Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/fa5f55-00a3-4de5-8d27-c05823c436e3/1/IjhSeXDwvusbQcjhrnsKrkqMjMs.roa
File: IjhSeXDwvusbQcjhrnsKrkqMjMs.roa (raw, json)
Hash identifier: WM9UbddM+SxZstTFU66phFX+LJopIyVe8Pc+BnGorDs=
Subject key identifier: 22:38:52:79:70:F0:BE:EB:1B:41:C8:E1:AE:7B:0A:AE:4A:8C:8C:CB
Certificate issuer: /CN=0bd311f8a677ea04968edde3464fb33260f0de2a
Certificate serial: 019EB1736B0E4AD433D200D9F827B5DB8268
Authority key identifier: 0B:D3:11:F8:A6:77:EA:04:96:8E:DD:E3:46:4F:B3:32:60:F0:DE:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9MR-KZ36gSWjt3jRk-zMmDw3io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/fa5f55-00a3-4de5-8d27-c05823c436e3/1/IjhSeXDwvusbQcjhrnsKrkqMjMs.roa
Signing time: Wed 10 Jun 2026 12:13:11 +0000
ROA not before: Wed 10 Jun 2026 12:13:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6848
IP address blocks: 91.241.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/fa5f55-00a3-4de5-8d27-c05823c436e3/1/C9MR-KZ36gSWjt3jRk-zMmDw3io.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/fa5f55-00a3-4de5-8d27-c05823c436e3/1/C9MR-KZ36gSWjt3jRk-zMmDw3io.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9MR-KZ36gSWjt3jRk-zMmDw3io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b1:73:6b:0e:4a:d4:33:d2:00:d9:f8:27:b5:db:82:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd311f8a677ea04968edde3464fb33260f0de2a
Validity
Not Before: Jun 10 12:13:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2238527970f0beeb1b41c8e1ae7b0aae4a8c8ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:03:08:6f:d9:4f:59:eb:7e:21:b6:bd:4e:7f:
f0:72:1d:7b:72:39:4b:35:6d:17:b0:f6:47:d2:4e:
a7:a0:35:f9:f1:65:eb:c4:b1:3a:30:50:76:fb:14:
41:a5:8a:fb:28:2f:1b:88:c8:6d:5e:a9:b3:b9:d8:
e5:72:9e:c4:ac:b4:03:29:87:7b:4b:70:47:73:4c:
90:28:09:e4:ab:3a:2e:a8:49:8c:9b:f9:6b:2f:e3:
7a:11:44:1d:28:68:07:73:22:d3:21:e8:c0:b2:71:
8c:ac:9b:2d:e4:3a:61:84:ba:aa:95:d8:94:3d:8c:
97:37:25:8b:36:4d:59:91:fe:78:53:75:07:a1:81:
08:89:25:f0:56:eb:9a:4c:a5:51:81:5f:50:2e:d4:
2f:c1:37:23:6f:3b:11:ac:79:81:5c:a0:de:9a:15:
9d:f9:22:de:50:82:2d:de:79:0b:be:8e:55:5f:23:
c0:74:f0:eb:93:97:6f:67:cf:96:a5:64:17:29:75:
ea:dc:89:cc:43:2c:6f:c9:b6:b3:76:ba:cd:11:6f:
85:ff:e1:8b:e1:5e:a7:65:b6:69:69:2b:04:60:2c:
3e:21:8b:75:84:fa:7e:ea:71:4a:e0:e1:f2:ce:94:
46:9d:b0:cc:8c:6e:1c:e4:b9:f8:3d:af:af:97:00:
ce:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:38:52:79:70:F0:BE:EB:1B:41:C8:E1:AE:7B:0A:AE:4A:8C:8C:CB
X509v3 Authority Key Identifier:
keyid:0B:D3:11:F8:A6:77:EA:04:96:8E:DD:E3:46:4F:B3:32:60:F0:DE:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9MR-KZ36gSWjt3jRk-zMmDw3io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/fa5f55-00a3-4de5-8d27-c05823c436e3/1/IjhSeXDwvusbQcjhrnsKrkqMjMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/fa5f55-00a3-4de5-8d27-c05823c436e3/1/C9MR-KZ36gSWjt3jRk-zMmDw3io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.79.0/24
Signature Algorithm: sha256WithRSAEncryption
50:af:08:f9:80:bd:a1:8a:42:52:c9:fd:9c:99:da:ce:52:24:
fc:7f:e4:0a:17:f0:80:1e:e5:15:d7:be:3e:46:19:f1:fa:79:
ff:e0:fc:c4:8a:ca:26:50:0b:d5:c4:3e:82:ef:ad:4c:22:1c:
43:48:32:e3:eb:80:03:11:e0:79:f1:7e:66:12:cd:5d:37:14:
a3:d4:15:24:cf:29:e1:6d:cc:f9:6a:7c:8e:82:57:3a:ab:7d:
d8:a7:cb:24:ad:27:92:d1:fb:93:5b:e4:40:dd:b8:f4:de:1d:
f6:8f:58:d8:94:b7:d5:68:89:4c:32:53:4b:1e:0b:16:1c:a5:
ca:54:03:24:3d:20:db:3c:a3:2e:5b:c8:c1:06:26:0c:90:c6:
1c:2e:e4:a5:d7:78:23:d8:59:8d:be:3b:b8:b3:b0:53:96:11:
31:1f:d9:ac:a6:c7:57:64:0d:b4:52:a9:c3:33:a7:44:15:37:
70:1e:9d:bd:0e:c6:2a:8b:f4:61:f6:7f:a3:14:3b:2f:46:2c:
8e:18:da:ef:f6:c0:3c:43:2e:ff:46:f7:dd:ec:38:dc:30:5e:
66:4c:bc:9b:47:c1:f6:6d:e1:8c:f7:66:33:09:04:16:ea:83:
d1:aa:e5:d7:4f:43:03:07:29:a8:d8:bc:d7:02:2f:8f:c6:f8:
22:36:0e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:06:23 2026 by rpki-client