Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/aNi0svyCpgLR9qbr5slNhqZZui4.roa
File: aNi0svyCpgLR9qbr5slNhqZZui4.roa (raw, json)
Hash identifier: sxaVc5dUd3tQBZrO+xETdU+soa2Zm49R0p3UmVfLY2A=
Subject key identifier: 68:D8:B4:B2:FC:82:A6:02:D1:F6:A6:EB:E6:C9:4D:86:A6:59:BA:2E
Certificate issuer: /CN=f404325d59e1e3ff83ac3d511ba02f0f8a415884
Certificate serial: 019F23688D6738D302A76995AB62D35D6CB1
Authority key identifier: F4:04:32:5D:59:E1:E3:FF:83:AC:3D:51:1B:A0:2F:0F:8A:41:58:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/aNi0svyCpgLR9qbr5slNhqZZui4.roa
Signing time: Thu 02 Jul 2026 15:18:02 +0000
ROA not before: Thu 02 Jul 2026 15:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199898
IP address blocks: 91.238.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:8d:67:38:d3:02:a7:69:95:ab:62:d3:5d:6c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f404325d59e1e3ff83ac3d511ba02f0f8a415884
Validity
Not Before: Jul 2 15:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68d8b4b2fc82a602d1f6a6ebe6c94d86a659ba2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0e:c3:b6:2f:b5:bb:cf:4d:b6:ae:15:38:e6:
89:21:dc:0d:a8:c5:75:34:ad:bf:01:e5:10:75:ea:
ad:68:74:6d:33:ca:ac:97:fa:77:70:f7:72:fb:ea:
ba:98:e7:71:4e:e3:4e:3d:36:70:d4:95:d2:b6:26:
5d:b4:6d:29:a3:09:25:2e:85:4b:a2:f3:1a:e9:a9:
24:6b:6b:31:7c:b1:71:38:a1:af:f5:8e:af:6a:a2:
2c:fc:5f:9c:f4:8b:e9:49:c6:7a:2a:68:c2:0d:83:
11:97:58:36:78:12:ef:bd:e3:eb:85:06:5e:51:7c:
9c:de:08:47:e9:b2:3c:22:9a:8a:60:73:7e:a9:a5:
b7:54:44:5b:13:d8:77:a4:07:eb:49:0c:fb:5c:35:
5f:2f:a1:e3:23:49:25:34:ed:14:2d:7c:07:a3:86:
29:87:9a:6d:b7:ce:bd:5a:c1:31:51:b1:ea:af:77:
7e:d7:fe:f6:01:10:0c:10:b2:12:5e:a1:a6:85:97:
46:95:b3:8d:68:09:3c:6d:4d:9f:7a:6e:56:d5:fe:
07:fa:cc:b0:92:c8:bc:99:af:ef:59:a0:e6:0f:26:
83:52:b6:2d:63:eb:9f:44:18:00:e6:4d:44:4f:54:
42:8e:fe:5d:15:6e:98:ee:7d:7c:21:3b:1e:54:d9:
6f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D8:B4:B2:FC:82:A6:02:D1:F6:A6:EB:E6:C9:4D:86:A6:59:BA:2E
X509v3 Authority Key Identifier:
keyid:F4:04:32:5D:59:E1:E3:FF:83:AC:3D:51:1B:A0:2F:0F:8A:41:58:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/aNi0svyCpgLR9qbr5slNhqZZui4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.251.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:7b:8f:a5:61:ca:01:84:81:a3:04:7a:14:72:5c:18:78:b7:
05:8c:9a:39:9a:63:ef:ac:5e:ea:fa:2c:f7:02:0b:79:f6:bd:
30:b7:39:b6:0b:8e:d5:dd:9d:c8:f9:6c:8f:91:9b:80:b1:86:
6c:19:a1:3d:31:14:ff:21:cb:11:15:17:bb:b1:c2:d9:20:74:
40:4c:c1:85:b1:09:53:3f:2f:78:57:d3:d4:b2:e0:f9:2b:36:
dd:25:ad:ce:7d:9d:68:89:1d:bd:f5:e6:02:e2:e7:b7:64:c9:
88:5f:af:cd:25:b2:6b:ee:e0:5a:b8:df:b1:4c:50:1a:79:19:
ad:d8:4a:31:c4:92:c8:1f:17:d8:17:b6:d2:a9:8a:ae:3c:a3:
44:c9:09:d9:79:11:19:8b:91:24:ff:12:fd:ac:47:50:8a:35:
a3:0f:47:00:bc:b8:7a:c3:36:37:9a:10:05:de:6d:b0:7b:fd:
6d:e3:3c:e4:ff:29:cd:7b:0d:35:4c:d3:a4:37:4a:f4:1d:41:
1d:7d:d5:e3:be:e7:52:3a:0d:9c:44:a4:a0:13:27:f8:e4:e0:
46:10:f5:a2:aa:2e:0e:dc:ef:ed:48:14:17:e6:1c:ca:4d:e5:
5e:00:4d:30:3c:79:12:73:77:77:44:d9:c2:fc:c6:83:d0:40:
12:93:2c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:48 2026 by rpki-client