Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/t91AV6p8Y7z0uw6yBUnnQek17Nk.roa
File: t91AV6p8Y7z0uw6yBUnnQek17Nk.roa (raw, json)
Hash identifier: CIk98O8tgDtYnx86toExheyM53PvPJbxlZaZC4Mtfew=
Subject key identifier: B7:DD:40:57:AA:7C:63:BC:F4:BB:0E:B2:05:49:E7:41:E9:35:EC:D9
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019D638AADB69FC5E920D9FD86D312E958BE
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/t91AV6p8Y7z0uw6yBUnnQek17Nk.roa
Signing time: Mon 06 Apr 2026 16:05:25 +0000
ROA not before: Mon 06 Apr 2026 16:05:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400308
IP address blocks: 87.232.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Apr 2026 20:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:63:8a:ad:b6:9f:c5:e9:20:d9:fd:86:d3:12:e9:58:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Apr 6 16:05:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7dd4057aa7c63bcf4bb0eb20549e741e935ecd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:84:ae:00:a4:06:57:33:8c:d0:e4:86:d9:c6:
9e:d1:21:33:62:fd:d0:96:f1:56:c9:0b:08:f2:1d:
34:23:49:2d:76:6a:ec:88:7b:63:45:5d:00:ce:5f:
e3:ed:2b:56:ca:96:62:71:c7:8e:3c:bf:be:95:00:
e7:13:e5:3c:d3:97:b1:91:cc:c6:27:ec:2f:a6:5a:
d6:90:d1:67:cc:2b:f4:ec:33:c0:2c:85:a9:4a:5d:
e6:eb:cf:6d:be:00:dc:af:e4:73:88:b7:d5:53:10:
2f:0c:73:46:8f:cc:d3:e2:bc:2e:16:4c:df:80:07:
0a:f6:fc:51:d6:40:93:b2:c6:3f:e9:b4:75:1a:50:
16:be:87:dc:ab:8e:c6:dd:57:fd:c9:2e:0a:93:b7:
10:1a:ad:34:35:6f:86:ca:22:9f:bb:13:6e:4b:7c:
9d:7d:dc:a4:b8:e2:92:da:20:3c:4f:ea:d9:0f:cb:
91:7a:fa:55:45:ee:73:8d:0b:0d:e2:88:5a:01:c5:
96:99:02:b2:04:83:f5:d2:8c:0a:57:89:5a:81:3a:
18:b2:59:f0:89:fe:fb:c8:79:67:b9:b0:a3:e5:c9:
aa:8b:54:26:40:8d:25:e7:fc:29:be:7f:79:00:0f:
89:f4:ec:1e:d3:4d:38:fb:3c:f4:93:10:3e:03:be:
a8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DD:40:57:AA:7C:63:BC:F4:BB:0E:B2:05:49:E7:41:E9:35:EC:D9
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/t91AV6p8Y7z0uw6yBUnnQek17Nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.112.0/24
Signature Algorithm: sha256WithRSAEncryption
be:a9:e5:2b:c6:5d:85:13:5b:54:7a:3a:c1:2b:e0:d9:17:c0:
c5:d7:80:16:f2:33:57:2b:c9:52:56:d4:da:cf:1e:d2:c1:50:
96:94:a2:d0:71:98:e7:93:2d:d6:cc:3d:67:47:e5:09:7a:17:
b9:4b:bf:3a:c4:3b:a7:d5:fc:4b:1b:14:29:4f:4e:00:90:94:
93:5e:51:23:b5:04:ac:0f:fd:2f:c7:31:e6:34:43:76:73:ed:
26:f3:12:3f:fc:a6:06:61:de:80:6b:7a:a6:c8:72:f2:70:c8:
7a:ae:31:88:f8:6e:9b:53:3c:fe:48:af:6e:be:fe:13:51:7c:
39:fe:86:9c:2e:1e:8c:ae:ad:35:36:32:14:3e:b3:b0:71:da:
c9:a7:36:88:28:cf:87:0b:2f:48:29:bd:9c:52:32:7c:93:c0:
ad:04:38:ae:8f:d8:66:e6:da:79:77:9c:b1:c1:17:1e:77:49:
d8:bd:56:25:37:73:42:e8:65:1b:20:0c:a7:f0:35:64:2a:aa:
dc:a1:3f:51:33:94:23:ae:1c:75:e4:7c:75:8e:8f:d4:58:9f:
e5:1e:ac:30:e3:80:52:04:1f:be:12:55:3a:ba:2b:fb:4b:8d:
2b:41:48:02:ab:59:45:5d:c6:b0:dd:61:02:76:4e:3c:32:51:
e0:ec:44:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 03:37:19 2026 by rpki-client