Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/0IWvtKpWz8nwzfyztFPG-10e-ec.roa
File: 0IWvtKpWz8nwzfyztFPG-10e-ec.roa (raw, json)
Hash identifier: M3DL2KpstDY4RX5irHxTIoQ7SYVzPk7eR23DZZrDMbo=
Subject key identifier: D0:85:AF:B4:AA:56:CF:C9:F0:CD:FC:B3:B4:53:C6:FB:5D:1E:F9:E7
Certificate issuer: /CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Certificate serial: 019C918743AC373984126DA2F27CA4E2F671
Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/0IWvtKpWz8nwzfyztFPG-10e-ec.roa
Signing time: Tue 24 Feb 2026 21:21:26 +0000
ROA not before: Tue 24 Feb 2026 21:21:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 91.216.158.0/24 maxlen: 24
91.223.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:91:87:43:ac:37:39:84:12:6d:a2:f2:7c:a4:e2:f6:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Validity
Not Before: Feb 24 21:21:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d085afb4aa56cfc9f0cdfcb3b453c6fb5d1ef9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dc:04:95:30:ba:b3:22:e3:3e:5e:4c:ec:df:
e2:2f:d5:91:37:d3:08:b4:9d:8c:09:d1:94:ed:57:
02:db:56:78:30:a8:64:8e:f6:87:f6:0d:15:76:de:
2a:12:cb:f2:2d:a5:ac:3d:20:37:c2:e0:87:53:e7:
6b:72:8a:3f:3d:58:36:b2:da:3d:59:32:27:cc:b4:
19:4b:f2:d0:2c:93:5a:65:c6:16:aa:37:01:d8:45:
a0:8e:ba:a9:b4:6f:f6:ad:97:d0:9e:b5:b5:95:a3:
42:01:e7:0e:fa:07:8c:32:c5:78:75:4d:75:bf:e0:
0a:90:a9:27:39:57:1e:a0:2b:74:7a:a2:f1:10:62:
03:21:44:4b:c4:32:ce:b3:f7:82:de:bb:28:f1:74:
0c:81:a2:2c:03:09:1f:23:f9:ab:51:eb:e7:03:d1:
91:7c:50:33:a5:c2:5f:8d:74:03:68:a9:82:99:4b:
80:c0:6e:28:d1:39:b6:da:f2:28:4c:a7:84:fe:1b:
a2:52:69:b0:70:86:fa:38:e9:5a:2c:ee:0a:a9:cc:
a7:8f:4e:f7:b7:90:2e:09:84:f5:c7:34:45:44:66:
ed:a5:43:52:fa:b8:5b:bd:d4:f9:9c:ec:6f:a1:82:
96:a1:ef:56:f0:0f:9f:b0:8c:3f:d8:f9:a9:a2:3d:
0e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:85:AF:B4:AA:56:CF:C9:F0:CD:FC:B3:B4:53:C6:FB:5D:1E:F9:E7
X509v3 Authority Key Identifier:
keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/0IWvtKpWz8nwzfyztFPG-10e-ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.158.0/24
91.223.211.0/24
Signature Algorithm: sha256WithRSAEncryption
65:d2:9f:5e:20:28:45:ee:d9:77:8a:af:41:bb:6e:94:49:1b:
49:cf:49:af:10:7a:2b:45:f9:f3:9c:54:b2:5b:d6:87:89:6f:
a0:c7:0e:0d:92:3b:9d:f2:74:b6:f6:e2:ac:99:b9:7c:c1:d5:
66:02:15:d0:46:7d:e6:dd:cb:b3:2f:32:1d:b6:5b:7c:15:54:
78:13:f0:f2:17:a0:c3:24:fa:be:50:b9:d7:10:fd:49:14:27:
0b:fa:ab:46:20:a9:e9:8e:02:51:92:cb:00:6e:9e:63:ac:1a:
93:4a:01:8d:75:5c:ee:95:f9:50:eb:9d:7f:ea:41:4a:a9:44:
d6:c5:9f:dc:2f:e4:13:c5:3f:18:e0:b9:e6:ec:7a:b0:be:9e:
da:15:c2:3d:57:b8:8a:f8:85:97:03:13:6c:dc:0c:04:04:a4:
14:85:a5:94:3d:1d:b2:de:bf:f5:41:35:dd:5c:ed:29:ec:4d:
e7:24:c8:cf:19:3a:f7:1c:4c:27:87:ba:79:19:3d:f8:64:f3:
7c:ba:76:7f:50:23:38:5e:ae:90:69:08:02:67:7b:d6:a5:b2:
de:8e:d8:41:8e:83:28:69:e7:22:64:8a:5a:09:fe:e2:2e:49:
5b:06:20:eb:ec:f7:b5:4a:a6:8d:57:67:27:74:30:93:56:45:
84:b4:07:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:59:34 2026 by rpki-client