Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/Df_oTOu_EP4d50D-2XA0QPqfKjk.roa
File: Df_oTOu_EP4d50D-2XA0QPqfKjk.roa (raw, json)
Hash identifier: +VGVc2qalWbQy0rJrmFcx94atdweW3ZFDDwOq9nPIVw=
Subject key identifier: 0D:FF:E8:4C:EB:BF:10:FE:1D:E7:40:FE:D9:70:34:40:FA:9F:2A:39
Certificate issuer: /CN=ed8611915e1651af17e7bf1f7cab90d55dc1dd88
Certificate serial: 019F2368BACE1D8ACF6B76089E2BBAC0ADA0
Authority key identifier: ED:86:11:91:5E:16:51:AF:17:E7:BF:1F:7C:AB:90:D5:5D:C1:DD:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7YYRkV4WUa8X578ffKuQ1V3B3Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/Df_oTOu_EP4d50D-2XA0QPqfKjk.roa
Signing time: Thu 02 Jul 2026 15:18:13 +0000
ROA not before: Thu 02 Jul 2026 15:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15404
IP address blocks: 91.213.91.0/24 maxlen: 24
2001:67c:2ea0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/7YYRkV4WUa8X578ffKuQ1V3B3Yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/7YYRkV4WUa8X578ffKuQ1V3B3Yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7YYRkV4WUa8X578ffKuQ1V3B3Yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ba:ce:1d:8a:cf:6b:76:08:9e:2b:ba:c0:ad:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8611915e1651af17e7bf1f7cab90d55dc1dd88
Validity
Not Before: Jul 2 15:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0dffe84cebbf10fe1de740fed9703440fa9f2a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d2:cc:f5:9b:c2:f4:7c:93:0c:c7:dd:dd:d6:
ff:4a:6a:9e:f6:e6:21:6e:8a:b2:27:8a:34:27:c7:
82:4e:f9:16:d0:c8:56:88:6a:18:c0:ae:43:7d:2b:
bd:05:4a:df:b5:7f:30:22:67:ce:03:64:87:84:fc:
4e:7a:8b:c8:d3:b1:4d:c0:f6:dd:d4:f4:72:08:2f:
25:42:37:94:ff:1e:dd:7b:b1:70:fd:8c:46:0a:08:
77:4f:2f:ac:35:b2:bf:df:4a:a5:64:e4:57:3b:08:
73:d6:69:e2:f5:6f:3f:d8:6d:3d:53:b4:8c:fa:25:
6a:c2:df:79:6e:44:6d:9f:a8:2f:23:b4:ad:c5:e8:
a7:ca:88:07:df:a7:b7:6e:0e:90:53:80:da:28:52:
c4:90:89:be:fe:14:ee:bb:ab:a7:20:89:25:bc:65:
7a:63:cc:fd:06:26:f7:10:8d:90:5f:fb:6b:28:7e:
c3:2d:88:6c:c7:d0:12:05:aa:88:73:33:52:ab:19:
df:8f:54:c1:63:f0:9d:fb:7e:8a:12:db:5d:ff:92:
48:90:a4:6a:e7:0d:ee:3f:69:29:df:bf:56:f1:c0:
ef:53:17:e8:f1:56:2c:80:5c:31:27:df:d2:12:bd:
df:e9:a9:d4:17:3c:28:69:1d:ad:44:a5:eb:fd:99:
8d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FF:E8:4C:EB:BF:10:FE:1D:E7:40:FE:D9:70:34:40:FA:9F:2A:39
X509v3 Authority Key Identifier:
keyid:ED:86:11:91:5E:16:51:AF:17:E7:BF:1F:7C:AB:90:D5:5D:C1:DD:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YYRkV4WUa8X578ffKuQ1V3B3Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/Df_oTOu_EP4d50D-2XA0QPqfKjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/7YYRkV4WUa8X578ffKuQ1V3B3Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.91.0/24
IPv6:
2001:67c:2ea0::/48
Signature Algorithm: sha256WithRSAEncryption
bf:5c:ec:f4:60:6e:85:0a:5d:55:e5:db:4b:93:03:4d:82:c5:
55:15:73:79:63:57:86:73:df:90:86:19:a9:20:6a:d1:27:e6:
e0:11:82:5b:3c:d9:52:13:dd:5b:a6:84:e6:90:1d:eb:46:9b:
5e:43:3e:1f:48:ca:e3:01:25:79:4e:b3:4d:36:1e:c4:db:2d:
39:14:c9:5a:b4:a4:60:66:46:ff:e2:2d:39:b9:e6:b2:b6:cf:
00:59:e0:0b:2e:cc:65:ac:84:6c:c4:7e:94:15:31:d0:27:a9:
a6:4d:d7:5e:4c:5e:a7:cb:6a:68:66:dd:2e:b7:6b:42:74:c3:
05:53:83:b5:28:af:1d:bf:61:78:85:53:ce:d2:49:2c:33:2c:
7b:4a:19:5c:41:a9:0a:45:47:4f:70:2b:5b:c1:42:b9:ba:3d:
5b:8d:fa:2d:53:6b:6c:1e:22:b5:0b:c5:45:f9:7d:1b:9f:40:
bc:ac:76:bf:56:26:19:37:28:d1:9f:b0:1e:0d:94:97:06:68:
6e:ab:57:44:7a:42:67:c6:79:38:c2:75:07:cd:e3:5c:ef:cf:
4b:e6:92:a2:3a:2c:8b:92:ed:4c:30:66:ae:7a:ca:7c:f3:bc:
79:83:8f:4f:f9:28:40:a2:6a:3d:e2:f4:70:68:2c:60:af:22:
8e:b9:2e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:19:54 2026 by rpki-client