Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/vHnmsylX39m_JK07hnZ_hCD5Z34.roa
File: vHnmsylX39m_JK07hnZ_hCD5Z34.roa (raw, json)
Hash identifier: Ke1X2Ykv5zFzvGKC+a00sWweDT8NAWBxkD6o6vcXF/M=
Subject key identifier: BC:79:E6:B3:29:57:DF:D9:BF:24:AD:3B:86:76:7F:84:20:F9:67:7E
Certificate issuer: /CN=38897cfcbf81565a808d4b67b98df558005800da
Certificate serial: 019F23689930CB5DD05BF4A9C6ED65ED0D91
Authority key identifier: 38:89:7C:FC:BF:81:56:5A:80:8D:4B:67:B9:8D:F5:58:00:58:00:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIl8_L-BVlqAjUtnuY31WABYANo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/vHnmsylX39m_JK07hnZ_hCD5Z34.roa
Signing time: Thu 02 Jul 2026 15:18:05 +0000
ROA not before: Thu 02 Jul 2026 15:18:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3356
IP address blocks: 91.227.24.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/OIl8_L-BVlqAjUtnuY31WABYANo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/OIl8_L-BVlqAjUtnuY31WABYANo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OIl8_L-BVlqAjUtnuY31WABYANo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:99:30:cb:5d:d0:5b:f4:a9:c6:ed:65:ed:0d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38897cfcbf81565a808d4b67b98df558005800da
Validity
Not Before: Jul 2 15:18:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc79e6b32957dfd9bf24ad3b86767f8420f9677e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2a:36:f0:60:ff:82:56:4a:16:c7:38:a0:d1:
d1:55:4a:82:37:cf:10:8e:b5:9b:20:a8:07:4b:9d:
b8:dd:93:31:34:01:f1:aa:52:87:65:73:70:4e:60:
90:13:86:0b:48:ac:9d:b2:a4:6b:98:6b:9c:fb:65:
b1:cf:9d:f8:bc:04:b6:4e:25:70:12:fd:3b:55:cd:
e6:79:16:21:e5:35:bd:7b:0f:2d:cb:12:f5:a9:bf:
c9:a9:7d:43:0d:aa:0e:d2:24:33:c3:64:76:e3:56:
0b:ae:af:aa:72:ec:93:85:28:d0:17:15:9a:02:3d:
85:04:7b:6b:3f:a7:d8:71:fb:f5:a2:9f:a6:6f:75:
c0:b7:63:80:45:a1:3d:4e:f8:6a:70:79:92:61:56:
3c:9b:a8:68:70:b1:21:75:4b:a8:a5:07:07:16:65:
99:bb:45:77:4f:f8:35:2b:1f:eb:62:f1:ee:f1:8f:
a1:ff:24:11:d1:c5:3d:1b:5d:6b:b6:8e:7a:de:0a:
fa:77:b9:aa:e9:09:fc:b4:cf:1f:bc:29:26:5a:d9:
6d:cc:da:9d:0a:c5:ca:a5:53:bc:f1:af:53:03:2d:
f4:b8:17:55:3e:52:8f:a3:eb:a7:58:6d:77:ab:2f:
4f:26:05:d0:d8:1e:37:c3:ce:25:46:95:07:8c:40:
2d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:79:E6:B3:29:57:DF:D9:BF:24:AD:3B:86:76:7F:84:20:F9:67:7E
X509v3 Authority Key Identifier:
keyid:38:89:7C:FC:BF:81:56:5A:80:8D:4B:67:B9:8D:F5:58:00:58:00:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIl8_L-BVlqAjUtnuY31WABYANo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/vHnmsylX39m_JK07hnZ_hCD5Z34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/OIl8_L-BVlqAjUtnuY31WABYANo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.24.0/23
Signature Algorithm: sha256WithRSAEncryption
23:3d:1f:d4:d8:3a:46:f4:22:d6:ae:f7:fd:24:13:a4:a5:51:
ca:2a:88:3c:67:77:d2:58:7c:81:48:19:45:cb:b7:4d:64:18:
17:8d:63:7a:d9:8a:ee:87:eb:d9:f8:b1:e7:2a:70:3a:eb:e1:
e1:56:00:3d:c7:c8:e7:5a:8d:4c:89:12:ff:cd:b8:48:79:cb:
fb:64:9b:5b:a7:02:ef:83:ec:4b:83:f5:f2:a7:48:4a:7a:81:
bf:bd:76:dd:76:c4:5d:cc:b8:bb:af:64:56:59:f4:f1:6a:2a:
dd:56:95:85:85:16:ef:87:7e:2c:8a:a7:d9:d8:fa:e3:40:aa:
b7:64:cf:36:2d:18:e7:a3:e0:7c:2c:a7:b4:46:62:9e:7e:64:
7e:85:34:98:33:25:fd:fd:0e:5c:9f:b7:4e:6e:1d:6c:24:fd:
62:da:1e:32:79:52:5a:0f:ad:f9:e4:f8:1e:30:ba:7c:51:ca:
9d:23:30:77:44:be:3e:57:44:2a:32:52:dd:36:a0:fb:d8:4c:
b0:3d:d2:e1:90:ce:f3:e0:6d:0c:0f:7f:14:77:f6:dd:56:5b:
b6:ca:af:f9:71:18:5f:62:e2:99:b9:e6:b5:85:3e:47:19:9e:
34:39:7b:92:91:35:7b:b9:7d:70:4e:69:12:cd:2c:01:1e:91:
df:4f:9a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 13:58:20 2026 by rpki-client