Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/LL4s_Z0j1hdcBzGPEPCmOFZaofk.roa
File: LL4s_Z0j1hdcBzGPEPCmOFZaofk.roa (raw, json)
Hash identifier: mDvEwSYiHIfFf8YWs3WzwDk/OtUihAuHEW+zLpjvfk8=
Subject key identifier: 2C:BE:2C:FD:9D:23:D6:17:5C:07:31:8F:10:F0:A6:38:56:5A:A1:F9
Certificate issuer: /CN=560d1e89b4e742e69062a95d351deea96b5178fb
Certificate serial: 01A09E58613D536FFE87FF8ACF55A6DD0C68
Authority key identifier: 56:0D:1E:89:B4:E7:42:E6:90:62:A9:5D:35:1D:EE:A9:6B:51:78:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/LL4s_Z0j1hdcBzGPEPCmOFZaofk.roa
Signing time: Mon 14 Sep 2026 05:16:27 +0000
ROA not before: Mon 14 Sep 2026 05:16:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 91.231.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:58:61:3d:53:6f:fe:87:ff:8a:cf:55:a6:dd:0c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560d1e89b4e742e69062a95d351deea96b5178fb
Validity
Not Before: Sep 14 05:16:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2cbe2cfd9d23d6175c07318f10f0a638565aa1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:65:9a:03:79:d5:fc:21:9b:e3:77:66:4e:87:
13:da:20:03:82:aa:31:a0:8c:c6:5c:4c:21:0d:87:
e1:84:e9:20:f0:c8:e4:19:07:cf:38:c7:10:1f:2d:
96:2a:ec:1a:f9:df:f6:d0:15:30:83:c1:b3:d2:d2:
d2:d3:34:f8:ca:15:0d:13:95:fe:65:fc:1c:7c:f8:
ba:74:e7:02:ea:8f:01:c8:75:34:48:d6:33:23:45:
72:53:13:8f:45:a5:1f:ad:c9:08:4f:c1:25:e8:97:
d5:24:41:b2:ca:26:79:9a:bc:8f:d0:5c:1c:f6:eb:
77:c6:cc:95:4f:68:07:d7:0a:9b:3e:90:c6:4a:f3:
3c:36:71:04:e0:70:49:50:95:4e:5d:29:11:fb:a4:
3d:3e:a2:80:8a:be:b3:fd:1d:bf:30:fc:0a:07:a0:
11:d9:45:a8:00:8b:86:98:44:7a:cf:4d:7d:0e:13:
9c:78:37:8e:da:5a:8d:5e:9e:0b:c7:76:f8:74:90:
69:28:95:f7:7c:b0:df:c2:f6:5f:fe:56:eb:4e:64:
27:68:93:cc:13:75:86:28:e2:cd:fe:b4:7a:00:0c:
83:5c:16:83:cb:e4:10:61:8c:1c:29:f2:69:b4:e0:
23:2d:96:bd:d5:b3:fa:75:44:23:4e:b6:b3:6c:73:
54:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BE:2C:FD:9D:23:D6:17:5C:07:31:8F:10:F0:A6:38:56:5A:A1:F9
X509v3 Authority Key Identifier:
keyid:56:0D:1E:89:B4:E7:42:E6:90:62:A9:5D:35:1D:EE:A9:6B:51:78:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/LL4s_Z0j1hdcBzGPEPCmOFZaofk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.222.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:e5:df:10:90:c1:5e:81:01:ff:ef:50:0e:99:c8:03:3c:c0:
a8:1c:a5:92:9b:19:f1:33:a1:06:ae:0c:c3:f4:26:6b:c1:0b:
5c:4f:64:4f:8c:a6:72:2d:2b:e1:a4:aa:82:fb:70:e8:6b:54:
aa:40:e8:cf:e3:3d:6b:76:79:0a:2b:17:03:02:49:bf:38:41:
f8:74:48:d6:60:cf:be:ec:44:0d:3c:7c:d3:8e:1e:c5:8b:ec:
14:42:69:e8:b5:17:17:98:da:a8:88:e0:89:3a:a5:1a:80:e9:
f6:8f:b5:a4:0e:50:7a:79:48:64:5f:8e:7c:62:c6:c1:57:53:
d9:b0:ed:b7:f3:59:e6:ef:f8:af:6e:2f:60:fa:ce:d9:70:b9:
e1:b5:45:15:32:de:98:f7:d4:82:2b:94:43:d7:5f:79:14:90:
49:3c:20:41:77:a1:b3:82:c0:e5:95:78:13:75:de:4e:18:3c:
1a:cd:23:c2:5e:db:18:42:40:5d:27:c0:82:d0:62:88:bb:8e:
9b:d0:c6:fb:23:b0:c3:72:4c:0c:2a:37:b0:85:e4:72:fe:4d:
8c:7d:4a:70:c8:ce:04:37:c7:a2:4c:8b:cd:a9:ed:a4:61:ee:
02:31:28:3b:37:3f:4b:e0:52:dd:8b:74:78:cd:af:1e:47:39:
f9:fd:74:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:29:15 2026 by rpki-client