Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d3a55c-1f62-4779-86b9-61b50f6a6c02/1/8v0CcVyve98suRZMz0YYAeGqttU.roa
File: 8v0CcVyve98suRZMz0YYAeGqttU.roa (raw, json)
Hash identifier: gavUEFBgnAVuBp4EUd0FRwiP3lAlf2Xbyzla4xcdz6s=
Subject key identifier: F2:FD:02:71:5C:AF:7B:DF:2C:B9:16:4C:CF:46:18:01:E1:AA:B6:D5
Certificate issuer: /CN=28843db96e4f459b87df8c279057eed69bb9b862
Certificate serial: 019B7F151A25EF65B2CF323D9E27EBEF6615
Authority key identifier: 28:84:3D:B9:6E:4F:45:9B:87:DF:8C:27:90:57:EE:D6:9B:B9:B8:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIQ9uW5PRZuH34wnkFfu1pu5uGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/d3a55c-1f62-4779-86b9-61b50f6a6c02/1/8v0CcVyve98suRZMz0YYAeGqttU.roa
Signing time: Fri 02 Jan 2026 14:20:47 +0000
ROA not before: Fri 02 Jan 2026 14:20:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51404
IP address blocks: 91.217.14.0/23 maxlen: 23
91.217.14.0/24 maxlen: 24
91.217.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/d3a55c-1f62-4779-86b9-61b50f6a6c02/1/KIQ9uW5PRZuH34wnkFfu1pu5uGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/d3a55c-1f62-4779-86b9-61b50f6a6c02/1/KIQ9uW5PRZuH34wnkFfu1pu5uGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KIQ9uW5PRZuH34wnkFfu1pu5uGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:1a:25:ef:65:b2:cf:32:3d:9e:27:eb:ef:66:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28843db96e4f459b87df8c279057eed69bb9b862
Validity
Not Before: Jan 2 14:20:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2fd02715caf7bdf2cb9164ccf461801e1aab6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:1c:2b:7f:db:83:b5:5a:82:d2:ee:71:e8:d0:
96:a4:b8:f6:99:b9:2f:e1:8b:21:37:65:d7:12:9b:
0b:29:a6:2a:af:fd:bb:a8:3c:dc:75:ad:3f:4e:d9:
6a:5e:d6:f1:9e:97:b0:66:3a:c4:76:9b:e5:5d:36:
2c:25:25:78:f2:75:8a:38:2d:f2:31:a7:a8:70:13:
10:f2:0e:19:70:ff:59:98:1a:04:ef:a5:66:ea:dc:
49:88:26:35:36:aa:42:a9:e2:c0:8b:f6:94:b4:9e:
3d:5c:68:52:47:62:b7:98:45:7e:5e:c3:ff:e9:42:
a3:e1:4c:97:4b:04:32:bd:cd:71:37:7d:fe:28:83:
01:65:81:93:33:81:40:d6:6d:58:07:e1:0b:0b:a4:
71:4a:e4:62:a1:63:b2:c7:99:8d:1f:b6:7e:80:e1:
f9:c2:6a:74:07:f3:20:3e:b6:b9:e2:ce:31:26:0f:
20:45:14:b1:c8:71:ca:d8:3d:08:bd:fd:3d:a3:98:
ab:77:fa:d5:2b:de:0f:10:85:0e:46:63:b1:20:73:
94:bf:99:13:df:e9:04:6c:57:21:81:8c:0c:37:6a:
72:02:21:cd:b2:16:0f:bc:d8:71:be:03:3d:35:84:
ce:99:39:b5:90:3e:4f:d5:91:10:14:ce:65:b9:96:
39:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FD:02:71:5C:AF:7B:DF:2C:B9:16:4C:CF:46:18:01:E1:AA:B6:D5
X509v3 Authority Key Identifier:
keyid:28:84:3D:B9:6E:4F:45:9B:87:DF:8C:27:90:57:EE:D6:9B:B9:B8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIQ9uW5PRZuH34wnkFfu1pu5uGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d3a55c-1f62-4779-86b9-61b50f6a6c02/1/8v0CcVyve98suRZMz0YYAeGqttU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d3a55c-1f62-4779-86b9-61b50f6a6c02/1/KIQ9uW5PRZuH34wnkFfu1pu5uGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.14.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:00:e5:b1:a0:10:45:d6:65:2b:0e:3b:cb:37:5a:5b:c3:9e:
4f:52:ae:94:63:9f:af:97:da:69:4e:c3:40:a5:d8:88:73:f0:
86:3f:89:fd:56:3e:75:4f:db:7e:6a:29:bf:98:d7:da:86:51:
76:29:32:05:db:8b:50:e7:2d:bd:fb:e5:79:ff:50:9c:71:f8:
02:cb:a0:32:6c:0c:5f:0d:2d:a7:dd:06:07:e5:a1:d0:27:6f:
50:0f:eb:03:b6:4d:b5:0c:d2:1e:c2:4f:fc:6c:b2:74:2c:23:
b8:3d:10:d6:09:fb:46:05:ad:73:75:4b:e7:c3:78:24:0b:e7:
cb:b5:59:e8:5e:b5:57:06:87:fd:d9:f3:1d:12:46:39:a0:ee:
4f:ae:ca:c6:48:21:bd:b7:97:dc:b2:c4:1f:a1:c6:a9:64:02:
49:00:f2:6d:b4:73:20:e9:eb:54:e7:33:d4:67:8a:35:9f:fb:
fa:40:fc:de:a6:81:9e:21:7c:85:24:6d:ef:d6:d0:77:9b:00:
c0:07:c7:31:d7:d2:bd:50:e5:9d:59:d4:95:73:94:9b:a8:35:
6c:5e:58:80:78:f9:40:32:d1:64:a8:a6:45:14:90:71:ff:87:
fb:1a:ec:40:75:67:83:f2:40:a9:95:a5:ee:6e:c8:61:88:43:
b1:97:55:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:02:39 2026 by rpki-client