Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/_WRsTWt5ilvC18u9jW4tmRy2hJw.roa
File: _WRsTWt5ilvC18u9jW4tmRy2hJw.roa (raw, json)
Hash identifier: FSHpNqv1WPRCkPAW3tk75kwS45o2WxoPkRBJKuK3fZs=
Subject key identifier: FD:64:6C:4D:6B:79:8A:5B:C2:D7:CB:BD:8D:6E:2D:99:1C:B6:84:9C
Certificate issuer: /CN=009267f3e3b9e1ebb979969080b0dfab24c3601a
Certificate serial: 01A0C42F4596FE02824E1D6006A5F2D782AF
Authority key identifier: 00:92:67:F3:E3:B9:E1:EB:B9:79:96:90:80:B0:DF:AB:24:C3:60:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJJn8-O54eu5eZaQgLDfqyTDYBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/_WRsTWt5ilvC18u9jW4tmRy2hJw.roa
Signing time: Mon 21 Sep 2026 13:37:07 +0000
ROA not before: Mon 21 Sep 2026 13:37:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57912
IP address blocks: 91.236.144.0/22 maxlen: 22
91.236.144.0/24 maxlen: 24
91.236.145.0/24 maxlen: 24
91.236.146.0/24 maxlen: 24
91.236.147.0/24 maxlen: 24
2001:67c:261c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJJn8-O54eu5eZaQgLDfqyTDYBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:2f:45:96:fe:02:82:4e:1d:60:06:a5:f2:d7:82:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=009267f3e3b9e1ebb979969080b0dfab24c3601a
Validity
Not Before: Sep 21 13:37:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd646c4d6b798a5bc2d7cbbd8d6e2d991cb6849c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8f:d1:48:32:c9:eb:ba:4a:07:9a:22:f2:ea:
07:ce:09:6c:af:fc:93:73:b5:ee:61:9b:75:66:b5:
16:b0:a5:93:fd:b9:85:68:07:f6:c7:22:06:0e:dc:
b6:14:b0:e1:56:42:53:fc:fb:76:5e:ad:c0:af:41:
3f:23:45:b3:93:9f:b5:e2:ca:99:6f:10:6a:e4:72:
15:5a:0e:9d:54:7b:63:b0:6a:e7:ce:99:2a:a4:c8:
b9:08:0e:97:c5:22:62:6c:2f:1d:cb:f7:27:53:06:
7a:a8:6d:3f:1a:e7:7b:94:a1:dd:fc:16:01:48:2f:
1c:8b:7b:b6:11:ea:23:6f:94:1a:c4:59:89:0c:1a:
5d:ad:01:fb:35:3e:6f:f6:c7:6a:ef:04:63:ab:3e:
ff:5e:05:53:00:47:f5:3c:b9:14:8f:9e:c7:aa:7c:
0c:ea:c7:24:45:46:85:52:01:51:01:83:25:c7:23:
7c:85:bb:43:21:c1:1d:c2:aa:43:5e:30:94:f3:ba:
b9:f8:2f:12:69:55:e2:00:24:07:6b:13:2b:28:0d:
67:5e:d3:cc:ba:fa:33:ca:1a:6d:82:32:ea:18:6a:
1f:f1:fc:e6:01:62:63:e6:5e:e4:ba:be:03:0c:10:
cf:15:75:5d:d7:61:f4:b1:0c:2b:42:91:56:d6:bf:
56:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:64:6C:4D:6B:79:8A:5B:C2:D7:CB:BD:8D:6E:2D:99:1C:B6:84:9C
X509v3 Authority Key Identifier:
keyid:00:92:67:F3:E3:B9:E1:EB:B9:79:96:90:80:B0:DF:AB:24:C3:60:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJJn8-O54eu5eZaQgLDfqyTDYBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/_WRsTWt5ilvC18u9jW4tmRy2hJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.144.0/22
IPv6:
2001:67c:261c::/48
Signature Algorithm: sha256WithRSAEncryption
9c:e2:58:79:05:9a:6b:53:3b:74:21:92:32:a0:6e:b5:06:d0:
56:81:7e:70:74:2c:42:2c:36:f0:00:2f:74:d2:f5:e0:1a:8b:
d0:b2:ff:88:7c:a1:76:a0:3f:b6:e6:de:a8:4c:8c:bf:24:d7:
76:56:2b:77:2e:7c:b8:fc:8e:0a:5b:39:a9:23:d6:e1:6f:d5:
b2:13:b4:8c:aa:1b:0e:3c:6a:81:f3:85:d3:5d:b2:43:d8:36:
29:4e:c9:64:a4:3d:c1:0c:af:7b:0a:7c:9a:4c:e2:79:ed:3a:
ab:96:ad:44:08:2c:f4:35:d0:47:c4:37:b2:38:60:f6:2c:a9:
bc:1a:fa:64:72:17:01:63:84:78:e5:1b:3a:5a:f9:bd:73:31:
89:35:c7:1c:02:e1:e6:4a:6c:81:10:15:26:78:8a:05:27:ed:
6d:c0:82:d6:66:39:f3:56:97:29:00:95:93:d0:d1:c0:ed:4f:
11:4d:e6:09:bb:ee:77:77:57:c1:e0:d7:23:2d:d4:5d:cb:ae:
ed:86:ce:07:c6:4a:c1:3f:5a:21:15:d6:9b:86:86:18:92:1a:
d9:7e:2b:ab:2b:55:55:13:9c:73:16:2f:09:42:f0:4b:47:4b:
45:75:f3:84:1b:b9:81:cb:10:a7:a4:03:5d:af:84:c8:56:66:
26:b4:40:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:44:06 2026 by rpki-client