
28:6e:1e:85:7c:92:39:d4:45:fb:c6:f3:2e:11:26:
32:50:c2:e2:75:95:65:f0:86:a0:96:72:3f:16:62:
b3:e9:13:e4:11:68:21:f7:9a:15:c9:e3:f8:0f:df:
93:b8:e6:a9:c6:5c:3f:50:b3:47:8d:a3:1f:6e:56:
fc:6e:47:86:a5:f5:e8:2b:4f:a5:3b:4a:ec:f0:5e:
54:28:77:99:43:e1:b5:65:69:05:5c:53:4c:09:d8:
b7:9d:05:4f:7a:55:5b:ed:56:8e:a4:63:3b:1a:75:
1b:d2:ad:cb:19:4a:04:57:41:20:18:42:93:79:6c:
49:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:96:67:44:E9:8B:9F:12:22:7F:9A:FA:2D:FA:C2:36:54:0C:DF:CF
X509v3 Authority Key Identifier:
keyid:0F:62:A0:73:78:22:3A:CE:56:A8:4C:EF:D3:07:82:28:CB:0B:E5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Kgc3giOs5WqEzv0weCKMsL5S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/fJZnROmLnxIif5r6LfrCNlQM388.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/D2Kgc3giOs5WqEzv0weCKMsL5S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.90.87.0/24
Signature Algorithm: sha256WithRSAEncryption
04:f7:45:6b:1e:6c:13:86:90:ae:6b:87:18:87:19:ff:a7:5f:
a7:da:3a:e4:47:38:19:a4:63:65:12:89:05:a7:0a:b8:f5:f6:
bb:db:86:35:71:bb:a1:34:ca:36:92:f0:4e:e5:7b:b8:24:c6:
51:1e:e1:99:05:fa:30:7d:57:cc:52:d4:d9:8a:27:e3:26:2b:
42:a0:7f:57:ef:c6:d7:4c:58:c7:74:1e:0b:87:de:cc:8f:4c:
73:6e:63:0d:f1:bb:f8:ff:d6:c5:62:f6:9f:97:60:72:a3:a6:
d1:58:3e:5c:fe:33:08:89:24:a4:93:e0:10:58:a9:ce:fd:ac:
94:2f:48:3a:62:c8:15:4e:78:a1:ff:0c:97:b2:a6:72:9c:72:
b4:47:9e:d2:9f:ca:d4:fd:1f:f9:ee:32:88:ee:01:15:fc:e3:
5c:25:3c:da:bd:31:54:f7:44:19:61:36:be:90:de:ac:93:ba:
52:05:6e:ea:79:bb:b0:5e:6f:d6:be:70:52:56:4c:7d:51:e2:
1f:78:76:ed:ca:e6:cb:90:4c:10:c2:91:c2:e1:7b:af:e9:51:
f4:fd:67:ac:33:7c:a2:82:52:d0:26:26:ac:59:d2:3a:71:8c:
99:04:fb:e6:7b:06:ea:da:af:ea:19:30:2c:54:4a:1b:27:31:
db:cb:77:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:00:20 2026 by rpki-client