Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/7h5eSPNlffr_391YlxjHN1ItANQ.roa
File: 7h5eSPNlffr_391YlxjHN1ItANQ.roa (raw, json)
Hash identifier: XEuG2vwGeCYbNa542z5LaRxd5TGJ34KJdQn28qGEDr0=
Subject key identifier: EE:1E:5E:48:F3:65:7D:FA:FF:DF:DD:58:97:18:C7:37:52:2D:00:D4
Certificate issuer: /CN=c4138bb210b7c1a8f0666e0759f475f0064df1f7
Certificate serial: 019BFA1490C76AE29C0074E72362EC3DBDF1
Authority key identifier: C4:13:8B:B2:10:B7:C1:A8:F0:66:6E:07:59:F4:75:F0:06:4D:F1:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBOLshC3wajwZm4HWfR18AZN8fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/7h5eSPNlffr_391YlxjHN1ItANQ.roa
Signing time: Mon 26 Jan 2026 11:33:30 +0000
ROA not before: Mon 26 Jan 2026 11:33:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204751
IP address blocks: 91.209.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBOLshC3wajwZm4HWfR18AZN8fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fa:14:90:c7:6a:e2:9c:00:74:e7:23:62:ec:3d:bd:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4138bb210b7c1a8f0666e0759f475f0064df1f7
Validity
Not Before: Jan 26 11:33:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee1e5e48f3657dfaffdfdd589718c737522d00d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ce:8e:b3:c8:49:ba:c0:7b:3d:58:cb:06:d8:
20:d5:9b:2f:75:d8:1a:07:24:12:f1:6c:20:41:75:
87:ba:cd:a4:59:c3:4b:ba:04:51:c3:66:d4:22:47:
95:37:62:d1:b9:0c:70:b2:ba:ca:58:d3:f9:b7:ed:
90:8c:e1:aa:af:15:40:be:16:8a:d4:08:5b:00:e9:
c4:eb:6a:f3:f2:c9:6a:83:07:5c:17:47:b1:55:59:
8f:3b:78:55:89:78:16:47:b1:da:59:11:95:a7:8e:
12:8f:b9:6a:32:6f:6d:7c:05:a5:56:e2:93:db:3d:
d0:4c:97:13:08:c5:63:ff:30:1a:e0:80:9e:b1:b8:
bd:f8:f5:1a:43:80:be:00:96:4b:3c:de:52:4f:1b:
71:9d:02:ef:bd:20:51:b7:d7:aa:3e:e9:e8:3c:76:
da:0f:a5:d4:17:a6:76:d0:04:b6:5e:56:52:10:2a:
3b:5a:2d:51:d8:8c:85:f1:e9:ac:f5:39:0a:6a:cc:
e6:06:d8:73:36:8e:32:67:68:65:bf:54:bf:50:56:
98:18:07:0c:93:8b:6d:a8:73:55:ad:a1:93:ae:c0:
27:20:58:da:f1:e6:db:35:f5:e1:80:ac:67:78:fe:
62:77:19:71:31:51:ad:cd:ac:77:2d:1a:14:e0:76:
28:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1E:5E:48:F3:65:7D:FA:FF:DF:DD:58:97:18:C7:37:52:2D:00:D4
X509v3 Authority Key Identifier:
keyid:C4:13:8B:B2:10:B7:C1:A8:F0:66:6E:07:59:F4:75:F0:06:4D:F1:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBOLshC3wajwZm4HWfR18AZN8fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/7h5eSPNlffr_391YlxjHN1ItANQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9fa54a-a983-4958-a92e-fb1f2aac567e/1/xBOLshC3wajwZm4HWfR18AZN8fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.168.0/24
Signature Algorithm: sha256WithRSAEncryption
77:5f:b8:ec:3a:92:2c:e4:e7:e4:43:84:5d:b1:9d:94:be:99:
2e:45:59:48:bf:40:cd:3b:fa:3e:f4:a2:0a:42:82:4a:79:3d:
34:25:5a:0e:d2:f7:06:a9:7d:19:24:9d:a0:4a:0a:e8:13:f0:
c1:ed:57:e4:ee:91:8a:f4:a4:7c:ba:17:21:1b:e0:bc:6f:9c:
bf:6b:9d:e8:78:bc:75:37:42:47:95:88:ea:e0:bd:31:e5:dd:
3f:f8:50:85:5e:8d:0c:b4:99:6e:5d:da:e9:5b:e5:81:b1:b1:
3a:86:f7:c7:d3:78:b6:e2:01:2c:a4:37:3d:8e:37:fd:a8:e3:
b7:4b:61:95:15:5b:43:2e:2a:5d:ba:8b:e9:7a:d9:c8:78:7f:
6c:ff:22:9e:ea:8b:af:07:6c:d9:96:f3:74:34:ff:86:89:8a:
ab:c5:ba:a9:03:52:5a:c7:5a:b2:46:94:84:2c:8b:7d:8d:d5:
ef:e6:89:c7:7b:78:10:45:5a:a4:7a:f0:30:c4:83:c7:34:96:
60:f9:d0:44:b4:27:b4:21:24:90:90:75:43:ab:16:d2:fd:87:
6e:ca:f1:83:d1:ca:da:f4:19:cd:7f:ec:9b:6c:99:40:b7:e8:
ad:11:89:aa:ab:81:f3:12:3d:cf:7a:ea:9d:d2:5e:68:c8:6c:
11:4b:f9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:35:32 2026 by rpki-client