Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/fS9DhAA3eiG8HtVq67hAVe5MUHU.roa
File: fS9DhAA3eiG8HtVq67hAVe5MUHU.roa (raw, json)
Hash identifier: IiJhrxZlH7dtIcu6+WjaoQeyu/z5L+5HOr52j6mMjfM=
Subject key identifier: 7D:2F:43:84:00:37:7A:21:BC:1E:D5:6A:EB:B8:40:55:EE:4C:50:75
Certificate issuer: /CN=750e52de53330d5005498b0fc409e64dd98bb099
Certificate serial: 019C793835C1974587B8E4EB9122F995F22F
Authority key identifier: 75:0E:52:DE:53:33:0D:50:05:49:8B:0F:C4:09:E6:4D:D9:8B:B0:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/fS9DhAA3eiG8HtVq67hAVe5MUHU.roa
Signing time: Fri 20 Feb 2026 04:04:12 +0000
ROA not before: Fri 20 Feb 2026 04:04:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212030
IP address blocks: 91.220.112.0/24 maxlen: 24
194.33.22.0/24 maxlen: 24
194.33.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:79:38:35:c1:97:45:87:b8:e4:eb:91:22:f9:95:f2:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750e52de53330d5005498b0fc409e64dd98bb099
Validity
Not Before: Feb 20 04:04:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d2f438400377a21bc1ed56aebb84055ee4c5075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3d:1f:f2:db:5a:61:e8:1d:42:e2:db:28:5d:
f4:8e:bd:a0:56:b1:cb:3c:57:20:bb:7b:81:7a:b9:
3c:fe:4f:4f:c8:94:a6:7e:20:5d:b3:95:7e:ce:ac:
41:4d:65:6d:6e:e6:bd:f5:69:3f:13:2e:b5:01:7d:
ef:88:48:af:c4:22:5c:8c:b0:b4:3f:4b:6e:bd:82:
b2:63:d0:a7:86:b3:b2:8a:40:ea:6e:36:56:f2:32:
97:3b:35:b1:e9:a6:e2:5f:7b:14:a8:43:fe:43:7f:
4e:15:31:fd:76:3b:ad:48:22:89:5a:fb:36:66:6d:
fb:70:c0:ed:87:df:2c:ae:02:cd:50:85:f5:8a:3f:
fd:1c:9f:04:32:44:d6:4f:7a:3c:d0:cb:b9:1d:f8:
c1:01:2d:b5:5c:02:f8:75:92:2c:68:2f:e7:b6:ef:
80:5a:a0:63:04:1b:f9:11:a4:83:98:82:72:5c:a0:
cd:13:01:e3:9e:ed:e9:16:e4:5e:8c:b2:27:22:0a:
b5:3c:38:8c:1b:3b:a5:30:7e:94:32:67:b7:fe:59:
bc:f9:a5:7f:53:c4:6a:30:41:b0:41:b8:75:d4:35:
0c:ca:ce:b6:6f:d2:dd:e6:21:86:82:fe:ed:1b:86:
91:ce:e7:b7:5c:78:39:40:33:df:48:aa:2c:11:68:
8d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:2F:43:84:00:37:7A:21:BC:1E:D5:6A:EB:B8:40:55:EE:4C:50:75
X509v3 Authority Key Identifier:
keyid:75:0E:52:DE:53:33:0D:50:05:49:8B:0F:C4:09:E6:4D:D9:8B:B0:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/fS9DhAA3eiG8HtVq67hAVe5MUHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.112.0/24
194.33.22.0/23
Signature Algorithm: sha256WithRSAEncryption
98:aa:d2:c3:51:16:31:d5:32:d3:0c:54:7a:b2:10:64:bf:78:
08:af:cf:3e:8a:29:c9:90:7f:53:43:d3:f8:a6:26:a3:8e:50:
9e:dd:f3:a8:32:bb:53:f5:71:4c:93:6e:ce:50:ba:78:42:4a:
63:8b:6f:07:33:2d:6b:09:69:17:2f:f4:52:e3:13:e5:ac:65:
76:05:1f:01:92:f2:38:75:7c:49:07:b6:c4:2b:27:3c:b5:a1:
a2:3c:f7:28:dc:d8:a2:ea:3f:50:24:ce:d5:9b:e2:96:95:f1:
3c:c0:42:d1:a3:85:c1:55:cc:81:64:e2:58:55:4d:31:39:1c:
84:26:2e:e9:65:b8:27:6b:99:42:1b:00:f3:d4:2c:d4:e6:f5:
e6:fe:b4:45:23:4b:3d:47:8d:cb:b7:7d:7c:9f:ae:5b:b1:5b:
9d:f7:05:41:7f:b9:f6:4b:8c:c8:d8:5b:98:2b:07:b9:72:7f:
2d:b9:7b:a1:f6:a6:1e:aa:05:26:6e:ea:dd:fe:e1:92:3f:20:
35:9e:41:ec:be:d2:ec:2d:5b:cc:1e:5c:a3:8f:12:2c:c5:56:
50:33:62:37:82:a2:ff:95:86:87:68:d6:30:43:91:65:fc:00:
70:9f:5c:49:72:4e:e5:c2:3f:9d:0d:76:0e:aa:86:18:a2:ad:
8f:33:a6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:55:04 2026 by rpki-client