Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/dGbLcxcr7X-VuqdNwkxJEVAdoZw.roa
File: dGbLcxcr7X-VuqdNwkxJEVAdoZw.roa (raw, json)
Hash identifier: Df8yIA2woKIcIr/lHUrWEZ4NVPdZqkSz50++AQwCXPk=
Subject key identifier: 74:66:CB:73:17:2B:ED:7F:95:BA:A7:4D:C2:4C:49:11:50:1D:A1:9C
Certificate issuer: /CN=91c98c350f25c4d68b30de2280caaa10351d4c08
Certificate serial: 019F23692E6ED02F0F50176BB8368F6A099E
Authority key identifier: 91:C9:8C:35:0F:25:C4:D6:8B:30:DE:22:80:CA:AA:10:35:1D:4C:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcmMNQ8lxNaLMN4igMqqEDUdTAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/dGbLcxcr7X-VuqdNwkxJEVAdoZw.roa
Signing time: Thu 02 Jul 2026 15:18:43 +0000
ROA not before: Thu 02 Jul 2026 15:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56967
IP address blocks: 91.212.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/kcmMNQ8lxNaLMN4igMqqEDUdTAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/kcmMNQ8lxNaLMN4igMqqEDUdTAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcmMNQ8lxNaLMN4igMqqEDUdTAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:2e:6e:d0:2f:0f:50:17:6b:b8:36:8f:6a:09:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c98c350f25c4d68b30de2280caaa10351d4c08
Validity
Not Before: Jul 2 15:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7466cb73172bed7f95baa74dc24c4911501da19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1f:49:1a:c4:d3:d3:74:32:52:5c:6b:c5:fc:
a7:24:e2:57:fb:43:af:95:e6:a6:0c:ea:f4:e9:fa:
d2:05:0f:3a:21:d2:91:ab:15:b0:7c:5a:c7:81:73:
f2:fd:4a:b4:f3:02:7b:69:ae:6f:af:64:ca:3a:ea:
20:3b:c6:1a:e5:15:9b:87:e9:0b:aa:f5:99:44:81:
2c:60:e7:8c:c2:42:85:ba:d0:1d:81:97:15:21:e4:
f8:bd:e0:6f:93:66:e3:fb:4b:01:00:07:23:bf:ee:
4a:4f:d7:24:71:cb:36:74:4e:ea:22:59:b7:ef:af:
05:11:6b:d7:30:e7:11:5a:75:b1:86:b6:9f:80:ca:
03:9a:91:11:ba:34:0d:be:06:23:40:eb:d0:ea:2e:
14:b5:8d:c0:ff:a6:ee:f1:ff:02:42:26:91:10:ce:
f1:6d:25:ec:f6:02:b3:25:1d:ab:42:4f:cd:d9:6c:
49:2d:d2:64:7b:cd:ff:48:1e:76:e6:75:b0:63:04:
38:4a:bc:7f:10:2a:19:f1:a9:95:86:44:7e:66:e8:
64:db:a8:9e:06:a9:d9:13:ab:ca:7f:6c:d0:96:f1:
1e:e7:82:72:1e:da:b6:79:d5:83:56:98:48:b0:28:
40:2f:ae:8f:ba:c5:bb:36:5b:35:d0:f5:16:84:db:
05:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:66:CB:73:17:2B:ED:7F:95:BA:A7:4D:C2:4C:49:11:50:1D:A1:9C
X509v3 Authority Key Identifier:
keyid:91:C9:8C:35:0F:25:C4:D6:8B:30:DE:22:80:CA:AA:10:35:1D:4C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcmMNQ8lxNaLMN4igMqqEDUdTAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/dGbLcxcr7X-VuqdNwkxJEVAdoZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/kcmMNQ8lxNaLMN4igMqqEDUdTAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.111.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:e7:48:fc:db:9c:23:53:3e:71:ed:7e:1f:7c:ae:b7:86:a2:
b7:4d:75:1b:9c:b9:23:02:0f:b2:35:42:df:bf:36:88:92:3b:
80:01:b0:23:9d:39:5c:ea:eb:e0:29:b7:eb:d7:db:b4:1e:f5:
c5:5a:4e:83:5c:1f:d6:69:af:11:68:35:ca:35:53:85:b7:3d:
2b:51:55:70:a1:d9:55:d0:11:e7:44:23:16:00:41:4f:4b:a6:
ab:5d:33:6c:70:4a:c2:c1:f6:e9:08:44:8b:fd:d2:a7:d5:2f:
f8:52:9b:ba:dd:0a:2f:54:cc:ca:d1:2b:03:8e:44:26:d6:69:
de:ad:b5:a8:c3:41:d4:8b:14:ba:48:8c:39:c5:77:91:33:67:
bf:93:cc:f4:af:64:d4:3b:05:29:7e:f8:b9:ca:98:d8:e0:ba:
a8:1f:eb:77:72:e2:85:bd:0c:13:bb:a6:1f:37:b4:38:cf:8d:
67:d1:4d:85:c6:54:00:f5:19:50:ed:0d:9b:cd:2e:86:08:0c:
34:bd:05:1a:8c:a1:a4:07:ab:1b:0e:13:fa:5b:fc:e5:6f:53:
d9:1b:52:6b:7b:29:9f:9f:35:c5:94:b6:a6:77:5c:3f:41:9a:
f6:99:ce:a5:76:52:65:66:c1:12:b7:1c:61:4c:13:79:09:b5:
57:29:58:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:15:09 2026 by rpki-client