Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/B1fQ2LImDzdDVrCDt4hIE8SUiY8.roa
File: B1fQ2LImDzdDVrCDt4hIE8SUiY8.roa (raw, json)
Hash identifier: 0qzVZwboOKOK4wMKRb+MgasxkdGzjvY5iwVbOB4L2Vk=
Subject key identifier: 07:57:D0:D8:B2:26:0F:37:43:56:B0:83:B7:88:48:13:C4:94:89:8F
Certificate issuer: /CN=03db95b436f531c4e602f39610ad53e26fdff153
Certificate serial: 01A0B13BE40AD029A3F55FC9EEEC04A03E53
Authority key identifier: 03:DB:95:B4:36:F5:31:C4:E6:02:F3:96:10:AD:53:E2:6F:DF:F1:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/B1fQ2LImDzdDVrCDt4hIE8SUiY8.roa
Signing time: Thu 17 Sep 2026 21:18:07 +0000
ROA not before: Thu 17 Sep 2026 21:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43581
IP address blocks: 77.91.88.0/24 maxlen: 24
77.91.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b1:3b:e4:0a:d0:29:a3:f5:5f:c9:ee:ec:04:a0:3e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03db95b436f531c4e602f39610ad53e26fdff153
Validity
Not Before: Sep 17 21:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0757d0d8b2260f374356b083b7884813c494898f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:39:05:e4:1b:db:bd:c9:df:4b:f2:7d:8b:15:
3d:61:27:aa:51:34:30:eb:b7:21:4e:57:42:3a:9a:
f7:ae:e0:f4:4a:31:20:ba:41:8a:66:a9:53:23:a6:
dd:06:25:66:da:e8:cf:c0:b7:8f:71:28:17:fb:f9:
72:0c:7f:ab:01:1a:54:81:eb:18:ec:32:f6:7e:01:
e3:19:c3:ea:cf:83:cb:cb:e2:60:5f:ef:04:f3:eb:
f7:19:b5:8e:f3:b8:b2:23:f6:57:b5:8c:49:30:11:
80:17:e9:dc:1f:9a:19:6d:b7:50:bf:c8:35:6e:55:
60:83:b4:9c:df:6a:b1:87:e1:ce:f8:23:9f:2d:66:
7b:04:15:b6:1e:c0:b9:1c:a4:3d:5a:0d:aa:33:1d:
e0:4f:e1:86:8e:bd:8d:b7:21:41:fa:90:fe:2d:c0:
e9:6c:2c:79:63:1c:d1:c3:19:42:cb:9a:65:c3:cf:
d0:9c:50:47:89:23:70:77:b5:df:57:9f:9f:78:ba:
74:56:30:c3:6b:72:77:76:35:21:9e:a4:a8:cc:52:
1e:9c:e3:ef:f6:07:75:c5:f6:45:c0:22:b8:98:f7:
79:c3:4b:5c:44:73:e9:ca:9c:cd:f3:5e:52:cf:e2:
a2:db:b8:7d:7d:95:3c:34:b9:4b:77:14:22:29:7c:
92:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:57:D0:D8:B2:26:0F:37:43:56:B0:83:B7:88:48:13:C4:94:89:8F
X509v3 Authority Key Identifier:
keyid:03:DB:95:B4:36:F5:31:C4:E6:02:F3:96:10:AD:53:E2:6F:DF:F1:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/B1fQ2LImDzdDVrCDt4hIE8SUiY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.88.0/24
77.91.90.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:c1:9b:5e:a8:4d:39:67:9d:1f:bd:bd:86:77:b2:4d:35:18:
e4:2b:76:cf:8c:59:78:6c:d0:5f:56:aa:03:c2:15:35:42:a6:
a9:e5:b1:a5:e6:ca:30:e9:7c:a0:39:48:68:07:86:48:a0:5d:
e4:b4:c4:59:a3:83:c1:bd:43:80:54:65:f8:8e:1a:91:5c:3e:
b7:8d:c5:56:da:10:61:1a:71:8d:74:ba:d3:f9:76:75:15:c6:
c3:44:d1:41:7d:e1:ed:8d:b3:d1:b9:83:f0:80:b5:3c:56:67:
f4:ba:f2:07:8b:34:f2:93:d5:c3:76:2f:3a:70:16:b1:fb:84:
7c:89:33:7b:f7:06:25:07:24:e0:6d:69:4c:91:a8:33:f4:5b:
31:a4:67:57:54:a6:61:d6:f7:3d:cf:da:c2:30:d5:0a:63:4c:
56:0c:cd:07:da:e8:7f:47:a2:cb:19:f3:26:ae:fc:a5:91:fa:
7b:14:ba:6e:d2:1f:b8:ef:d4:ce:97:62:97:fe:42:5a:7e:03:
dd:22:95:fe:e7:6f:e2:51:ab:2b:7c:7f:16:e5:1f:fc:11:05:
d0:bc:fa:de:01:94:4c:0a:af:d1:ee:27:3d:fd:34:5a:af:53:
3f:fa:fb:c5:da:75:87:f6:4d:a9:cd:04:8b:5f:ed:71:19:36:
d3:ac:c2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:15:34 2026 by rpki-client