Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/69a0db-c0ff-4309-8614-374e1c3c47fc/1/1-TYjRHz_fKdv_9tsx64WCTai3i0.roa
File: 1-TYjRHz_fKdv_9tsx64WCTai3i0.roa (raw, json)
Hash identifier: qVMDEsPs/TctuezgQ1/CjrI3iv8JmFTNh7JgdLT7Fzg=
Subject key identifier: F9:36:23:44:7C:FF:7C:A7:6F:FF:DB:6C:C7:AE:16:09:36:A2:DE:2D
Certificate issuer: /CN=e3219d5af80fa21754725854ae01190cef4d48e4
Certificate serial: 019E35825DA2D3A320E4CEC864000D58173C
Authority key identifier: E3:21:9D:5A:F8:0F:A2:17:54:72:58:54:AE:01:19:0C:EF:4D:48:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4yGdWvgPohdUclhUrgEZDO9NSOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/69a0db-c0ff-4309-8614-374e1c3c47fc/1/1-TYjRHz_fKdv_9tsx64WCTai3i0.roa
Signing time: Sun 17 May 2026 10:36:36 +0000
ROA not before: Sun 17 May 2026 10:36:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56375
IP address blocks: 91.224.110.0/23 maxlen: 23
91.224.110.0/24 maxlen: 24
91.224.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/69a0db-c0ff-4309-8614-374e1c3c47fc/1/4yGdWvgPohdUclhUrgEZDO9NSOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/69a0db-c0ff-4309-8614-374e1c3c47fc/1/4yGdWvgPohdUclhUrgEZDO9NSOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4yGdWvgPohdUclhUrgEZDO9NSOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:35:82:5d:a2:d3:a3:20:e4:ce:c8:64:00:0d:58:17:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3219d5af80fa21754725854ae01190cef4d48e4
Validity
Not Before: May 17 10:36:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f93623447cff7ca76fffdb6cc7ae160936a2de2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:19:fc:1b:a8:28:fb:4b:ad:7e:6f:78:df:91:
1d:a0:cf:f6:f1:ba:ef:47:de:ca:55:c7:b6:dd:e0:
8a:09:29:75:2e:2c:38:56:cb:8f:70:47:05:80:42:
86:47:9c:e3:a3:71:d5:81:18:1d:9f:02:13:9d:cf:
df:50:1d:40:d2:0c:46:47:0a:7c:f3:80:1c:c9:8f:
09:7b:56:6c:83:6c:06:e8:80:e3:18:4b:0a:b9:a3:
87:ec:4a:03:91:07:91:95:de:56:a6:06:41:32:49:
c4:05:00:71:0a:5d:bd:07:59:33:27:05:97:78:b0:
e2:24:e2:fc:e0:29:0e:b5:07:e8:34:68:ad:99:1c:
73:30:93:d3:99:76:03:f4:ac:98:1f:c1:7a:3e:45:
4b:0d:4a:1f:cd:34:34:2c:f1:fb:fa:59:9e:f0:69:
e8:4f:27:86:49:dd:ee:2d:37:a2:52:85:59:fb:a0:
32:11:0a:a7:7a:7a:12:16:43:51:7e:97:c0:ce:a6:
db:76:d3:24:2f:1f:4e:51:b4:d9:e8:38:f0:5e:c9:
b3:a5:40:fa:83:37:5a:fd:22:34:aa:96:3b:99:ce:
48:91:17:42:76:49:ab:e0:e9:c0:44:0c:19:45:15:
d7:f0:ab:91:1f:fd:62:f5:a2:3e:8e:53:dc:8b:1f:
97:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:36:23:44:7C:FF:7C:A7:6F:FF:DB:6C:C7:AE:16:09:36:A2:DE:2D
X509v3 Authority Key Identifier:
keyid:E3:21:9D:5A:F8:0F:A2:17:54:72:58:54:AE:01:19:0C:EF:4D:48:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4yGdWvgPohdUclhUrgEZDO9NSOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/69a0db-c0ff-4309-8614-374e1c3c47fc/1/1-TYjRHz_fKdv_9tsx64WCTai3i0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/69a0db-c0ff-4309-8614-374e1c3c47fc/1/4yGdWvgPohdUclhUrgEZDO9NSOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.110.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:f1:88:27:15:d6:53:2c:f1:a9:9e:9a:46:0b:81:d2:58:f5:
5d:c3:16:ac:9e:c9:36:c0:4c:d4:aa:e3:2f:75:fa:4f:51:e3:
b4:b7:d6:d7:21:6b:77:67:99:c9:75:f9:dc:35:20:09:04:38:
74:ca:0f:59:74:16:7d:fa:03:a8:90:21:78:12:74:1e:4a:4c:
4b:a6:4b:46:a5:1a:b3:c5:24:9e:95:5a:fb:d3:67:ef:34:44:
84:66:c6:d4:28:ac:4e:5f:46:59:0f:f1:60:f4:bb:8d:cb:a8:
48:d1:4d:57:b8:83:3c:ad:3b:64:66:5e:27:dd:bb:d0:c3:76:
6e:00:33:12:1e:ca:c2:a4:ae:c4:33:ec:9a:b0:6b:54:66:e6:
e3:53:21:24:4f:ae:64:47:12:18:d3:4b:a2:7b:09:81:4a:84:
a1:67:43:ab:34:0d:d4:06:8e:41:a9:57:f7:12:b5:ea:e2:6b:
a8:b4:c9:16:ff:21:e3:50:1c:cd:6d:d7:6d:1e:e0:92:9b:8c:
5c:31:e1:a4:94:ca:1b:7e:e2:4b:f4:04:08:b5:59:ca:9a:5f:
c0:d9:4e:e7:68:fc:4b:a5:aa:b0:57:a9:ed:b3:56:37:6a:e6:
a3:fe:f2:55:67:07:01:49:d6:f5:70:b0:df:a8:c5:0b:48:6f:
d0:82:df:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:45:55 2026 by rpki-client