Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/84BaEWLXK5pw_D2DqToKDMgWvVs.roa
File: 84BaEWLXK5pw_D2DqToKDMgWvVs.roa (raw, json)
Hash identifier: dXG357CuERL8U7sDCJftC3+XuIBlqAv2DDIdJ4Pdya8=
Subject key identifier: F3:80:5A:11:62:D7:2B:9A:70:FC:3D:83:A9:3A:0A:0C:C8:16:BD:5B
Certificate issuer: /CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
Certificate serial: 019FCD2AB33E6958FA8FF29B187023857928
Authority key identifier: B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/84BaEWLXK5pw_D2DqToKDMgWvVs.roa
Signing time: Tue 04 Aug 2026 14:25:55 +0000
ROA not before: Tue 04 Aug 2026 14:25:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13896
IP address blocks: 91.236.117.0/24 maxlen: 24
185.155.144.0/23 maxlen: 23
185.155.146.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 17:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cd:2a:b3:3e:69:58:fa:8f:f2:9b:18:70:23:85:79:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b24cf9f6d034f46760f4f59b1739de127b8adff3
Validity
Not Before: Aug 4 14:25:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3805a1162d72b9a70fc3d83a93a0a0cc816bd5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5b:9c:92:1a:0d:b9:03:89:36:5e:84:bc:e3:
cc:be:2c:e0:9b:a7:08:f2:af:cc:ca:a3:b4:2f:5d:
d9:64:6a:5b:9f:74:92:f9:40:73:bd:14:6c:9a:14:
51:b7:88:51:c1:67:bd:2d:c5:c6:f0:ee:e4:b1:82:
ac:0a:ee:ec:bf:1f:6e:65:ca:7d:50:2b:60:49:19:
c4:ba:05:8e:08:fb:e5:43:2b:28:db:7c:37:08:3f:
67:e0:fe:52:41:1b:d1:be:82:0d:5a:a1:f4:dd:0f:
58:72:bf:f3:87:10:78:a9:cf:8e:a2:57:cc:8d:d9:
74:97:91:ff:55:a4:84:cf:37:bf:df:81:e0:8f:76:
08:8d:5e:9d:a3:ad:7e:f6:13:9b:37:35:da:ed:f5:
20:8d:d2:59:ee:45:52:98:0c:77:ac:be:44:03:8d:
f3:70:75:24:25:e6:ae:4a:f8:ce:5f:20:05:94:d1:
b1:46:a7:b5:7e:f6:9f:90:f8:37:35:6a:41:c8:6e:
df:31:bf:6b:94:31:ed:8e:1b:64:ea:83:f3:36:f3:
5c:b7:25:63:84:3e:37:15:96:57:4b:38:77:23:2c:
2c:fa:76:d9:57:9f:15:54:b9:d9:ce:a5:05:06:f5:
31:d4:1c:44:72:99:33:fb:bb:6e:4d:d6:f7:84:6b:
bd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:80:5A:11:62:D7:2B:9A:70:FC:3D:83:A9:3A:0A:0C:C8:16:BD:5B
X509v3 Authority Key Identifier:
keyid:B2:4C:F9:F6:D0:34:F4:67:60:F4:F5:9B:17:39:DE:12:7B:8A:DF:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skz59tA09Gdg9PWbFzneEnuK3_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/84BaEWLXK5pw_D2DqToKDMgWvVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0d006d-ab7a-41c9-97f3-995c369da672/1/skz59tA09Gdg9PWbFzneEnuK3_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.117.0/24
185.155.144.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:c8:1f:e3:2d:6d:0c:24:b2:6d:13:e2:4f:50:43:59:41:a2:
7d:10:13:62:a6:02:86:74:27:c6:c3:8b:c7:9b:09:9c:48:e2:
26:d3:94:25:d7:26:79:8c:84:79:48:50:d6:0a:04:9c:86:f3:
26:90:dc:4d:c4:8b:04:57:31:91:28:c9:23:69:4c:f6:51:4c:
64:dd:5f:47:c0:b3:ec:1a:2d:c0:39:26:99:5b:9a:40:8e:ea:
24:b0:10:f2:2e:b0:b1:77:c6:99:c0:1d:6f:3e:4d:31:b1:8e:
1f:21:eb:ad:3e:ee:1d:79:54:9c:25:76:6c:b7:bd:59:63:19:
68:02:0b:49:c8:e1:aa:1c:1c:98:ee:ef:3b:2b:f4:59:09:bb:
ef:90:6c:1a:75:18:19:41:e5:b5:01:b5:b8:b0:65:63:12:0a:
d5:b8:39:30:56:f9:78:b7:c4:d3:0e:6f:b3:3b:97:98:9e:90:
c6:a4:56:bb:7a:a3:6e:53:54:ae:63:f1:57:41:1f:7c:83:8e:
95:f2:85:c9:d9:94:1a:67:4b:5f:90:a0:36:a6:bf:d0:7f:b5:
7f:4e:c0:f0:f1:3a:2e:3a:a6:5f:ca:ed:8b:53:52:31:54:ef:
41:9a:dc:8b:82:23:56:34:44:31:a1:de:d1:03:ce:6a:22:68:
b8:77:3b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:00:43 2026 by rpki-client