Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/1-v2BZe7GqHI_RFasW9MH8N-JZxY.roa
File: 1-v2BZe7GqHI_RFasW9MH8N-JZxY.roa (raw, json)
Hash identifier: s0okpxj+ww26V5PGcp95/8yysRkdvbuly1G+a93DjM8=
Subject key identifier: FA:FD:81:65:EE:C6:A8:72:3F:44:56:AC:5B:D3:07:F0:DF:89:67:16
Certificate issuer: /CN=d1df4803e54b084a99cb7bb044bf791327594b73
Certificate serial: 01A08089A9B903BBB8AD3B90FF3E7037BD41
Authority key identifier: D1:DF:48:03:E5:4B:08:4A:99:CB:7B:B0:44:BF:79:13:27:59:4B:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/1-v2BZe7GqHI_RFasW9MH8N-JZxY.roa
Signing time: Tue 08 Sep 2026 10:21:40 +0000
ROA not before: Tue 08 Sep 2026 10:21:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 91.142.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:89:a9:b9:03:bb:b8:ad:3b:90:ff:3e:70:37:bd:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1df4803e54b084a99cb7bb044bf791327594b73
Validity
Not Before: Sep 8 10:21:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fafd8165eec6a8723f4456ac5bd307f0df896716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:48:ca:2b:5d:18:83:fc:91:3f:7c:39:69:bd:
92:78:8f:cc:49:86:46:a3:e2:61:60:bd:c6:64:2c:
c2:dc:46:cd:e8:e5:22:58:14:08:59:5f:98:3c:b5:
31:32:91:ff:96:a8:e8:10:70:bd:6e:99:8e:17:a6:
57:25:9f:97:77:e0:fe:cb:3b:76:a8:f5:af:b6:87:
15:39:de:d2:dd:9b:85:37:ee:48:2c:01:77:fe:bb:
e6:bf:ce:91:64:96:d7:cd:a9:36:f4:68:2e:80:a0:
54:69:96:13:7e:17:50:dd:0c:2c:59:45:5f:9c:9e:
b1:4c:7c:e7:d3:a5:ea:0b:2c:d2:37:44:3c:0d:77:
02:a6:69:fa:e1:9a:0d:10:f0:0b:21:a4:5b:1d:8e:
06:15:de:fd:09:25:ce:25:f7:f6:2f:6b:e0:e2:0d:
f5:03:39:1c:f9:5f:07:a1:51:7c:29:ea:aa:c1:93:
bc:aa:8a:d9:40:0c:45:9a:14:7b:dd:8a:50:4b:6f:
80:a3:57:e1:dd:be:ee:93:c7:d2:05:ae:a5:39:83:
82:75:85:16:85:c6:e0:8a:44:be:e5:d6:64:1e:d0:
3d:37:c3:84:59:64:97:15:82:c9:11:3e:25:8b:ce:
d6:c0:6c:f7:7d:c3:88:13:09:52:1d:f6:10:f2:3b:
87:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FD:81:65:EE:C6:A8:72:3F:44:56:AC:5B:D3:07:F0:DF:89:67:16
X509v3 Authority Key Identifier:
keyid:D1:DF:48:03:E5:4B:08:4A:99:CB:7B:B0:44:BF:79:13:27:59:4B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d9IA-VLCEqZy3uwRL95EydZS3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/1-v2BZe7GqHI_RFasW9MH8N-JZxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0d5f53-9653-47fb-a977-48f5e8767d02/1/0d9IA-VLCEqZy3uwRL95EydZS3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.142.140.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:9a:05:f4:97:f1:d2:40:53:f1:93:cc:30:e2:f2:2b:41:3f:
48:34:3e:88:b5:e7:c9:07:03:f3:86:65:25:9d:74:bb:76:76:
3f:6e:f5:57:e6:47:5e:b1:44:13:eb:8f:68:69:af:9b:7f:37:
e0:74:c0:7c:de:15:d8:14:40:30:25:17:5d:2e:5a:5c:66:b9:
5d:e5:87:e0:f0:de:4f:ea:c4:f4:c9:63:f6:c7:89:f0:b1:6e:
ce:24:97:5e:42:53:70:81:8b:29:41:e9:3f:4d:a1:95:eb:ac:
64:4a:16:d3:9a:c9:41:06:74:83:2c:48:11:a0:89:f4:14:0b:
c6:d3:67:16:22:0a:46:d5:bf:c0:69:61:71:24:10:ec:92:fa:
fd:1c:e1:f3:cc:86:8c:5d:cf:82:8b:1e:20:05:a9:06:55:0e:
f2:39:e9:60:e0:a2:f9:ba:79:f8:23:34:e5:79:dc:0a:c2:cc:
b1:5d:2f:32:e5:66:67:8f:45:bb:29:b6:14:f9:b6:85:28:b4:
b9:b1:2e:96:ff:7f:aa:58:11:46:31:4d:d2:49:b8:40:68:9f:
da:f5:1f:a4:6b:ca:28:51:13:d3:34:59:51:16:f5:cb:d7:fd:
ab:c2:fc:72:55:bd:c7:c6:37:24:61:86:f2:4a:08:07:06:08:
df:26:be:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:47:59 2026 by rpki-client