Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/D91yhkWJzNy0wIqj24fZRWkjXyo.roa
File: D91yhkWJzNy0wIqj24fZRWkjXyo.roa (raw, json)
Hash identifier: gzLfISz+cY1sCnwSJWKi4LD4Qz5Rm88X/kCLR5D2X/M=
Subject key identifier: 0F:DD:72:86:45:89:CC:DC:B4:C0:8A:A3:DB:87:D9:45:69:23:5F:2A
Certificate issuer: /CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Certificate serial: 019C6B5E600626E9D4AF7B50EE9E6D1F50C9
Authority key identifier: 89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/D91yhkWJzNy0wIqj24fZRWkjXyo.roa
Signing time: Tue 17 Feb 2026 11:31:12 +0000
ROA not before: Tue 17 Feb 2026 11:31:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20860
IP address blocks: 185.36.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6b:5e:60:06:26:e9:d4:af:7b:50:ee:9e:6d:1f:50:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Validity
Not Before: Feb 17 11:31:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0fdd72864589ccdcb4c08aa3db87d94569235f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:89:b9:90:f5:2c:f9:35:84:e8:c2:90:af:9e:
c4:34:b3:dc:79:2a:ea:74:bf:66:04:fb:6f:1c:ed:
86:88:78:2f:d1:fa:05:2a:b5:1a:63:17:50:25:26:
5d:8c:4c:0d:c1:cb:a0:84:57:db:28:b5:62:ae:b2:
33:46:ed:b1:3e:ef:9e:c4:2a:bb:c4:6b:89:b9:78:
63:73:d1:aa:ca:94:5b:32:64:ee:48:3d:9c:ca:91:
79:b1:f1:ee:da:28:ea:26:80:b9:0b:83:81:07:81:
fa:13:d4:1b:13:95:6d:87:20:ff:ee:51:13:3a:63:
d8:9f:82:b8:49:c0:4a:68:06:36:d1:0f:6b:ec:10:
cf:7a:6a:25:75:3a:08:79:12:ef:56:02:06:86:fe:
25:cf:88:a7:1c:7b:e7:cd:80:85:bf:7f:cc:b7:92:
0e:d0:fd:6e:8a:8a:a2:c8:40:08:fd:bf:30:77:71:
11:8a:c6:33:c4:23:77:91:36:81:f3:b7:44:72:be:
b3:98:ed:ae:1d:0d:d6:31:c9:31:3f:ac:51:66:df:
f6:46:99:5c:28:71:9e:59:5e:22:1e:3f:b0:21:39:
14:87:e1:b6:8d:e1:84:2f:a7:f1:c4:37:a5:5f:7e:
d9:3a:2a:69:40:35:4b:f0:8f:ee:0f:85:d1:bd:a4:
ae:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:DD:72:86:45:89:CC:DC:B4:C0:8A:A3:DB:87:D9:45:69:23:5F:2A
X509v3 Authority Key Identifier:
keyid:89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/D91yhkWJzNy0wIqj24fZRWkjXyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.145.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:60:1e:f6:06:67:38:00:4a:4e:ab:47:4b:f3:34:79:95:2e:
5e:2a:df:f5:40:b1:4a:e6:e4:1c:f1:f1:57:13:1e:d1:aa:3a:
98:f0:8b:cf:c1:3b:f9:95:f8:55:d0:1c:43:c2:d5:20:2f:b5:
92:be:17:79:a3:3c:e8:5b:36:03:99:7f:2e:d5:d9:67:54:66:
69:4f:62:84:34:e4:ee:03:c8:6a:e9:0b:52:df:f0:91:ac:fc:
10:f6:fd:e2:fa:78:52:af:86:34:70:8a:95:c0:ee:17:36:2c:
f4:4d:4f:52:11:d5:c9:bb:23:be:89:19:c8:46:eb:4c:1b:76:
25:97:d3:76:3d:c1:ea:6b:79:81:e6:73:6e:e9:57:41:26:6d:
50:e7:27:e8:32:61:e9:86:4e:8a:e6:94:11:22:1b:ab:fd:44:
5c:44:1d:4d:5f:dd:5d:22:2f:b3:8b:f0:e0:46:ac:a9:6f:e2:
82:f8:78:e7:bf:e0:67:47:37:97:49:1a:a1:19:30:fe:bc:91:
18:2f:ea:88:41:ec:f9:5e:27:6e:c8:b9:10:1c:bc:d5:14:ae:
df:73:e8:aa:5e:40:12:9d:ce:4e:b5:ee:62:75:66:1f:c2:94:
0a:57:51:75:f0:30:71:35:76:a7:2a:d7:d7:b3:7b:7b:10:5e:
ad:59:14:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:40:07 2026 by rpki-client