Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/Ao4FawbWy1rx_3C0QBM_SiVJ59w.roa
File: Ao4FawbWy1rx_3C0QBM_SiVJ59w.roa (raw, json)
Hash identifier: ZTZ0v5tj9CgEjBZ8gXz9+Xh8wVEjAJ0vxv+jI08fD5E=
Subject key identifier: 02:8E:05:6B:06:D6:CB:5A:F1:FF:70:B4:40:13:3F:4A:25:49:E7:DC
Certificate issuer: /CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51
Certificate serial: 019EF17239B90BE9D1549F61BFA2DAD014C1
Authority key identifier: F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/Ao4FawbWy1rx_3C0QBM_SiVJ59w.roa
Signing time: Mon 22 Jun 2026 22:27:35 +0000
ROA not before: Mon 22 Jun 2026 22:27:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209847
IP address blocks: 77.91.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f1:72:39:b9:0b:e9:d1:54:9f:61:bf:a2:da:d0:14:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51
Validity
Not Before: Jun 22 22:27:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=028e056b06d6cb5af1ff70b440133f4a2549e7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c3:9f:9f:0e:68:dc:9d:b7:02:74:2e:38:cb:
f4:0f:87:54:69:20:4c:61:59:cb:97:4c:57:83:f3:
59:47:00:cc:7a:d2:09:5a:4a:24:0e:16:27:d9:ed:
a0:08:9d:99:4a:2d:31:e3:b2:6f:b6:b8:4b:a2:5f:
ea:ce:b5:e8:00:4a:6b:54:65:c7:ff:43:a0:60:3b:
c6:9e:d2:0d:7c:c6:c2:5d:7e:d7:9a:47:6b:bb:e3:
67:1f:1f:c5:73:02:05:f4:68:92:18:6b:34:6e:db:
88:a3:df:2a:ec:28:f7:9d:a6:b6:44:76:a2:f6:d3:
da:38:15:5b:ee:de:14:38:71:f6:22:44:2b:68:d7:
e3:46:fe:bc:d1:32:3d:ce:24:5a:9e:10:0f:11:6c:
fa:11:93:f5:d7:a1:4f:25:60:83:f6:81:8a:65:46:
6f:ec:59:5b:2b:fc:3c:4c:5a:3f:f6:37:25:bb:bd:
79:52:cd:82:2f:4b:39:8c:2b:f1:a1:f5:05:e6:0d:
b8:07:06:2e:3c:d5:bf:b8:6a:ec:01:c1:37:57:ac:
91:42:0a:8f:2f:b4:eb:fd:1e:c0:31:30:86:ba:c3:
4e:18:60:fa:aa:c9:89:56:32:14:a4:19:89:0c:a6:
a5:a9:e3:16:b9:77:96:5e:4c:11:b7:92:22:ac:23:
87:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8E:05:6B:06:D6:CB:5A:F1:FF:70:B4:40:13:3F:4A:25:49:E7:DC
X509v3 Authority Key Identifier:
keyid:F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/Ao4FawbWy1rx_3C0QBM_SiVJ59w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.103.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:e8:26:9c:d8:e9:a9:ea:f9:50:84:8e:7c:51:42:d4:2b:94:
db:fd:5f:d4:c9:76:6b:51:25:5e:86:d3:c8:96:7d:05:e2:eb:
fc:b6:bd:7d:2d:dd:9d:8c:f2:7e:6a:4f:de:be:69:4a:b3:a0:
fd:03:ce:84:7a:1f:5e:98:56:d8:25:c5:c4:8c:5d:84:a9:50:
58:3c:eb:ff:d9:f8:70:f1:b8:15:f6:d9:06:76:02:85:20:c0:
df:ef:04:28:88:9c:91:16:25:19:67:52:c8:56:3c:fb:f7:d2:
60:20:93:bc:49:92:61:72:2d:a8:09:5c:1b:9e:75:96:a2:48:
ed:8a:12:a6:29:8a:ce:6f:59:d2:51:3d:cb:31:d2:18:bc:bd:
d6:47:3c:cc:fd:7b:99:00:a3:41:fc:83:8f:13:07:9d:47:8a:
1e:2e:5a:3b:3a:89:f4:a8:d8:bd:bd:1a:59:b4:2f:fc:f8:82:
13:49:a1:a3:be:92:36:6b:2b:0e:27:af:71:04:16:bb:4d:e4:
96:8c:be:a7:4b:30:c2:d9:52:b8:2e:00:e8:37:42:48:8e:56:
2e:1d:b8:74:ac:f3:2f:37:e2:8e:99:89:f4:94:bd:08:0e:f4:
b7:f5:c0:c8:f8:0a:aa:80:e7:45:a5:23:e6:38:a7:8a:ed:28:
90:33:e0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:36:22 2026 by rpki-client