Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/91RLyZpsBCjffJNQse7DGpaMbD0.roa
File: 91RLyZpsBCjffJNQse7DGpaMbD0.roa (raw, json)
Hash identifier: UpA1NQOxwFcMpLUNXbuFNKdyElAdElSZa8I7q18TlRg=
Subject key identifier: F7:54:4B:C9:9A:6C:04:28:DF:7C:93:50:B1:EE:C3:1A:96:8C:6C:3D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019F5F92312BEF5F46963ED1A5204A094B84
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/91RLyZpsBCjffJNQse7DGpaMbD0.roa
Signing time: Tue 14 Jul 2026 07:40:44 +0000
ROA not before: Tue 14 Jul 2026 07:40:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402642
IP address blocks: 2a0f:3240::/29 maxlen: 29
2a0f:8300::/29 maxlen: 29
2a10:7900::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5f:92:31:2b:ef:5f:46:96:3e:d1:a5:20:4a:09:4b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 14 07:40:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7544bc99a6c0428df7c9350b1eec31a968c6c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:70:aa:e7:da:ce:93:db:00:64:e9:9a:c6:98:
6e:78:a0:2c:88:36:56:cc:44:84:52:31:9d:0a:4e:
f6:f9:8a:07:5c:f7:96:45:83:19:1a:2f:8a:94:9e:
9c:df:1a:16:6b:68:8b:b8:72:56:86:4c:2d:ae:38:
bb:59:ba:2f:4a:0c:14:36:6f:22:e6:da:dd:d4:07:
ca:7f:8f:4d:63:83:43:2a:bb:ff:8e:ad:14:ef:45:
f8:3e:4a:60:f4:fd:3d:5e:70:51:23:ab:ed:d9:32:
f4:18:16:8c:59:ca:96:08:8c:a1:96:c0:00:68:d8:
50:91:75:e2:e0:bd:b1:a2:36:25:68:81:fd:42:06:
9e:46:02:cc:6c:5f:9e:99:1d:a4:35:2c:bc:7a:cf:
8d:7e:02:fb:74:d7:2f:bb:d7:31:ee:8f:55:7e:01:
d1:51:38:e0:d2:89:d0:f3:a2:f2:80:c8:e0:cf:ba:
a2:6b:90:6b:c2:e9:0e:01:e4:80:39:96:ca:ea:82:
cb:71:41:51:e4:d4:cb:f4:4e:9f:04:d1:43:c0:2a:
a0:e5:f6:fa:d6:fa:2e:78:ee:67:de:8d:45:ac:27:
e5:55:11:a0:7c:00:37:fc:7a:77:35:7a:4b:44:70:
0c:44:71:27:d8:cb:01:24:56:7a:cd:9f:71:e9:2c:
d4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:54:4B:C9:9A:6C:04:28:DF:7C:93:50:B1:EE:C3:1A:96:8C:6C:3D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/91RLyZpsBCjffJNQse7DGpaMbD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3240::/29
2a0f:8300::/29
2a10:7900::/29
Signature Algorithm: sha256WithRSAEncryption
68:df:75:e4:dd:d0:6e:be:7b:30:65:cc:01:bb:a3:58:4f:25:
5f:a5:ed:d9:0e:7a:c0:43:e6:8c:af:18:8f:2c:2e:b2:78:d6:
21:9a:ac:75:97:76:69:91:94:12:3e:d0:a2:21:a5:77:f3:08:
69:a7:c1:70:37:33:ef:4e:f7:03:3d:8e:bc:72:cb:15:db:fd:
66:0d:05:4f:33:9a:00:c8:33:ab:3d:33:c5:73:7f:f9:85:30:
e8:02:a2:a4:90:50:60:31:f5:d1:2d:cb:9f:ef:05:51:31:d7:
ea:98:0c:66:06:f5:4a:10:ad:dc:31:25:42:a2:89:19:87:2c:
69:94:be:2f:7e:b6:a5:6e:e7:2f:ca:44:15:b5:7b:2d:6e:55:
b4:1d:bc:d0:28:5c:c1:e9:45:ed:ac:75:53:35:a6:60:4d:11:
42:e9:90:cc:94:70:5e:a6:65:71:b5:52:0b:dc:e9:5e:2d:25:
ce:80:a6:c9:85:ca:92:17:ee:16:8e:5b:28:7f:23:0d:81:64:
06:e4:d2:f5:9f:0d:3a:c8:8f:c8:bf:04:84:92:bb:12:4e:22:
da:42:d6:b3:58:2d:14:68:0f:3e:81:c8:2c:c0:fe:56:5c:90:
72:8b:5d:cc:09:0a:7a:f9:9b:d3:b1:54:68:07:7e:5f:1b:f7:
17:ea:c2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:43 2026 by rpki-client