Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/n3lR-lpuGAiXgRrmixMN2OPkEaw.roa
File: n3lR-lpuGAiXgRrmixMN2OPkEaw.roa (raw, json)
Hash identifier: s10of/A82nI3tslY3AoBVKAzN9hCZPMlXpS+Trtgfpw=
Subject key identifier: 9F:79:51:FA:5A:6E:18:08:97:81:1A:E6:8B:13:0D:D8:E3:E4:11:AC
Certificate issuer: /CN=0f712ba14c42b22896157153578a6ddcded3dc35
Certificate serial: 019F236876C1960E70E5CD53407052A1F492
Authority key identifier: 0F:71:2B:A1:4C:42:B2:28:96:15:71:53:57:8A:6D:DC:DE:D3:DC:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3EroUxCsiiWFXFTV4pt3N7T3DU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/n3lR-lpuGAiXgRrmixMN2OPkEaw.roa
Signing time: Thu 02 Jul 2026 15:17:56 +0000
ROA not before: Thu 02 Jul 2026 15:17:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52074
IP address blocks: 91.221.218.0/24 maxlen: 24
91.221.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/D3EroUxCsiiWFXFTV4pt3N7T3DU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/D3EroUxCsiiWFXFTV4pt3N7T3DU.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3EroUxCsiiWFXFTV4pt3N7T3DU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:76:c1:96:0e:70:e5:cd:53:40:70:52:a1:f4:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f712ba14c42b22896157153578a6ddcded3dc35
Validity
Not Before: Jul 2 15:17:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f7951fa5a6e180897811ae68b130dd8e3e411ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:eb:d9:07:83:1a:9e:d7:61:e7:81:df:15:2f:
07:7a:dd:79:e3:4a:3d:10:93:73:fd:0b:f4:08:ce:
0d:02:32:ed:cb:02:d7:ac:de:6e:88:a8:f4:0a:ca:
ce:9c:53:80:41:9c:ad:15:0f:12:8b:eb:e1:a8:d4:
2c:44:8e:cf:1c:f0:3c:c9:57:54:25:e1:fb:fb:f8:
a5:30:44:e5:8c:3f:f8:58:d8:d2:00:18:34:dd:d4:
38:0f:bf:09:0b:ee:9b:b7:66:ed:d3:ad:f1:eb:1e:
e3:19:93:f0:7d:ed:5f:f6:81:21:48:44:b9:3c:ed:
fd:e1:54:bc:c8:22:53:cc:0f:e0:1f:18:a3:b5:a1:
00:7e:58:9f:ba:b5:b5:39:b0:4d:3a:77:74:07:c1:
59:b9:f2:2d:94:22:60:db:34:44:27:d6:74:5e:7a:
7e:39:51:af:d3:6f:e4:e3:11:94:94:f0:06:bb:cc:
a1:22:6a:41:8a:f6:3b:cd:f1:e0:5e:b4:e4:bd:58:
17:1b:16:5f:59:22:d4:e3:5f:ea:53:d3:c1:0f:75:
5c:8c:58:0e:19:17:51:bb:e0:28:56:41:c8:27:7b:
c6:98:d8:2b:ec:b9:c5:3d:39:eb:65:4e:18:3c:5e:
13:cc:04:01:2a:ec:4a:f6:07:37:57:10:f9:1c:45:
a2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:79:51:FA:5A:6E:18:08:97:81:1A:E6:8B:13:0D:D8:E3:E4:11:AC
X509v3 Authority Key Identifier:
keyid:0F:71:2B:A1:4C:42:B2:28:96:15:71:53:57:8A:6D:DC:DE:D3:DC:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3EroUxCsiiWFXFTV4pt3N7T3DU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/n3lR-lpuGAiXgRrmixMN2OPkEaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/D3EroUxCsiiWFXFTV4pt3N7T3DU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.218.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:0a:f0:ce:b3:27:fe:4c:cf:25:e7:da:0c:f5:5b:7a:21:2d:
87:47:cc:44:e5:ba:04:f1:39:aa:ca:95:cb:1e:71:e4:de:79:
ac:7c:cc:13:13:60:f7:67:b0:8f:1a:1a:97:7f:bc:cc:c7:46:
0f:52:f4:c0:77:f1:33:d4:d3:e4:4d:be:a8:5b:f1:44:94:13:
cf:d9:ac:d0:6e:e4:27:fd:e7:1b:e8:90:2a:29:2e:8a:3a:c5:
76:1e:03:e6:d7:a4:c5:c0:30:a9:98:e8:8f:b5:c2:39:6a:90:
98:4d:a1:88:4f:28:89:6e:7b:a9:4d:06:4c:7d:fa:48:85:64:
2a:e3:d8:b1:fe:b7:b8:ef:26:d8:d9:ef:c3:21:8a:fa:bd:b1:
de:97:95:40:6c:14:c1:33:33:ae:a1:0b:ba:85:c6:0b:0c:23:
f7:45:15:2c:2b:29:91:db:4b:3b:3c:5c:6b:cf:a9:67:78:bc:
88:33:ad:2f:e6:15:8c:20:82:63:91:b4:af:3b:d8:d3:85:58:
b0:10:60:23:07:09:90:ab:2f:15:aa:c6:22:04:53:e9:e9:60:
80:83:22:2f:bc:4d:12:c3:6f:52:19:c3:d6:97:28:30:dd:cb:
7d:1a:d5:69:06:41:6a:44:7c:6f:30:88:33:67:1e:f0:e9:92:
7e:9b:04:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:48 2026 by rpki-client