Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/HTtuMMDKEJXSKMbGvP12qcVHbKk.roa
File: HTtuMMDKEJXSKMbGvP12qcVHbKk.roa (raw, json)
Hash identifier: IO75PTGdTyEAeERZkZsFnlEze/2nFflVisbDu1oPX6A=
Subject key identifier: 1D:3B:6E:30:C0:CA:10:95:D2:28:C6:C6:BC:FD:76:A9:C5:47:6C:A9
Certificate issuer: /CN=110e56177308c20c42fbf42f310f4c0ef6b27890
Certificate serial: 019F48F4640C1B103997C140A974AAE53FFF
Authority key identifier: 11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/HTtuMMDKEJXSKMbGvP12qcVHbKk.roa
Signing time: Thu 09 Jul 2026 22:16:43 +0000
ROA not before: Thu 09 Jul 2026 22:16:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36351
IP address blocks: 91.206.64.0/23 maxlen: 23
91.206.64.0/24 maxlen: 24
91.206.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 19:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:48:f4:64:0c:1b:10:39:97:c1:40:a9:74:aa:e5:3f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=110e56177308c20c42fbf42f310f4c0ef6b27890
Validity
Not Before: Jul 9 22:16:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d3b6e30c0ca1095d228c6c6bcfd76a9c5476ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:da:59:53:21:bd:89:36:ce:cc:be:00:02:3b:
70:99:b9:fe:61:72:7a:6c:17:15:2a:2b:b9:b6:b7:
7c:de:89:69:7d:8e:c2:1b:c9:7a:ce:8e:85:a8:98:
75:ed:93:37:3a:dd:22:f4:a9:f6:11:99:dd:4f:d9:
a3:20:0d:0e:f8:4d:c3:73:42:c2:37:5d:b8:c7:bc:
b0:fe:9f:5c:b2:e6:d7:11:59:1b:08:8b:05:4c:e6:
22:ef:a5:82:ea:4b:12:43:a2:7b:06:aa:8e:fe:f0:
61:29:78:07:f0:ac:98:a9:ac:b2:46:08:e5:21:7c:
4a:76:d6:d1:c8:b6:80:85:dc:b2:94:17:44:79:7b:
c1:b7:32:8d:54:c3:e9:ab:47:bf:83:b6:d6:4f:2b:
59:4a:87:03:f0:6f:43:4a:05:de:46:b9:59:d3:7d:
a1:1d:f7:02:de:a1:e6:71:78:73:ad:1e:f0:7f:05:
62:92:38:2a:a3:9e:a5:17:8e:ef:6f:c1:a2:79:0d:
62:ab:44:5b:7d:f9:6f:38:2a:49:f2:95:13:e7:7c:
bc:a7:81:87:1f:85:33:ba:f0:bc:c8:67:d3:36:6b:
8b:ba:8d:89:5c:b7:3a:37:47:0a:5d:fb:0f:d3:ce:
21:bd:b0:77:4e:ce:23:c9:f6:fe:6c:12:ac:38:31:
fd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3B:6E:30:C0:CA:10:95:D2:28:C6:C6:BC:FD:76:A9:C5:47:6C:A9
X509v3 Authority Key Identifier:
keyid:11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/HTtuMMDKEJXSKMbGvP12qcVHbKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.64.0/23
Signature Algorithm: sha256WithRSAEncryption
62:2a:89:5c:41:b2:74:23:49:6d:b0:8b:15:76:ee:7e:a5:01:
66:36:1f:63:dc:54:2e:d8:c9:7a:5d:be:c2:25:e5:8c:e5:76:
42:9d:99:9a:87:ce:ad:10:42:60:22:f3:17:f6:ef:52:2d:06:
8e:7c:03:f7:1e:a5:39:59:ff:7f:ab:52:4e:b1:fa:64:c6:b2:
ca:40:51:dd:54:5b:a2:da:7b:00:6a:e8:07:a6:67:0e:fa:f3:
04:f6:19:79:3d:a5:b5:b6:7c:e1:e3:92:89:70:4a:c4:c1:c8:
13:87:ee:4f:cc:b7:5e:68:78:c7:58:b5:c8:ef:a3:e6:86:25:
16:d5:01:88:70:b0:a4:af:4f:d9:a0:73:a5:ce:87:4d:e7:10:
f8:e1:4f:b6:80:f4:bb:67:ef:6f:4f:c2:47:b9:91:9a:e1:d1:
88:60:59:80:02:33:4b:8b:44:92:76:44:fb:30:7e:d0:15:2c:
77:74:f1:21:5f:53:5b:15:64:9f:5a:41:15:29:ef:ce:8d:dd:
08:47:4a:49:0c:db:50:93:27:4d:ce:fb:f4:10:a3:c9:1e:7f:
dc:30:de:3b:18:36:9c:58:2e:60:d3:84:9e:b5:b7:d6:ea:80:
2b:e9:5d:07:5e:25:fd:18:7f:d8:15:7e:d6:17:85:e6:c3:24:
bb:b4:62:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 02:18:46 2026 by rpki-client