Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/irP9bYf5zGAn2e7rjGd5kQfuJyc.roa
File: irP9bYf5zGAn2e7rjGd5kQfuJyc.roa (raw, json)
Hash identifier: 3LCQkrcd7o461urrnLpFw5Ns2dpHAvYJPmlWyFkgjCQ=
Subject key identifier: 8A:B3:FD:6D:87:F9:CC:60:27:D9:EE:EB:8C:67:79:91:07:EE:27:27
Certificate issuer: /CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Certificate serial: 01A0CE4E436EA405B338FF4B82A5E01995CC
Authority key identifier: 7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/irP9bYf5zGAn2e7rjGd5kQfuJyc.roa
Signing time: Wed 23 Sep 2026 12:47:10 +0000
ROA not before: Wed 23 Sep 2026 12:47:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12552
IP address blocks: 91.135.34.0/24 maxlen: 24
2001:8c0:3403::/48 maxlen: 48
2001:8c0:3403::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:4e:43:6e:a4:05:b3:38:ff:4b:82:a5:e0:19:95:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Validity
Not Before: Sep 23 12:47:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ab3fd6d87f9cc6027d9eeeb8c67799107ee2727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1e:7b:01:f3:5a:fd:96:61:8a:c7:2e:ca:45:
69:9a:1a:85:d4:fa:0a:a4:12:93:38:af:f4:f9:45:
6c:00:84:a5:bf:aa:a5:3f:5c:2d:75:eb:f2:a7:ce:
98:9a:00:4d:d1:55:dc:f6:b0:49:c0:02:0b:cf:f5:
00:78:91:f8:24:12:df:6d:55:8b:85:e6:01:32:b2:
24:2e:5e:7e:1e:c9:3c:23:77:d2:af:cf:57:2d:2c:
6c:e8:c1:25:be:d2:86:29:d3:0d:b9:2e:8d:9e:66:
2a:62:c3:b6:79:28:fc:26:26:d0:9b:20:e1:a6:1b:
8d:46:f4:c8:4e:41:55:e1:58:8f:2d:57:96:8f:0e:
b2:89:a2:4e:83:50:37:2e:9c:b6:23:9c:d7:54:8e:
b3:14:3b:cc:6f:af:c3:0c:7d:94:7f:2e:65:8f:dd:
4d:5e:35:4e:e0:2a:59:ef:91:68:d1:80:26:6b:77:
49:5b:c2:f3:3e:4f:59:09:aa:98:90:ba:2d:7f:c6:
c8:4b:d8:b0:31:c9:6a:db:21:56:1c:df:08:93:9f:
cc:85:ae:2f:7c:01:5e:d9:67:58:8b:da:c4:81:8e:
07:57:5c:fd:70:bb:4b:35:5c:72:6e:2b:8c:7f:00:
21:34:cc:94:3a:6f:7c:b5:9b:7e:25:18:ad:eb:84:
09:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B3:FD:6D:87:F9:CC:60:27:D9:EE:EB:8C:67:79:91:07:EE:27:27
X509v3 Authority Key Identifier:
keyid:7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/irP9bYf5zGAn2e7rjGd5kQfuJyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.135.34.0/24
IPv6:
2001:8c0:3403::/48
Signature Algorithm: sha256WithRSAEncryption
c3:ec:ff:7e:e1:69:dd:e5:0b:58:c4:56:06:27:ed:ad:c9:33:
17:4c:2d:57:59:fc:c8:93:dd:42:7b:98:4f:6c:4c:e9:9a:9c:
e2:0a:1f:60:e2:53:e7:2a:b5:f5:93:8d:02:9a:65:ca:54:54:
ab:03:80:42:92:86:6f:15:d6:80:20:87:a3:3e:f7:a9:51:b0:
99:fe:40:75:3f:b1:2b:1b:78:ec:3a:f1:28:f0:40:d3:13:ca:
91:93:9e:c2:2e:69:37:46:0b:41:45:93:f5:a1:84:aa:4c:ec:
b5:55:99:7b:8e:d8:a8:74:9a:0f:30:dc:11:4f:ba:11:d3:df:
af:5d:64:fa:46:2f:b0:33:2e:f2:55:43:ec:e7:ad:96:41:42:
42:2a:46:01:55:50:c5:71:5e:ed:82:4e:c9:05:f6:0b:16:2c:
0a:a6:dd:a3:e0:53:d0:14:5b:2a:b2:73:6f:59:bf:7a:f6:e9:
a8:96:49:f1:4d:1d:ab:fa:10:8b:fb:2d:f8:49:1a:f8:50:79:
5b:63:10:95:94:fc:2c:43:4a:49:ea:a8:f7:49:d2:d3:ef:46:
29:e0:06:9d:bf:a0:be:7b:62:4a:3e:aa:f8:2d:3a:50:15:a1:
09:0d:3f:ef:4c:29:17:59:cb:6f:f7:5f:7b:7f:71:ae:e2:d6:
37:00:06:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:55:50 2026 by rpki-client