Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/bR49W-fLfnPV9jOae-FinorZ08U.roa
File: bR49W-fLfnPV9jOae-FinorZ08U.roa (raw, json)
Hash identifier: 5e6OwWdwStFE014wvp1Q5rpEfFgYf91vyn3XQnqLGlU=
Subject key identifier: 6D:1E:3D:5B:E7:CB:7E:73:D5:F6:33:9A:7B:E1:62:9E:8A:D9:D3:C5
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 01A0C43FFA1A2C82782B9CFCD500AAF36551
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/bR49W-fLfnPV9jOae-FinorZ08U.roa
Signing time: Mon 21 Sep 2026 13:55:22 +0000
ROA not before: Mon 21 Sep 2026 13:55:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200590
IP address blocks: 91.237.164.0/24 maxlen: 24
91.237.165.0/24 maxlen: 24
91.237.166.0/24 maxlen: 24
91.237.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:3f:fa:1a:2c:82:78:2b:9c:fc:d5:00:aa:f3:65:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Sep 21 13:55:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d1e3d5be7cb7e73d5f6339a7be1629e8ad9d3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:2e:c9:7e:3a:db:e4:89:17:3c:c0:a0:b4:
25:56:8e:ea:bf:f6:61:04:15:f5:63:54:f9:f4:c8:
67:d2:01:a6:07:38:62:89:ba:7e:f7:7e:f5:85:30:
46:a9:15:a2:9a:96:f3:7e:36:c9:42:2a:8a:fb:bb:
f7:49:2d:7a:39:c1:b0:79:16:36:2a:43:63:0c:f4:
bc:13:8b:bc:82:83:e7:74:aa:79:dc:6f:f4:4a:db:
57:d8:46:73:1b:0b:8d:ac:2a:22:59:6c:b9:5d:4e:
4e:34:02:94:03:8a:d8:a7:1e:4d:73:93:9d:28:61:
3b:ea:0b:a2:41:df:34:50:db:5b:67:ea:d8:cf:d1:
46:6c:fa:12:f7:bd:04:36:f4:db:b2:65:74:7d:4e:
d3:b1:62:19:ca:a4:26:79:74:68:0e:0a:5b:59:39:
56:1f:e0:80:f5:8b:f0:b1:c2:7f:85:70:cd:e6:d1:
bf:67:c4:1f:b7:ff:6b:9c:be:a8:ca:89:d8:6b:fe:
37:fa:5c:7a:6c:59:f4:8c:75:31:94:5b:e3:e0:bd:
7e:36:a9:41:f0:cb:3c:bb:f3:c5:1f:ee:44:b9:f9:
00:3b:ed:5f:ac:05:8d:9e:4a:bc:ca:2e:10:b1:49:
48:17:b2:ec:23:4a:ff:d5:8c:12:9c:7d:58:9f:88:
e8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1E:3D:5B:E7:CB:7E:73:D5:F6:33:9A:7B:E1:62:9E:8A:D9:D3:C5
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/bR49W-fLfnPV9jOae-FinorZ08U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.164.0/22
Signature Algorithm: sha256WithRSAEncryption
75:bb:28:fb:c4:1f:5b:94:9a:aa:6a:ae:82:d9:65:87:08:4c:
e9:aa:99:f9:7b:cb:b6:30:00:a7:34:e4:85:02:a1:e3:da:d0:
eb:f9:78:73:aa:d6:fe:d9:b4:91:5e:a7:ea:b1:1c:01:43:3a:
65:b3:1e:67:58:4a:cd:42:f0:f4:db:eb:db:42:da:9a:24:92:
37:2d:36:85:4e:b4:8c:f5:13:2f:53:7b:86:fc:81:21:ad:2b:
17:eb:1c:a8:45:75:e3:6d:4d:73:87:ce:a3:51:cc:32:fa:75:
8a:22:8d:4f:fd:2c:d1:3b:77:13:c4:b6:b2:79:13:9b:d4:97:
df:1e:72:44:03:c6:e0:db:84:ab:d6:16:e9:af:77:5b:25:9a:
24:35:c4:7a:57:15:a3:25:fa:eb:02:6a:8b:31:14:3d:d5:ed:
8e:1f:dd:e1:74:89:42:03:48:00:52:b2:ae:80:65:38:6c:ec:
8b:6b:c0:35:cd:fa:fd:b4:1a:6a:f9:2f:d4:72:83:9b:c9:b6:
17:3d:0a:a9:59:ee:80:31:a9:eb:41:d1:b3:2b:21:9c:34:77:
4c:9f:06:a0:90:7f:2b:77:5a:c9:71:1f:01:66:b2:60:10:ee:
95:9c:3c:a0:e1:0c:f2:4f:83:55:c7:53:16:46:c7:81:69:05:
28:dd:17:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:35:59 2026 by rpki-client