Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/42BFHGjX0bzPkKLzW4nj7c5jtTc.roa
File: 42BFHGjX0bzPkKLzW4nj7c5jtTc.roa (raw, json)
Hash identifier: n6bWVgGKzyz1m/NGMgopOR2F2jnCFtpr5dDWpPXcm0o=
Subject key identifier: E3:60:45:1C:68:D7:D1:BC:CF:90:A2:F3:5B:89:E3:ED:CE:63:B5:37
Certificate issuer: /CN=d7c733e9f6134f7449c41a5eebf583ce35b54260
Certificate serial: 019B7B36AF2581E716E5B8AF86F2F2A1544E
Authority key identifier: D7:C7:33:E9:F6:13:4F:74:49:C4:1A:5E:EB:F5:83:CE:35:B5:42:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/42BFHGjX0bzPkKLzW4nj7c5jtTc.roa
Signing time: Thu 01 Jan 2026 20:18:59 +0000
ROA not before: Thu 01 Jan 2026 20:18:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47904
IP address blocks: 91.216.54.0/24 maxlen: 24
91.223.115.0/24 maxlen: 24
2001:67c:2324::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 20:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:af:25:81:e7:16:e5:b8:af:86:f2:f2:a1:54:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c733e9f6134f7449c41a5eebf583ce35b54260
Validity
Not Before: Jan 1 20:18:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e360451c68d7d1bccf90a2f35b89e3edce63b537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:32:1e:92:48:20:cd:a4:a9:2f:5d:a2:d1:56:
f9:08:55:c9:52:68:96:1a:f6:cd:c5:f8:b6:bd:60:
3e:f2:19:bd:0a:5b:f4:e4:f6:8a:ed:b3:73:bf:b5:
ac:ad:c2:db:a2:f2:8e:31:48:bf:93:d7:c7:ac:57:
ae:3f:8a:e0:5d:c9:15:9a:b2:f2:40:48:d7:8b:82:
a9:91:ff:42:43:06:11:51:f2:5a:0f:e9:40:c8:a8:
07:6b:10:88:f5:a8:c2:78:cf:91:29:4a:3b:cf:3d:
66:58:eb:65:ec:09:58:b4:cb:b1:d6:64:f0:d2:81:
c4:9d:ee:33:6b:fa:44:ee:fd:05:eb:53:a7:a6:3f:
37:a9:c7:39:43:64:09:a6:ae:4a:ca:41:18:97:1c:
05:a4:d0:ab:52:4e:eb:8b:b9:24:3c:0e:ad:33:4b:
94:ff:50:e9:85:ff:3f:60:e4:32:af:c0:7c:15:d5:
36:eb:34:52:50:30:19:9d:54:1a:92:33:2d:7e:e7:
be:b0:e6:e9:71:cb:07:9c:38:ff:c5:2b:8e:dd:13:
37:29:5a:20:51:71:b5:bb:c1:fe:95:85:2f:7b:7d:
29:58:1f:d9:3f:e6:29:b3:2c:4f:ae:b5:8a:28:83:
53:1a:8f:a2:42:92:a1:10:11:63:2d:69:bc:92:c7:
2f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:60:45:1C:68:D7:D1:BC:CF:90:A2:F3:5B:89:E3:ED:CE:63:B5:37
X509v3 Authority Key Identifier:
keyid:D7:C7:33:E9:F6:13:4F:74:49:C4:1A:5E:EB:F5:83:CE:35:B5:42:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18cz6fYTT3RJxBpe6_WDzjW1QmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/42BFHGjX0bzPkKLzW4nj7c5jtTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ebbdc6-9f22-4e2f-be8c-9c902c66ee99/1/18cz6fYTT3RJxBpe6_WDzjW1QmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.54.0/24
91.223.115.0/24
IPv6:
2001:67c:2324::/48
Signature Algorithm: sha256WithRSAEncryption
05:8c:1b:3c:15:1d:b0:f2:74:8e:78:17:1f:c6:48:f0:d3:00:
38:18:55:8f:b4:76:04:cc:55:a0:4f:40:fd:9d:f1:e3:d6:a7:
ee:d8:92:02:be:6e:ca:75:a9:82:c3:a0:78:dd:2a:86:ca:47:
3d:f2:e4:2e:cc:4e:f7:b7:0b:5f:57:73:3e:34:dc:a1:48:9f:
01:59:4b:a3:f1:aa:05:df:86:3f:d4:b8:b6:5b:89:54:41:4c:
16:cc:ea:14:e8:32:fa:1b:59:5b:5f:3f:81:95:fb:2a:e0:ad:
4c:07:72:94:81:83:2b:5c:5d:70:e0:12:8c:d6:56:3f:a5:ba:
5d:4f:9b:d5:90:4c:4b:dc:b3:67:b9:62:13:58:cc:ab:01:4f:
95:ae:d3:86:d7:86:21:41:21:90:03:e9:0b:5b:a6:25:e7:be:
0a:4b:a9:7f:2f:b3:91:38:bc:49:fc:1f:5b:2d:9f:0e:cb:33:
a4:63:50:58:19:b3:37:ed:79:9d:1b:1c:be:bf:f7:b2:d3:9c:
11:1b:15:5c:52:bd:4c:8c:e4:a8:fe:1c:f0:cd:41:8a:a9:fa:
ea:ba:67:e5:f0:da:b8:83:72:d9:39:76:09:37:bf:dc:7d:7d:
b2:ab:4b:8d:84:dc:aa:b0:80:3a:75:1c:2a:6e:16:f7:4e:80:
19:b1:aa:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:03:01 2026 by rpki-client