Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/oRPXVUgHL0LDvDjEUDSlG75PF3o.roa
File: oRPXVUgHL0LDvDjEUDSlG75PF3o.roa (raw, json)
Hash identifier: 1x0sMo0u1V5/nyEwm6Ho2KfhuIQlG3gDK6gbvkB7UY8=
Subject key identifier: A1:13:D7:55:48:07:2F:42:C3:BC:38:C4:50:34:A5:1B:BE:4F:17:7A
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 01A091A3846CD5730A3F0549145E41F8A250
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/oRPXVUgHL0LDvDjEUDSlG75PF3o.roa
Signing time: Fri 11 Sep 2026 18:03:27 +0000
ROA not before: Fri 11 Sep 2026 18:03:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60781
IP address blocks: 91.229.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:91:a3:84:6c:d5:73:0a:3f:05:49:14:5e:41:f8:a2:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Sep 11 18:03:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a113d75548072f42c3bc38c45034a51bbe4f177a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:11:1d:3d:71:6b:f1:0a:55:c7:bd:cb:d8:25:
41:4b:76:27:26:31:a7:63:db:0e:11:b2:c9:5c:79:
12:24:39:4c:7a:af:cf:80:c9:d0:9d:5a:be:76:71:
69:06:7e:93:16:76:b8:ff:2a:cb:b0:fa:4c:30:88:
3b:f6:af:1a:a5:63:6f:5b:ff:e8:59:a5:8e:3f:53:
aa:85:60:86:cb:af:6e:32:5d:9f:84:4d:94:0b:39:
8f:de:9e:83:d3:7b:87:64:3e:da:7e:31:20:6a:1e:
79:3f:0e:3e:d1:d3:9f:9a:01:23:aa:d7:62:d2:4f:
3c:12:9d:53:a4:ec:4a:d5:ad:7a:5f:04:9d:d0:7d:
a7:4b:39:35:2e:60:e0:e5:1f:bb:77:ec:8c:e5:ab:
d1:59:63:7c:2f:cb:4e:22:0c:5f:d1:cd:83:0b:34:
68:25:e0:42:d4:38:52:c0:f4:ae:fd:58:4e:45:90:
42:3c:35:0f:19:dd:b3:27:6a:9f:19:09:8d:0d:06:
03:69:3e:74:f3:11:58:c8:5f:01:a4:12:74:21:b4:
53:92:4c:bb:4c:1f:9c:2d:49:a7:a0:c3:8c:c1:6d:
33:41:ec:fc:78:dc:7e:76:58:16:55:d3:9b:fe:5f:
39:a5:02:89:47:f7:01:e0:e3:82:8e:2b:c7:e5:73:
a5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:13:D7:55:48:07:2F:42:C3:BC:38:C4:50:34:A5:1B:BE:4F:17:7A
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/oRPXVUgHL0LDvDjEUDSlG75PF3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.118.0/24
Signature Algorithm: sha256WithRSAEncryption
13:b2:32:a7:d6:70:a4:23:aa:94:81:a3:f6:69:69:4c:ad:48:
9d:5a:a4:7f:98:dc:b1:0e:ca:7a:da:48:cc:2f:c1:e5:9d:51:
19:6a:35:2f:a5:10:ee:4e:71:41:02:c1:71:d1:49:97:56:66:
96:91:32:04:92:2b:c9:01:8f:2e:fb:4c:43:6c:6a:43:6b:bb:
75:b2:24:c4:a9:be:7b:ca:62:a7:36:0e:4c:91:34:82:b2:56:
2a:16:e8:f6:68:b3:97:dc:1f:d0:e9:a8:3d:98:ac:e8:ba:9e:
cd:ad:2d:91:e8:17:8e:3a:ed:f0:ce:bf:25:09:86:56:f4:9b:
84:be:d0:d2:1a:a4:ee:3c:9f:d3:f7:f1:c6:9b:4a:c9:63:1e:
10:7b:89:a6:1d:45:2f:5f:69:22:12:6e:8d:73:42:bd:6f:bb:
e0:ba:f0:11:08:81:85:71:52:ef:1f:47:35:ad:24:2f:ad:a5:
38:64:8b:13:87:d4:51:9e:a2:a7:30:91:4b:7b:57:5e:67:61:
65:12:e2:70:c6:8e:4c:56:9e:62:24:52:f0:fb:3b:d6:38:f6:
f4:c4:3d:dc:49:55:fe:6c:32:f1:12:12:69:16:7a:4b:f3:c1:
2e:99:06:39:49:53:6c:37:2a:a8:91:49:b1:d7:56:ea:57:4f:
e3:70:41:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:59:40 2026 by rpki-client