Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/1-ALfXNVWrpMtEmbLlIOuoeX0afA.roa
File: 1-ALfXNVWrpMtEmbLlIOuoeX0afA.roa (raw, json)
Hash identifier: rd4jOBWNvS5fQ4jBAM8QD6wQ+VPz5/5NP5L0Zf9qrW4=
Subject key identifier: F8:02:DF:5C:D5:56:AE:93:2D:12:66:CB:94:83:AE:A1:E5:F4:69:F0
Certificate issuer: /CN=d29be0bfa56cc26b76d89d54a328294eaf2b9561
Certificate serial: 019F23684CFE65E2E71E9F953D4FE479B601
Authority key identifier: D2:9B:E0:BF:A5:6C:C2:6B:76:D8:9D:54:A3:28:29:4E:AF:2B:95:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0pvgv6Vswmt22J1UoygpTq8rlWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/1-ALfXNVWrpMtEmbLlIOuoeX0afA.roa
Signing time: Thu 02 Jul 2026 15:17:45 +0000
ROA not before: Thu 02 Jul 2026 15:17:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50358
IP address blocks: 91.241.88.0/22 maxlen: 24
195.191.50.0/23 maxlen: 24
2001:67c:26a0::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/0pvgv6Vswmt22J1UoygpTq8rlWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/0pvgv6Vswmt22J1UoygpTq8rlWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0pvgv6Vswmt22J1UoygpTq8rlWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:4c:fe:65:e2:e7:1e:9f:95:3d:4f:e4:79:b6:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d29be0bfa56cc26b76d89d54a328294eaf2b9561
Validity
Not Before: Jul 2 15:17:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f802df5cd556ae932d1266cb9483aea1e5f469f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9a:96:8c:96:79:64:e5:0c:ed:12:d9:eb:ab:
0d:14:78:98:ac:e3:96:10:c3:ff:0e:2c:1b:18:55:
38:e6:cd:2c:13:cf:94:f7:35:f5:39:2b:bf:15:40:
ce:0c:b5:c5:58:51:63:1f:b1:93:64:26:6e:86:bd:
ec:65:11:15:04:47:df:e0:6d:f3:20:95:c0:cf:bf:
f6:08:20:e9:ed:4c:94:71:5c:54:ab:41:85:e1:90:
b7:48:e7:2f:c3:d3:39:07:f6:1f:3e:03:25:86:34:
38:68:ae:86:81:bc:00:a6:7d:ba:cb:f3:76:20:d5:
c1:13:ca:e2:b8:cc:67:29:17:b7:45:da:88:ea:ae:
3f:51:2f:81:78:ba:3d:7f:17:f4:f2:2f:27:cd:ba:
61:8a:03:54:47:8d:fe:46:6d:59:28:d9:a0:57:dc:
d4:5d:44:cc:b7:bb:06:d9:39:88:f6:10:a4:ef:12:
c6:87:96:98:8f:73:f5:8a:35:57:63:ec:65:f3:cc:
d2:9d:1a:65:44:73:c5:25:29:6f:f3:1d:1d:d8:7f:
91:49:51:c2:5f:f9:5c:8b:30:0b:1c:dc:44:be:e4:
1e:c7:af:d0:86:69:35:38:14:42:d5:d3:7f:a3:da:
3e:93:6c:95:a7:d9:08:f2:de:c3:a2:4d:d0:84:c2:
a0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:02:DF:5C:D5:56:AE:93:2D:12:66:CB:94:83:AE:A1:E5:F4:69:F0
X509v3 Authority Key Identifier:
keyid:D2:9B:E0:BF:A5:6C:C2:6B:76:D8:9D:54:A3:28:29:4E:AF:2B:95:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0pvgv6Vswmt22J1UoygpTq8rlWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/1-ALfXNVWrpMtEmbLlIOuoeX0afA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/0pvgv6Vswmt22J1UoygpTq8rlWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.88.0/22
195.191.50.0/23
IPv6:
2001:67c:26a0::/48
Signature Algorithm: sha256WithRSAEncryption
4e:90:58:df:21:6d:dc:2b:8b:99:ca:b9:ed:88:01:b6:ce:0c:
2e:e3:4f:8d:58:75:a5:2b:df:84:44:9a:a2:d9:85:df:ce:48:
8d:58:09:b1:10:9f:6a:3f:f9:8f:b1:6d:6d:47:60:d1:74:76:
8c:a8:3f:45:ac:f0:c1:16:e2:9a:22:82:5e:90:cf:69:b9:b3:
74:e5:a6:4b:0d:cc:36:c2:a0:85:25:30:14:7a:c9:32:8c:b7:
8b:2a:bb:23:2b:85:f1:a2:25:f8:78:fa:e0:71:1a:d2:b3:d9:
eb:9e:49:2c:6d:19:df:5b:bf:ec:cf:15:b8:6a:59:06:78:a1:
4f:6d:bd:ab:6b:94:cf:df:81:5d:9f:a7:ec:91:1d:75:a5:f4:
3d:ad:9d:59:11:37:0e:4c:b6:8a:ab:09:bc:98:39:bb:ea:80:
b1:9a:23:88:ab:be:5d:7c:6d:ab:7c:a1:d5:d5:58:99:ce:ae:
be:7b:7e:ba:a0:e4:5b:78:e8:3d:31:ad:77:f4:fd:ec:11:9a:
22:4e:b8:8a:6b:7b:cd:11:61:d4:38:08:88:23:04:77:aa:cd:
8f:10:ca:e6:5c:7a:ea:e4:ef:4a:51:b3:4c:33:7a:25:cb:11:
ff:34:44:a9:4b:c7:19:9f:1e:ee:d4:3a:c6:4d:46:19:c3:ab:
df:d9:3b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:44:55 2026 by rpki-client