Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/B6njVm2jaOpmbjohHB0Rwk7250c.roa
File: B6njVm2jaOpmbjohHB0Rwk7250c.roa (raw, json)
Hash identifier: ljudadOOFUxTejl/GEIf9XpZu0W8Ro0Vzcy4yJXrME0=
Subject key identifier: 07:A9:E3:56:6D:A3:68:EA:66:6E:3A:21:1C:1D:11:C2:4E:F6:E7:47
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01A066DB41FC787864CDB0ED485DC03AB980
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/B6njVm2jaOpmbjohHB0Rwk7250c.roa
Signing time: Thu 03 Sep 2026 10:40:40 +0000
ROA not before: Thu 03 Sep 2026 10:40:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 91.109.46.0/24 maxlen: 24
147.185.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:db:41:fc:78:78:64:cd:b0:ed:48:5d:c0:3a:b9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Sep 3 10:40:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07a9e3566da368ea666e3a211c1d11c24ef6e747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f1:d6:63:6a:f8:05:a3:71:e7:30:bf:f6:c2:
af:bf:fd:80:ec:bb:6d:f0:fb:52:c6:b7:79:bd:b9:
94:48:19:f1:2e:e3:dc:b0:88:cb:59:52:ed:02:ad:
ff:52:08:6e:c5:cf:42:cb:da:61:15:ab:68:f8:b1:
07:76:be:e8:f2:c3:22:d7:16:d2:de:f8:cb:23:b0:
4e:fb:f6:c8:6b:4c:98:b6:01:3c:f5:df:4b:65:d6:
0b:ce:d7:e2:41:d0:60:c1:60:e1:db:c3:02:36:38:
d2:5c:3c:53:4f:6f:6f:dd:02:d1:3d:91:02:8a:27:
b0:5d:81:86:c8:2a:19:32:96:e9:d7:11:81:b9:dc:
a9:c4:f1:02:0f:24:fd:bc:33:65:30:8e:ce:c3:af:
21:4e:a5:ad:2e:4f:e9:21:f3:16:05:4b:db:b8:4f:
16:46:f1:f2:8f:45:d4:d7:46:cd:8b:02:cc:b7:96:
16:12:21:7a:2a:3f:3f:1a:42:6c:29:b0:b0:64:a7:
d6:cb:41:51:b0:67:d0:8f:2e:7a:91:fe:9d:30:78:
48:4a:80:bd:a0:42:39:cd:6b:e8:3b:e1:73:7a:6b:
e2:1e:da:86:c4:38:a0:e6:db:14:63:ba:39:d4:12:
50:c7:9b:de:31:0e:89:90:f4:d5:75:08:17:74:77:
b4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A9:E3:56:6D:A3:68:EA:66:6E:3A:21:1C:1D:11:C2:4E:F6:E7:47
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/B6njVm2jaOpmbjohHB0Rwk7250c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.109.46.0/24
147.185.196.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:61:1b:6c:c6:c1:b0:c4:ba:b7:ba:f5:75:c7:51:07:fb:45:
f2:f1:41:cb:46:63:9c:1b:1e:bf:32:76:ef:76:46:cd:da:e8:
7b:5c:7e:56:6c:22:33:ce:a3:70:7d:82:f8:87:80:bc:e5:c1:
57:5a:a8:36:96:5b:ba:e3:36:ef:64:d5:ce:27:24:96:a3:ce:
62:c3:40:8d:30:04:3c:32:5f:e9:7c:86:68:f4:95:4d:a3:47:
d4:49:34:c5:58:7d:6c:85:78:c9:98:70:68:2f:ab:26:81:38:
de:ff:75:e5:56:88:5a:b0:be:73:8b:1f:c6:90:f9:e3:71:6f:
6f:83:14:ec:0f:d0:65:bf:02:b4:c5:54:ed:cd:2e:1c:b8:99:
10:00:6a:a3:4b:09:df:f5:e3:6e:a1:ef:f3:d5:75:6e:27:67:
06:3e:75:9f:f5:50:0e:96:4f:1e:df:dd:b7:0b:51:ac:5b:a7:
b2:a5:a9:cc:b3:41:c1:69:f2:81:b9:93:1b:1e:5f:9f:29:2c:
b9:00:94:21:5f:43:ad:ba:7e:dc:27:14:4a:53:da:ca:a3:c8:
87:47:86:1f:de:0e:5b:11:37:b4:09:33:a0:a2:83:de:f2:2c:
71:df:dd:2b:ab:69:0f:5b:f6:4c:bb:ea:f8:a4:13:5a:10:c2:
86:23:31:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:41:45 2026 by rpki-client