Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/_e2viSX2Cc4JXv_cbmuILSeuihQ.roa
File: _e2viSX2Cc4JXv_cbmuILSeuihQ.roa (raw, json)
Hash identifier: PfUh/7pgzeDHAL1fuiNNQswdY41u2UYMZ8jvRsTg5Po=
Subject key identifier: FD:ED:AF:89:25:F6:09:CE:09:5E:FF:DC:6E:6B:88:2D:27:AE:8A:14
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019F46E24FFD7DA0C002A8CD0D676F570FB1
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/_e2viSX2Cc4JXv_cbmuILSeuihQ.roa
Signing time: Thu 09 Jul 2026 12:37:44 +0000
ROA not before: Thu 09 Jul 2026 12:37:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 45.91.9.0/24 maxlen: 24
77.83.195.0/24 maxlen: 24
146.255.185.0/24 maxlen: 24
193.19.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:e2:4f:fd:7d:a0:c0:02:a8:cd:0d:67:6f:57:0f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jul 9 12:37:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fdedaf8925f609ce095effdc6e6b882d27ae8a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:37:0e:3c:3b:93:f9:12:b7:79:6d:86:89:72:
c9:80:7c:de:4d:95:78:71:8e:00:d4:93:70:f3:46:
ad:9b:60:e9:33:78:83:aa:f2:78:f7:7c:75:ad:91:
87:68:84:9f:07:3d:91:ee:24:df:1c:9e:a4:cf:ba:
5f:5d:55:59:d9:c8:3f:29:bd:13:6e:43:fa:b7:16:
dc:f0:a8:b8:e8:a9:f7:f1:fa:87:ef:8e:c8:83:7b:
81:79:bb:c3:db:a3:5f:14:c8:3e:84:5b:eb:58:42:
9e:a5:74:9d:17:68:52:49:99:65:05:16:87:fc:da:
5e:53:f8:a5:d7:bf:30:ac:4e:f6:23:0f:b3:4c:47:
37:c9:8d:b0:bd:b1:44:bf:f2:0b:00:16:ba:81:5e:
73:f2:75:1e:01:d9:b4:c2:e2:f5:f5:f4:80:26:72:
e9:e6:10:07:e6:ba:3e:4d:97:1d:c3:4c:1c:b2:44:
bf:87:7f:64:d4:37:bf:58:e0:5c:c0:27:04:19:12:
ca:57:28:af:9e:2b:ae:3a:e8:e6:5e:13:d0:95:e5:
5b:e5:58:a9:0b:9f:47:78:96:fa:60:b5:32:ee:a6:
92:2a:f3:4c:75:24:97:cf:a7:f7:4d:77:1b:26:37:
bd:e0:92:b8:fd:0f:12:ad:b1:12:7c:02:5a:50:ac:
e0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:ED:AF:89:25:F6:09:CE:09:5E:FF:DC:6E:6B:88:2D:27:AE:8A:14
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/_e2viSX2Cc4JXv_cbmuILSeuihQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.9.0/24
77.83.195.0/24
146.255.185.0/24
193.19.191.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:43:2c:ac:0f:2d:15:d3:10:32:46:16:6f:60:d0:1d:e3:c6:
dd:fb:05:d4:a4:ce:d3:cb:ab:7f:ad:55:b4:52:f7:e2:73:bd:
87:04:66:bb:aa:d0:4a:0d:89:71:eb:de:9c:ef:3f:3e:50:53:
c5:f0:28:bc:b2:00:d9:d5:72:be:fe:ce:35:19:b2:45:11:b4:
99:fe:72:de:ae:ed:73:26:0c:fe:21:f9:ff:14:10:f5:fb:1e:
a8:5d:88:b8:10:2e:59:2a:06:6d:73:44:5a:29:a0:37:dc:3a:
a7:df:0e:f4:3d:93:22:41:14:0f:4a:6b:9d:2e:43:c1:cd:8b:
ed:d8:78:71:01:2a:93:00:a9:86:68:17:b7:d6:ef:f7:30:18:
9b:34:f4:c7:05:e0:a9:5c:54:14:6d:ff:02:3a:82:74:a6:a2:
4d:7c:8b:43:74:b6:52:de:39:84:15:6d:f1:21:36:69:a6:46:
40:fe:af:c3:0d:07:a0:c7:85:fe:84:00:b6:24:5f:0c:c9:bb:
a8:e9:df:ac:a0:45:e6:04:90:5a:c7:5b:6c:0d:c7:d7:f5:4b:
c6:e8:25:2c:3b:21:e8:9b:ea:7b:f8:46:4d:5c:ea:18:7a:45:
0a:cc:34:8b:2a:c0:f5:19:a7:36:fc:bf:70:b1:0e:e8:a6:6a:
b5:73:a9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:27 2026 by rpki-client