Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/nOlDfA2DDhYrUly0r7NEJHNnWhU.roa
File: nOlDfA2DDhYrUly0r7NEJHNnWhU.roa (raw, json)
Hash identifier: G0YWbjJ72zY0hRrezDee8xf6DFQWACH1YjwYDJdghRo=
Subject key identifier: 9C:E9:43:7C:0D:83:0E:16:2B:52:5C:B4:AF:B3:44:24:73:67:5A:15
Certificate issuer: /CN=110e56177308c20c42fbf42f310f4c0ef6b27890
Certificate serial: 019F48F1A5009966968FFCB9F1AA5EA9E025
Authority key identifier: 11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/nOlDfA2DDhYrUly0r7NEJHNnWhU.roa
Signing time: Thu 09 Jul 2026 22:13:43 +0000
ROA not before: Thu 09 Jul 2026 22:13:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202665
IP address blocks: 91.206.64.0/23 maxlen: 23
91.206.64.0/24 maxlen: 24
91.206.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:48:f1:a5:00:99:66:96:8f:fc:b9:f1:aa:5e:a9:e0:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=110e56177308c20c42fbf42f310f4c0ef6b27890
Validity
Not Before: Jul 9 22:13:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ce9437c0d830e162b525cb4afb3442473675a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:89:c1:a3:68:94:18:bf:7a:79:e3:79:ab:25:
b9:08:7a:67:19:65:fc:32:0c:63:91:74:93:2e:60:
98:f2:40:c5:4c:98:01:80:1c:62:44:fc:c2:35:a6:
b7:cf:dc:34:86:23:68:7b:24:d5:76:a5:7e:f6:b2:
90:50:a1:11:96:01:85:a5:d4:69:aa:fe:92:52:0c:
f5:d8:95:ce:99:c8:b6:ca:f6:0b:cf:ce:25:5c:73:
92:f8:ad:13:b7:cb:19:5c:18:e6:c4:b9:2d:b5:63:
c5:fe:fd:24:22:60:92:62:d2:65:d8:da:72:36:0b:
00:7e:9f:1f:d3:c6:dd:46:03:0c:8b:ac:88:d5:e6:
bd:97:6f:5c:4e:f9:35:68:2a:45:a9:24:fb:aa:41:
3f:31:3c:ea:09:0e:3d:ce:0c:9c:a1:8d:27:85:2a:
23:85:f9:6b:38:56:72:2b:c9:12:10:6e:64:96:e6:
ef:27:0a:b0:5d:9e:55:2b:a2:16:13:5b:87:59:c9:
ff:25:b8:9a:70:cd:cf:12:dd:df:80:fc:20:df:49:
61:bf:0d:98:f3:f2:e0:aa:e1:37:55:48:8c:e6:b1:
5d:b5:0e:27:72:b5:80:a6:2e:c1:da:6a:94:49:65:
03:d9:74:9e:ec:32:0c:fe:9d:37:61:55:d2:46:b4:
ba:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E9:43:7C:0D:83:0E:16:2B:52:5C:B4:AF:B3:44:24:73:67:5A:15
X509v3 Authority Key Identifier:
keyid:11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/nOlDfA2DDhYrUly0r7NEJHNnWhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.64.0/23
Signature Algorithm: sha256WithRSAEncryption
97:f0:d8:79:9f:57:62:f3:bc:a0:0c:e3:7b:67:77:ae:11:84:
f7:23:ef:ee:ba:5a:0b:4b:b3:a7:41:2e:5c:02:0e:21:30:1f:
a6:56:2f:b4:11:05:07:bb:36:a6:a3:50:60:07:4c:b8:f3:c2:
36:d1:eb:f3:4e:f2:f4:f7:3d:d5:6e:4f:2f:c6:23:ac:e3:1f:
5b:5b:ed:3e:d5:c3:1f:8e:61:18:83:44:fa:ae:b8:96:91:8e:
4f:de:20:31:d9:79:15:f4:33:83:7a:58:a7:53:3f:a5:c3:8b:
c3:dc:ce:d5:de:f5:9f:f8:2f:4f:49:6b:7d:02:78:29:22:dd:
57:b2:64:c2:43:4f:ef:ad:02:01:b2:ca:8c:bc:83:5b:94:82:
0d:30:85:6e:07:53:38:48:5d:e4:4f:48:35:6c:61:4b:6b:01:
1e:02:93:da:63:62:bd:82:af:14:ea:2e:de:cc:0a:52:68:de:
59:84:e5:f6:03:71:f9:5d:d7:8e:c9:bd:d2:09:da:72:6c:31:
6a:25:81:07:51:ae:5c:ab:0d:9c:2c:21:2d:8f:c7:a9:3f:83:
b5:b8:42:1f:3d:66:8b:54:3d:64:17:fc:40:d7:7f:16:a8:a4:
62:c6:0b:00:99:23:fe:45:00:7e:d4:e7:d1:57:68:81:3b:13:
6a:d1:6d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:59:18 2026 by rpki-client