Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6afe84-c60f-4b0c-95ae-1450c9465d7c/1/aRfGJPb_gIVfmYmNcjO8YkYkLD0.roa
File: aRfGJPb_gIVfmYmNcjO8YkYkLD0.roa (raw, json)
Hash identifier: WP2Dcdi3GBMOmI0NK/vj8JV6PzwkSo14hHtbf3df0KQ=
Subject key identifier: 69:17:C6:24:F6:FF:80:85:5F:99:89:8D:72:33:BC:62:46:24:2C:3D
Certificate issuer: /CN=a146a49c55c30327f8ad220a4e99b9dc6e63e13c
Certificate serial: 019F6AD1902D282F931936A4E8999FD77221
Authority key identifier: A1:46:A4:9C:55:C3:03:27:F8:AD:22:0A:4E:99:B9:DC:6E:63:E1:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oUaknFXDAyf4rSIKTpm53G5j4Tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6afe84-c60f-4b0c-95ae-1450c9465d7c/1/aRfGJPb_gIVfmYmNcjO8YkYkLD0.roa
Signing time: Thu 16 Jul 2026 12:05:46 +0000
ROA not before: Thu 16 Jul 2026 12:05:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33965
IP address blocks: 91.213.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6afe84-c60f-4b0c-95ae-1450c9465d7c/1/oUaknFXDAyf4rSIKTpm53G5j4Tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6afe84-c60f-4b0c-95ae-1450c9465d7c/1/oUaknFXDAyf4rSIKTpm53G5j4Tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/oUaknFXDAyf4rSIKTpm53G5j4Tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6a:d1:90:2d:28:2f:93:19:36:a4:e8:99:9f:d7:72:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a146a49c55c30327f8ad220a4e99b9dc6e63e13c
Validity
Not Before: Jul 16 12:05:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6917c624f6ff80855f99898d7233bc6246242c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:47:64:0d:27:63:74:09:27:21:ff:3f:42:8e:
81:af:b6:77:e1:f4:f6:2b:ee:83:5d:01:b8:0b:6b:
be:5b:05:9b:b1:be:a8:58:16:60:61:79:80:d9:6b:
23:a8:99:59:8d:19:55:a2:9c:80:6b:f7:a0:c5:52:
ad:63:cb:11:42:1d:54:0f:9d:3b:14:a3:9a:c1:0c:
54:2e:ef:95:6e:ae:68:a8:d9:c6:a8:f6:5b:2c:4a:
2b:7c:a2:d7:a7:f1:98:c8:70:de:f6:ca:e9:c8:f1:
ee:54:85:41:27:a4:f8:5d:d4:ff:83:4c:db:01:92:
41:6c:d6:c5:ed:50:e8:e5:1a:af:c0:fd:ce:29:db:
db:45:d0:6b:9c:f6:71:44:27:70:9d:25:1f:4e:a7:
7e:2d:96:76:9e:b4:fa:62:ee:2f:16:b1:b8:46:15:
80:02:11:03:7a:44:06:43:83:af:fe:09:4f:b0:48:
1f:87:b7:8c:ad:88:df:5a:47:d0:d9:a9:d4:56:4b:
c5:50:bb:e4:b8:3e:67:5c:c3:5f:d4:0d:78:9a:04:
a4:d2:10:a3:45:dc:7f:d3:d5:ea:c1:ab:c8:19:0b:
0b:0a:32:00:1e:56:02:a1:51:72:2a:1c:3d:4c:4c:
3d:de:9a:05:29:0e:26:14:4b:5e:fc:eb:80:20:ca:
db:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:17:C6:24:F6:FF:80:85:5F:99:89:8D:72:33:BC:62:46:24:2C:3D
X509v3 Authority Key Identifier:
keyid:A1:46:A4:9C:55:C3:03:27:F8:AD:22:0A:4E:99:B9:DC:6E:63:E1:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUaknFXDAyf4rSIKTpm53G5j4Tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6afe84-c60f-4b0c-95ae-1450c9465d7c/1/aRfGJPb_gIVfmYmNcjO8YkYkLD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6afe84-c60f-4b0c-95ae-1450c9465d7c/1/oUaknFXDAyf4rSIKTpm53G5j4Tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.194.0/24
Signature Algorithm: sha256WithRSAEncryption
61:e4:3a:77:fb:77:d2:e7:b9:60:d6:7a:89:5d:f9:d2:c7:b6:
94:5d:68:83:0f:93:5b:f1:29:d9:69:8d:9b:33:08:73:c1:ec:
fa:63:e6:82:50:36:ae:ed:05:e7:49:c3:06:b6:83:21:9c:a8:
b8:18:c2:2a:c6:7d:22:ff:15:82:dd:ff:46:b7:b2:ed:1d:bb:
1e:cd:75:7b:6a:57:b9:1d:f0:22:f7:23:ce:eb:b9:58:e2:f6:
f0:e9:c7:8b:61:70:3c:8d:b0:35:4f:0e:ed:20:58:6a:58:6e:
96:f9:79:c8:89:1c:8a:0b:d0:fe:72:cc:58:81:9f:5a:d6:67:
0b:6b:a2:8a:08:f9:21:5e:dd:69:05:6f:9a:ce:1d:f2:4c:67:
a2:7e:0e:c7:49:b8:6c:63:ac:40:c4:9b:06:53:28:16:3f:8e:
88:3d:c8:1b:b0:e9:5c:ee:e3:63:3d:ef:cc:e8:e1:f8:58:a0:
83:11:28:0b:87:ed:41:bd:ad:2e:f9:c2:75:e2:0c:51:f6:7e:
b3:21:ca:b2:76:62:18:a1:ef:eb:7b:d6:5e:d0:70:8a:53:ce:
20:bb:9a:3b:8f:13:e4:13:11:47:6c:cb:75:41:a6:9c:cb:9d:
44:49:81:75:76:08:ba:29:65:4d:c8:41:cd:ed:96:b3:9f:78:
54:c0:0a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:15:41 2026 by rpki-client