Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/kr8gE2DfthaTiCQ1Bm1Xa-ZiHAM.roa
File: kr8gE2DfthaTiCQ1Bm1Xa-ZiHAM.roa (raw, json)
Hash identifier: PGCsHT38bMBMpPa/lXRavJzxwVglEXK+5xignQWX00o=
Subject key identifier: 92:BF:20:13:60:DF:B6:16:93:88:24:35:06:6D:57:6B:E6:62:1C:03
Certificate issuer: /CN=b919e96122f283815c1a56fecc349447a2889cd9
Certificate serial: 019B79ED10EC06A34D47E8E746A564DCD803
Authority key identifier: B9:19:E9:61:22:F2:83:81:5C:1A:56:FE:CC:34:94:47:A2:88:9C:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRnpYSLyg4FcGlb-zDSUR6KInNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/kr8gE2DfthaTiCQ1Bm1Xa-ZiHAM.roa
Signing time: Thu 01 Jan 2026 14:18:58 +0000
ROA not before: Thu 01 Jan 2026 14:18:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30948
IP address blocks: 91.229.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRnpYSLyg4FcGlb-zDSUR6KInNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ed:10:ec:06:a3:4d:47:e8:e7:46:a5:64:dc:d8:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b919e96122f283815c1a56fecc349447a2889cd9
Validity
Not Before: Jan 1 14:18:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92bf201360dfb61693882435066d576be6621c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b3:35:ba:02:35:72:69:6c:c3:93:63:53:97:
4d:29:93:f4:5b:d5:f7:e4:ce:40:1f:8d:47:0b:fa:
7b:66:7c:b0:b9:5b:87:06:4e:18:6a:3a:f6:bf:40:
3d:d8:10:8d:d5:df:ec:1d:10:e0:65:92:71:c4:47:
86:4b:0a:7b:21:0e:93:6a:ed:aa:fc:8c:db:81:9b:
ac:15:2b:9e:b6:57:f3:ad:f5:8b:b7:97:cc:c6:8a:
f3:ff:19:4c:7e:16:c2:9a:d8:3a:f0:ba:61:f3:81:
a9:89:32:12:71:28:45:90:5a:72:30:c6:d0:56:27:
b3:ef:82:d3:43:5e:5b:11:6c:23:06:08:ab:1a:d5:
52:e1:57:0c:d9:b8:ba:1a:44:2c:25:ef:3b:4b:0a:
14:bf:6a:e6:36:68:c8:25:94:d9:29:de:75:da:ce:
81:ca:a0:75:29:78:b2:07:26:36:71:43:ba:dd:a2:
57:f2:59:05:78:34:4f:a4:86:0e:a3:f2:d7:33:1a:
e1:5a:94:52:0b:31:34:f3:e6:13:5c:89:9e:ea:de:
0a:b8:ad:04:e7:7b:d8:19:87:6c:16:bf:50:ea:08:
34:64:f9:d1:2f:8a:67:f2:63:98:a6:e1:41:7c:5d:
74:2d:94:bd:e7:42:a7:a9:d6:b0:03:d5:b6:87:95:
7a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BF:20:13:60:DF:B6:16:93:88:24:35:06:6D:57:6B:E6:62:1C:03
X509v3 Authority Key Identifier:
keyid:B9:19:E9:61:22:F2:83:81:5C:1A:56:FE:CC:34:94:47:A2:88:9C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRnpYSLyg4FcGlb-zDSUR6KInNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/kr8gE2DfthaTiCQ1Bm1Xa-ZiHAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.7.0/24
Signature Algorithm: sha256WithRSAEncryption
73:9e:a1:dd:2a:df:66:d3:ef:49:ab:1e:36:fd:61:14:b9:57:
28:bd:61:ad:cc:bf:58:0b:1c:40:cc:29:57:f2:8a:aa:85:f9:
6e:7d:01:e4:3c:89:9e:c3:90:f1:37:3f:f9:e5:4b:8c:7e:52:
37:d7:42:e0:0c:3c:13:46:d5:6c:e2:5c:bd:3f:27:b9:3e:67:
4f:da:27:07:e7:2c:35:20:8c:7b:34:83:d9:d2:56:9f:86:09:
d7:c7:fe:bc:1f:c3:82:9e:d6:7e:fb:7c:ac:9b:70:c3:c5:6a:
5a:e5:88:75:46:96:05:e2:bf:cc:fc:b4:29:2f:03:57:d3:52:
32:33:5c:49:28:10:05:de:81:f8:f4:0b:df:2e:53:74:c0:ae:
db:a1:68:a6:60:b5:09:a8:c0:c9:bf:45:df:67:ed:e6:e5:e0:
79:d2:d4:93:73:32:7c:a2:d8:f3:2a:a7:46:3d:2f:9c:50:99:
22:84:1e:40:a8:7c:2d:c1:1b:7d:d7:a7:31:c3:88:15:39:b6:
b0:45:0c:a5:af:e3:e0:a9:e7:b3:f6:3f:a7:1d:6b:58:9a:a7:
29:aa:2b:a9:98:2b:3f:21:41:d8:df:03:b8:72:34:31:2e:df:
27:80:2d:e6:9a:62:d4:e8:99:5a:2d:fe:0d:c3:2e:67:d9:12:
84:dc:d3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:24:27 2026 by rpki-client