Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/c_Rk6T8oXve1e4uBhrSOVrxTozY.roa
File: c_Rk6T8oXve1e4uBhrSOVrxTozY.roa (raw, json)
Hash identifier: 9qWuxrjH83+W8hUyGADsZeg228UW2GsKrzqpHqKCRh8=
Subject key identifier: 73:F4:64:E9:3F:28:5E:F7:B5:7B:8B:81:86:B4:8E:56:BC:53:A3:36
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 019FF5F264C1B55EE42F8EE5AD810B20784D
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/c_Rk6T8oXve1e4uBhrSOVrxTozY.roa
Signing time: Wed 12 Aug 2026 12:28:51 +0000
ROA not before: Wed 12 Aug 2026 12:28:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399359
IP address blocks: 91.109.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 10:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:f2:64:c1:b5:5e:e4:2f:8e:e5:ad:81:0b:20:78:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Aug 12 12:28:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73f464e93f285ef7b57b8b8186b48e56bc53a336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:37:91:d0:c0:cc:30:29:6b:12:b1:76:89:5e:
84:71:bb:aa:99:73:d9:74:36:be:e2:c0:95:98:f0:
24:00:43:9e:65:bd:4c:ee:07:d5:18:19:cb:d0:36:
13:fd:15:73:4b:e0:42:f3:01:60:c5:b9:4b:59:6e:
5e:c2:40:a3:60:ec:f0:46:f7:79:e8:0e:28:4e:0c:
6f:df:62:0e:e0:51:f3:81:cf:ef:36:35:0a:61:45:
d1:24:86:c7:0d:df:03:a2:7a:2d:03:07:37:61:56:
52:00:19:62:8a:c0:1e:77:3e:7e:bf:45:d7:1b:7f:
bf:67:12:34:cd:d0:a1:de:a7:4e:05:ff:fa:6c:58:
10:23:4d:c6:0b:70:3f:ce:87:62:e4:4e:82:e5:24:
79:dc:c1:22:cd:44:cc:46:18:3c:1f:5b:ff:f6:36:
bb:67:8c:a0:a6:7a:0d:01:e8:f7:ec:7c:5c:96:65:
07:a9:2f:69:78:12:c0:22:95:74:20:dd:d7:49:a7:
f3:4b:27:d4:25:b1:f7:da:5a:f9:2e:ef:05:76:0f:
88:37:23:72:2d:55:5d:25:ff:64:cc:22:a7:2d:7b:
ea:3a:8b:78:33:7a:e3:cc:df:92:af:43:39:13:9b:
b5:1d:46:5c:80:59:a9:8c:4a:f5:9e:63:ce:e1:46:
21:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F4:64:E9:3F:28:5E:F7:B5:7B:8B:81:86:B4:8E:56:BC:53:A3:36
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/c_Rk6T8oXve1e4uBhrSOVrxTozY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.109.40.0/24
Signature Algorithm: sha256WithRSAEncryption
26:7b:5b:5b:c7:0a:5d:83:fb:fa:96:59:60:eb:55:96:26:2b:
51:49:df:c0:28:5a:af:5d:cc:9b:d2:5d:99:66:4e:c0:28:f3:
f7:34:b8:2c:b7:9c:b8:76:14:14:b0:6e:8b:49:c0:ea:ef:ae:
27:e7:9c:8f:96:d2:90:9f:09:fd:f0:78:42:8f:90:96:e3:58:
d6:c6:0e:e3:0e:57:37:79:d1:25:8d:3c:0e:92:4d:1b:35:36:
14:df:75:af:eb:e0:7b:d6:6e:7d:26:b0:93:2a:df:d9:51:cb:
9a:6b:e4:3b:87:9e:6d:fb:13:47:ae:f0:93:90:d4:69:51:92:
89:d7:41:86:09:c6:a2:f3:97:87:ce:73:2c:34:c4:c1:62:0b:
d0:2f:3c:a3:7a:5b:e7:d0:49:25:e7:75:c1:ef:82:d3:eb:43:
56:e5:06:20:d8:0d:5d:98:cd:ec:14:a9:d7:37:48:65:1a:11:
df:e4:3c:30:4e:22:d6:d6:42:7c:99:95:e9:99:a6:a0:a3:ba:
d8:f5:dd:74:f2:88:07:a6:76:0f:1b:af:9b:d3:3b:b6:59:de:
3f:5d:3d:bc:cb:5a:c0:12:fb:c9:76:c7:2e:99:95:2f:7b:2c:
d3:4f:5f:94:6f:bf:24:75:0e:75:b5:b5:0d:28:60:bc:87:0d:
6a:d4:e6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:41:53 2026 by rpki-client