Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/Rtx65YwOK2woTGcbrjBm4aKbwU8.roa
File: Rtx65YwOK2woTGcbrjBm4aKbwU8.roa (raw, json)
Hash identifier: TY4eV3HCd/AOs65OQsFGfOd3gVc1uO4pq0GcNRWWaV0=
Subject key identifier: 46:DC:7A:E5:8C:0E:2B:6C:28:4C:67:1B:AE:30:66:E1:A2:9B:C1:4F
Certificate issuer: /CN=2a079d3c3dc24e987bf70c4a9fabba405b083a45
Certificate serial: 01A038B7D80D14CE7DA9BE892260076B1286
Authority key identifier: 2A:07:9D:3C:3D:C2:4E:98:7B:F7:0C:4A:9F:AB:BA:40:5B:08:3A:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgedPD3CTph79wxKn6u6QFsIOkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/Rtx65YwOK2woTGcbrjBm4aKbwU8.roa
Signing time: Tue 25 Aug 2026 11:39:27 +0000
ROA not before: Tue 25 Aug 2026 11:39:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25233
IP address blocks: 91.217.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/KgedPD3CTph79wxKn6u6QFsIOkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/KgedPD3CTph79wxKn6u6QFsIOkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KgedPD3CTph79wxKn6u6QFsIOkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:b7:d8:0d:14:ce:7d:a9:be:89:22:60:07:6b:12:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a079d3c3dc24e987bf70c4a9fabba405b083a45
Validity
Not Before: Aug 25 11:39:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46dc7ae58c0e2b6c284c671bae3066e1a29bc14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:34:92:2a:6c:1e:3a:ef:32:58:51:b5:ed:6b:
cc:87:db:d3:f9:b3:c9:55:72:4c:cf:0d:25:ef:7c:
77:36:36:80:4a:5c:6e:4d:b0:f7:69:30:2f:3c:8f:
ad:4c:a8:9a:13:15:38:b1:1c:8d:66:29:cd:3c:c1:
19:61:c6:65:3e:53:b5:b4:b7:18:7b:9e:eb:89:6f:
a3:1e:dd:62:60:bd:12:4e:2e:df:3a:7f:01:d9:5e:
3d:d2:a8:6b:b7:12:b4:4d:28:fc:9f:31:80:64:b2:
62:ad:ff:b7:42:f1:bb:4e:3a:ca:22:19:12:bf:95:
2a:9a:f1:dc:4f:7e:bb:13:87:fe:1f:74:8d:77:8a:
dc:61:14:de:f7:27:0c:56:be:ae:ac:91:32:04:8e:
0a:57:35:26:8c:ce:d6:19:e7:8d:02:23:73:d0:67:
4d:66:0b:7d:15:ae:d9:39:20:2a:7b:29:10:7c:4f:
39:61:d3:ca:f7:5b:7b:d6:cd:1e:0f:63:f5:05:df:
1a:63:6e:c8:4a:8a:45:d9:60:ee:05:ba:61:0e:63:
f3:34:cd:51:2f:8c:d1:5e:a0:d6:77:b3:11:8b:e8:
5a:64:21:0b:c0:5f:d7:ec:a6:aa:de:cd:d3:10:25:
87:95:0b:ef:f4:30:87:f9:50:5f:1a:1b:63:a1:29:
58:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DC:7A:E5:8C:0E:2B:6C:28:4C:67:1B:AE:30:66:E1:A2:9B:C1:4F
X509v3 Authority Key Identifier:
keyid:2A:07:9D:3C:3D:C2:4E:98:7B:F7:0C:4A:9F:AB:BA:40:5B:08:3A:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgedPD3CTph79wxKn6u6QFsIOkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/Rtx65YwOK2woTGcbrjBm4aKbwU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/KgedPD3CTph79wxKn6u6QFsIOkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.212.0/24
Signature Algorithm: sha256WithRSAEncryption
78:9e:d4:7f:d5:4f:30:18:97:70:42:94:98:d0:85:99:28:85:
cb:e5:dc:d4:a6:9b:7d:50:f7:d5:3d:3d:80:0e:ee:1a:f9:18:
79:88:c4:d6:66:1d:da:d4:f6:5d:74:39:16:7f:9a:8a:f1:48:
9c:c3:7d:47:a5:fe:a8:df:78:05:86:4d:e5:41:86:5c:67:54:
7c:cf:a0:53:52:66:25:ff:62:84:cf:54:72:05:57:3c:cf:14:
6a:b1:35:ea:2a:1a:61:72:39:79:07:aa:a5:bb:ed:e5:30:4a:
3d:b3:ea:51:99:a9:ef:fc:c1:6e:6c:79:80:b0:08:71:94:38:
ee:d4:e6:fb:67:c9:c4:b9:3f:89:40:e9:09:3b:43:79:9a:6c:
34:43:f4:56:f6:5a:13:9b:64:7d:95:85:87:3d:c7:ef:5a:9f:
1f:47:57:a4:d8:85:f4:1f:00:4c:29:f2:3d:42:41:a9:60:41:
71:19:03:2f:27:00:e4:ee:ac:9a:ce:c7:90:26:03:94:aa:c6:
b0:07:3b:36:63:65:91:12:e2:3a:40:78:a5:e7:dc:17:f5:8d:
f7:3a:d9:f4:73:92:44:b0:9f:74:ee:05:ea:f6:ee:00:44:e8:
0c:05:69:bb:e4:5b:0f:45:9f:a3:d4:96:49:f2:67:78:23:2b:
66:3e:06:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:04:41 2026 by rpki-client