Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/07FQcpcOx9dIkPfjKLtsF7CxIoA.roa
File: 07FQcpcOx9dIkPfjKLtsF7CxIoA.roa (raw, json)
Hash identifier: 06X1mFh23OQI27UHgwFuA+R/te6ohldQDL+yi481fPk=
Subject key identifier: D3:B1:50:72:97:0E:C7:D7:48:90:F7:E3:28:BB:6C:17:B0:B1:22:80
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 019C713AED5B6FB8CA7C9E59DC90A13B4029
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/07FQcpcOx9dIkPfjKLtsF7CxIoA.roa
Signing time: Wed 18 Feb 2026 14:50:13 +0000
ROA not before: Wed 18 Feb 2026 14:50:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213541
IP address blocks: 91.108.200.0/22 maxlen: 22
91.108.200.0/24 maxlen: 24
91.108.204.0/22 maxlen: 22
91.108.204.0/24 maxlen: 24
91.108.216.0/22 maxlen: 22
91.108.216.0/24 maxlen: 24
91.108.220.0/22 maxlen: 22
91.108.220.0/24 maxlen: 24
91.108.226.0/24 maxlen: 24
91.108.228.0/22 maxlen: 22
91.108.232.0/22 maxlen: 22
91.108.236.0/24 maxlen: 24
91.108.238.0/24 maxlen: 24
91.108.247.0/24 maxlen: 24
91.108.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:71:3a:ed:5b:6f:b8:ca:7c:9e:59:dc:90:a1:3b:40:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Feb 18 14:50:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3b15072970ec7d74890f7e328bb6c17b0b12280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4f:d2:3f:71:10:e9:5c:bd:92:ae:29:4e:33:
79:00:15:7d:a4:36:42:41:1e:f2:8d:86:8e:53:84:
ea:d4:ad:2a:f0:53:65:eb:04:4d:5d:33:00:8f:d9:
64:7a:96:14:8b:4a:0c:d3:89:9f:21:4e:4f:5f:55:
06:d4:0d:7a:34:18:45:8e:77:de:df:6a:52:80:f9:
4b:a1:9c:3f:e7:b9:1a:f0:05:c8:0d:88:e7:1e:f4:
22:09:2b:f8:cb:5e:2a:c5:ba:8c:12:09:33:19:35:
4b:13:5e:b4:96:55:1d:01:5e:64:7d:65:ca:c6:5e:
96:f6:e4:56:fe:ba:d2:b0:6a:6c:6b:22:27:a8:af:
76:7f:07:0a:9a:10:a4:e3:95:6e:0d:15:34:ed:dc:
52:9e:46:00:ce:63:79:ae:58:6f:55:25:68:d6:d9:
e4:0f:fc:bf:a8:69:3f:f8:fd:3a:3c:e5:4d:0b:57:
ee:e9:13:4d:d5:b9:76:74:63:bd:0d:f2:47:c6:40:
aa:d3:31:81:7f:d9:1e:44:e3:96:f3:8c:68:d4:18:
d6:ab:22:6b:e0:65:fe:14:7c:c3:40:b1:83:d7:78:
03:03:a2:f6:ef:b7:e1:6d:15:40:12:02:78:5f:bd:
b7:03:ad:dd:dc:9e:cc:bc:0e:66:44:ed:32:17:b6:
ef:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B1:50:72:97:0E:C7:D7:48:90:F7:E3:28:BB:6C:17:B0:B1:22:80
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/07FQcpcOx9dIkPfjKLtsF7CxIoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.200.0/21
91.108.216.0/21
91.108.226.0/24
91.108.228.0-91.108.236.255
91.108.238.0/24
91.108.247.0/24
91.108.255.0/24
Signature Algorithm: sha256WithRSAEncryption
84:a6:41:50:e6:31:6c:d8:b2:be:00:d3:06:a3:8f:79:d4:a5:
ee:2d:2d:24:b9:a3:f0:4e:cf:f2:d1:53:5d:5b:9a:72:ba:8b:
8f:5c:07:62:2f:17:a6:d3:b6:78:28:6e:43:0c:d7:11:85:ca:
75:b0:13:c8:be:9c:7e:f4:c6:e2:59:84:3f:47:af:3d:2f:81:
3f:26:25:d2:4f:41:b1:a9:37:fc:32:8c:6b:47:70:d3:e0:96:
b5:15:9b:3e:dd:ca:d2:d2:80:a9:81:db:f0:3a:37:87:c7:c9:
9d:fd:da:43:a6:e5:1a:4b:90:54:46:1f:96:fc:f3:5e:40:00:
4e:34:5a:c7:1e:28:b1:6a:c7:57:c1:2f:1e:ec:5c:84:83:49:
79:4e:a3:41:f7:c5:6b:fe:5c:0d:d6:47:da:7a:1c:3f:06:53:
b6:38:15:fe:04:ff:f5:5c:ad:d0:5a:1e:5c:04:88:74:77:73:
f0:39:45:92:d1:77:87:8e:ac:5c:97:2c:6e:10:4b:17:d1:3b:
0b:58:c7:c3:de:27:d2:9d:cc:fa:11:06:e2:27:7c:7d:7b:65:
9e:fc:f4:81:1f:cd:3a:79:db:f9:ed:a3:35:ec:15:51:0b:6e:
5f:57:48:20:cc:62:af:4c:36:53:65:9f:eb:da:b1:39:f0:14:
73:ba:98:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:37:36 2026 by rpki-client