Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/r2EjoDrsS91wH8w3QXDVY8QqnJI.roa
File: r2EjoDrsS91wH8w3QXDVY8QqnJI.roa (raw, json)
Hash identifier: UKquTzsrheuF+y6+zXmghaHrRklGxCBEeWxGhiHEtnM=
Subject key identifier: AF:61:23:A0:3A:EC:4B:DD:70:1F:CC:37:41:70:D5:63:C4:2A:9C:92
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A03418FF12BD07EBB712EBD340CE2A6F6A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/r2EjoDrsS91wH8w3QXDVY8QqnJI.roa
Signing time: Mon 24 Aug 2026 14:07:28 +0000
ROA not before: Mon 24 Aug 2026 14:07:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218914
IP address blocks: 91.92.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:34:18:ff:12:bd:07:eb:b7:12:eb:d3:40:ce:2a:6f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 24 14:07:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af6123a03aec4bdd701fcc374170d563c42a9c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:00:d5:19:d3:60:56:24:3e:58:e1:79:8e:97:
40:29:08:d5:49:37:0b:8d:4d:40:4a:0e:bf:db:71:
cf:af:8b:f7:5e:aa:34:81:05:27:93:d8:93:00:36:
af:d0:33:77:e1:a4:e7:1e:71:5f:38:7c:8c:4f:9a:
8f:e5:43:ca:dd:cd:13:d1:82:7f:20:56:1b:61:a6:
c7:b8:bc:71:66:74:ec:6b:6d:9e:8d:10:02:4f:4c:
2c:97:9c:c9:05:c9:71:1b:d4:79:08:79:bd:eb:8a:
32:36:a2:27:41:c7:c0:ad:d7:07:b4:53:73:67:91:
c0:b9:1f:45:e8:c7:9d:9e:02:54:02:0f:8e:ac:58:
1e:3e:0b:ce:83:db:13:31:2e:fd:0f:32:33:5b:6d:
17:c8:38:e0:29:ed:b1:fa:f0:af:7e:75:a2:dd:00:
44:8b:0d:f0:be:f2:ff:ff:7c:df:cc:6a:91:ca:7e:
58:e4:af:94:d0:20:02:d4:f3:fa:8e:de:36:5f:f5:
dc:b4:79:bb:15:8c:ae:94:58:d3:3c:a3:c7:83:bc:
64:0b:cc:51:17:e3:a8:8b:a2:85:1c:bf:11:40:53:
3c:20:90:ac:5a:b9:c5:3d:07:7b:2d:53:c4:d6:ad:
1a:9d:d2:2c:33:a4:79:a7:1a:af:c5:7f:ed:fe:61:
9a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:61:23:A0:3A:EC:4B:DD:70:1F:CC:37:41:70:D5:63:C4:2A:9C:92
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/r2EjoDrsS91wH8w3QXDVY8QqnJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.21.0/24
Signature Algorithm: sha256WithRSAEncryption
92:75:fc:5d:27:03:1f:3c:7f:e5:72:26:03:a6:22:49:85:b8:
03:ca:8f:5c:15:39:4e:09:ca:27:1f:70:b5:50:48:ea:a8:42:
8b:b0:75:b3:44:1b:43:83:6b:20:6f:0f:d2:29:c7:d5:09:9e:
96:9d:91:38:8d:38:17:d8:cb:75:4d:c2:93:a0:04:a3:68:84:
a6:f2:b9:87:54:7a:9c:48:71:8c:f2:6b:df:e5:8e:a4:63:3f:
10:9e:01:3f:5c:e3:7a:5f:aa:16:ea:69:f4:8b:4f:25:46:ab:
d0:6d:93:f8:ef:3c:24:25:90:77:88:9c:0f:de:d8:e5:ff:18:
e8:44:95:2a:3b:fb:12:09:09:ed:6a:20:c4:0d:84:ad:62:e7:
c4:69:2c:a7:22:0d:24:20:a3:bd:d7:10:ea:19:61:9f:05:dd:
72:a2:9d:ab:e3:ef:d5:f2:ca:ff:dd:91:31:06:32:73:84:72:
8a:0b:23:e3:85:bb:0a:a4:e7:62:05:04:19:06:a0:ec:3a:37:
dc:8e:78:9a:2f:f0:44:68:61:e1:c9:5c:24:8c:b9:e5:0d:1a:
2b:89:02:f4:56:5d:f4:ce:a5:38:64:24:c2:3e:ee:ad:d0:fd:
a9:fd:59:36:25:22:f0:f6:e7:8f:20:35:fb:e8:86:71:de:16:
d3:90:49:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 04:14:05 2026 by rpki-client