Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/914e11-8abf-4e19-9647-a410cac23d13/1/7bWbVotUtv52xOiDEME3dz5_e98.roa
File: 7bWbVotUtv52xOiDEME3dz5_e98.roa (raw, json)
Hash identifier: sHchAOAFmNObQRTRvZeViPzc8t8WH0mwLDZ2MCC81Ag=
Subject key identifier: ED:B5:9B:56:8B:54:B6:FE:76:C4:E8:83:10:C1:37:77:3E:7F:7B:DF
Certificate issuer: /CN=5f1d21b635ccbd70e64ca651f5ab4835cae3b9f9
Certificate serial: 019FD6552D7076B95523D531A3FF7C9091DB
Authority key identifier: 5F:1D:21:B6:35:CC:BD:70:E6:4C:A6:51:F5:AB:48:35:CA:E3:B9:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx0htjXMvXDmTKZR9atINcrjufk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/914e11-8abf-4e19-9647-a410cac23d13/1/7bWbVotUtv52xOiDEME3dz5_e98.roa
Signing time: Thu 06 Aug 2026 09:08:54 +0000
ROA not before: Thu 06 Aug 2026 09:08:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57803
IP address blocks: 91.235.101.0/24 maxlen: 24
194.28.56.0/22 maxlen: 22
195.20.102.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/914e11-8abf-4e19-9647-a410cac23d13/1/Xx0htjXMvXDmTKZR9atINcrjufk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/914e11-8abf-4e19-9647-a410cac23d13/1/Xx0htjXMvXDmTKZR9atINcrjufk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx0htjXMvXDmTKZR9atINcrjufk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:55:2d:70:76:b9:55:23:d5:31:a3:ff:7c:90:91:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1d21b635ccbd70e64ca651f5ab4835cae3b9f9
Validity
Not Before: Aug 6 09:08:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=edb59b568b54b6fe76c4e88310c137773e7f7bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0e:37:12:ba:19:05:86:60:e9:37:36:a5:d2:
e7:36:ca:ff:b1:db:f4:b6:b2:64:a1:54:9f:0f:b3:
a1:84:1e:a6:bc:48:c4:17:c9:fd:43:1f:3c:74:b9:
ed:c0:08:07:67:47:28:e7:0b:ff:bc:0d:6e:51:70:
47:c6:7e:f4:fd:9a:05:b8:f1:a3:35:3f:f7:65:ef:
06:ba:f0:f9:bf:24:6b:d5:eb:e4:49:93:12:c8:70:
1d:0d:a8:2c:a9:70:03:e0:b6:ca:c1:d3:d0:4f:57:
86:40:a1:0f:a1:c5:36:5f:62:54:00:f2:c3:56:58:
07:59:cf:29:91:de:f3:05:9a:54:02:8e:f1:63:85:
26:91:08:15:1a:dd:42:46:26:44:5e:db:ba:3a:70:
00:4b:97:3f:b9:79:87:c8:3d:ae:03:79:37:4e:ac:
f4:39:b8:a8:93:05:90:15:65:e8:d6:ce:35:02:84:
b3:5a:d6:73:f8:74:45:4c:03:4f:31:4f:7e:1e:25:
37:82:1c:ad:f8:fa:31:60:52:3a:87:35:c2:d6:bf:
9f:e5:df:b0:ac:39:55:9c:d4:13:15:d6:93:2e:91:
c3:7e:11:98:7f:8e:00:ff:4d:69:b6:24:cf:a5:22:
97:ed:22:cc:35:3d:4b:99:30:46:df:fb:17:fe:a6:
67:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B5:9B:56:8B:54:B6:FE:76:C4:E8:83:10:C1:37:77:3E:7F:7B:DF
X509v3 Authority Key Identifier:
keyid:5F:1D:21:B6:35:CC:BD:70:E6:4C:A6:51:F5:AB:48:35:CA:E3:B9:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx0htjXMvXDmTKZR9atINcrjufk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/914e11-8abf-4e19-9647-a410cac23d13/1/7bWbVotUtv52xOiDEME3dz5_e98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/914e11-8abf-4e19-9647-a410cac23d13/1/Xx0htjXMvXDmTKZR9atINcrjufk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.101.0/24
194.28.56.0/22
195.20.102.0/23
Signature Algorithm: sha256WithRSAEncryption
65:b7:a1:e5:06:9e:7c:e2:8f:b9:27:70:1f:fb:e2:b4:51:81:
34:aa:d3:90:5f:e2:0e:36:c4:a1:11:43:68:fa:5c:d4:09:92:
56:a4:04:f2:ba:e3:92:43:aa:bd:80:22:da:ac:bc:01:e2:a7:
da:11:fb:b2:b0:ec:1b:04:f0:65:f9:3f:fd:b7:46:36:af:54:
c8:35:de:a1:65:42:0a:4c:c7:f8:d3:af:a5:8f:03:99:45:c5:
ba:26:84:bc:ef:c7:49:6a:5a:d2:ad:0c:49:9c:94:85:8a:8b:
ae:9a:97:34:99:14:23:32:af:26:6c:30:66:ad:ab:f2:49:76:
34:c4:3e:55:84:56:3d:25:39:e6:99:0d:f9:c9:ee:7c:ac:bf:
9f:f7:49:61:7d:ee:58:85:78:67:ed:74:97:d9:eb:43:2c:b9:
2c:e1:da:6e:c1:79:af:a1:ee:98:e4:05:01:b6:c2:31:71:97:
74:64:66:c4:16:0d:51:ec:17:15:2a:b3:2e:ab:33:5f:44:0f:
26:48:7d:5f:3f:dd:be:c8:1a:6f:fe:67:a7:66:49:43:7a:79:
4f:5e:2e:24:89:3f:9e:d1:92:5f:ce:0f:cb:16:23:55:c9:ad:
4b:1a:b7:12:d0:1e:4a:ad:8a:c4:03:00:02:2d:c1:22:80:b1:
6d:0d:7b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 02:47:50 2026 by rpki-client