Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/11c16e-d4b1-4512-9133-5e64547b022e/1/CH28uOspk_mHzp5DTavyhjJKwuY.roa
File: CH28uOspk_mHzp5DTavyhjJKwuY.roa (raw, json)
Hash identifier: I+DwlQqKyy5mVdOOcr8qt2Y9GKTDu8zUjqzs2Jm0zb8=
Subject key identifier: 08:7D:BC:B8:EB:29:93:F9:87:CE:9E:43:4D:AB:F2:86:32:4A:C2:E6
Certificate issuer: /CN=73f2bddfca3e16382486c09fab44490d16a2ce34
Certificate serial: 019E83114353DCEDC4B1D52A86A0473726DF
Authority key identifier: 73:F2:BD:DF:CA:3E:16:38:24:86:C0:9F:AB:44:49:0D:16:A2:CE:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_K938o-FjgkhsCfq0RJDRaizjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/11c16e-d4b1-4512-9133-5e64547b022e/1/CH28uOspk_mHzp5DTavyhjJKwuY.roa
Signing time: Mon 01 Jun 2026 12:03:27 +0000
ROA not before: Mon 01 Jun 2026 12:03:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204177
IP address blocks: 91.229.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/11c16e-d4b1-4512-9133-5e64547b022e/1/c_K938o-FjgkhsCfq0RJDRaizjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/11c16e-d4b1-4512-9133-5e64547b022e/1/c_K938o-FjgkhsCfq0RJDRaizjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_K938o-FjgkhsCfq0RJDRaizjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:83:11:43:53:dc:ed:c4:b1:d5:2a:86:a0:47:37:26:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f2bddfca3e16382486c09fab44490d16a2ce34
Validity
Not Before: Jun 1 12:03:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=087dbcb8eb2993f987ce9e434dabf286324ac2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ce:03:f8:a3:10:7b:b9:5b:8a:83:b9:58:ae:
c9:7b:52:74:7c:ba:24:69:4f:1b:ae:24:fd:22:4c:
c8:31:4b:03:bb:ed:53:ce:f2:47:25:00:c2:7e:fa:
3c:18:6f:0a:0f:10:1e:f3:67:37:c1:92:a7:97:ba:
84:bd:67:9c:57:f8:5f:bd:bd:c9:df:22:ad:96:54:
f4:74:50:d1:1c:22:bd:55:30:91:b1:2f:95:24:da:
ea:09:53:79:02:b7:18:64:d8:ce:dd:0f:03:1d:c6:
ec:51:07:83:1e:80:73:f3:78:cb:f5:90:c9:ec:0f:
b1:06:c7:cc:86:3b:47:37:cd:21:0d:34:cd:d6:94:
d1:fd:aa:0f:6b:2a:f2:31:05:07:e0:91:36:a7:48:
d5:db:f7:d2:80:35:e7:e3:2e:12:ab:33:c1:f3:b1:
42:26:82:d3:6d:f4:2a:d8:c8:4d:38:17:c0:68:85:
15:f9:aa:fc:4f:02:e4:34:1a:25:a2:f8:64:70:17:
67:8e:c9:dc:d7:0f:8a:c3:82:b0:50:c4:6b:62:8f:
8d:a9:03:e8:f8:5a:92:8c:bd:09:41:a3:39:57:95:
d0:5c:95:24:7a:12:5a:24:45:33:a6:0a:43:81:26:
7b:bf:31:41:0c:b9:e0:36:f6:e3:5c:3c:c5:ee:99:
16:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7D:BC:B8:EB:29:93:F9:87:CE:9E:43:4D:AB:F2:86:32:4A:C2:E6
X509v3 Authority Key Identifier:
keyid:73:F2:BD:DF:CA:3E:16:38:24:86:C0:9F:AB:44:49:0D:16:A2:CE:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_K938o-FjgkhsCfq0RJDRaizjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/11c16e-d4b1-4512-9133-5e64547b022e/1/CH28uOspk_mHzp5DTavyhjJKwuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/11c16e-d4b1-4512-9133-5e64547b022e/1/c_K938o-FjgkhsCfq0RJDRaizjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.72.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:1d:3a:82:95:df:ee:87:24:a2:f7:a8:ce:37:20:1d:ce:45:
dd:14:f4:a4:cf:3b:86:c3:77:60:32:21:5b:5c:1d:27:0a:32:
7b:2e:b0:d1:e8:33:db:1c:8b:d0:17:8d:66:80:80:f7:f1:a4:
ac:1e:7e:99:c3:5f:e6:11:7e:b9:8e:a3:af:82:42:7e:e1:23:
dd:e8:ed:d8:b7:3c:4f:8c:5f:ba:c4:ec:c9:b2:26:29:29:af:
ea:98:d3:ca:fb:e0:0f:94:15:5a:98:a0:4b:50:f2:2a:9d:5a:
d6:ef:ed:36:d4:8d:cb:be:cb:72:ba:b7:01:89:97:d2:08:04:
35:1a:e6:2c:5b:1a:48:cf:cd:50:fe:80:b3:15:d7:42:9c:5e:
f1:01:57:4d:1a:7a:8f:da:dd:de:ba:22:7c:d5:50:5c:76:a2:
09:53:80:c4:3d:e3:a2:9a:79:2f:16:88:43:53:0b:f4:4b:27:
e0:5b:3a:fc:e6:d0:5d:c8:5f:91:03:9c:01:aa:80:de:49:fc:
7e:5b:32:57:27:7c:52:55:fd:c5:28:fa:12:8d:87:41:b8:d4:
a5:56:a9:48:bf:88:6d:71:27:c1:92:1f:f9:58:89:15:31:9b:
06:a4:61:63:54:9a:8b:df:de:7b:a8:5e:75:07:49:da:cd:d7:
e4:79:39:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:55:46 2026 by rpki-client