Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3a51ec-7c70-496c-bc68-514a96519183/1/1-LvrevNxn8xjvxwWO9shI6PuFvU.roa
File: 1-LvrevNxn8xjvxwWO9shI6PuFvU.roa (raw, json)
Hash identifier: iqWesMjsdrjmX1g6QE9vIbNV9BRrg4iuwDL5XHq0ynQ=
Subject key identifier: F8:BB:EB:7A:F3:71:9F:CC:63:BF:1C:16:3B:DB:21:23:A3:EE:16:F5
Certificate issuer: /CN=61f80d83d948e248b968606676607b8470e2e41c
Certificate serial: 019EDF25A9E2A3823FBDB9B16D692383ABD4
Authority key identifier: 61:F8:0D:83:D9:48:E2:48:B9:68:60:66:76:60:7B:84:70:E2:E4:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3a51ec-7c70-496c-bc68-514a96519183/1/1-LvrevNxn8xjvxwWO9shI6PuFvU.roa
Signing time: Fri 19 Jun 2026 09:10:47 +0000
ROA not before: Fri 19 Jun 2026 09:10:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50673
IP address blocks: 91.220.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/3a51ec-7c70-496c-bc68-514a96519183/1/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/3a51ec-7c70-496c-bc68-514a96519183/1/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:df:25:a9:e2:a3:82:3f:bd:b9:b1:6d:69:23:83:ab:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61f80d83d948e248b968606676607b8470e2e41c
Validity
Not Before: Jun 19 09:10:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8bbeb7af3719fcc63bf1c163bdb2123a3ee16f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5c:ae:62:da:dc:fe:b2:67:b7:c8:08:0f:fe:
93:1d:a6:b8:15:52:b8:43:24:e5:99:7c:22:ed:3f:
33:46:84:c1:91:0d:b0:ea:32:9e:67:85:46:fa:3c:
14:5c:ac:6c:f2:21:b3:05:0d:84:e6:52:7a:05:18:
3f:01:f0:88:36:b6:2e:4a:88:bf:4d:f9:9f:a1:8c:
2b:86:b8:6c:41:57:3b:5c:f9:62:54:80:c1:67:f2:
58:fa:7e:30:68:f2:dd:d5:33:d5:3e:9f:7e:76:20:
b6:ac:15:31:64:93:dc:c3:25:49:3d:82:bd:e6:fd:
d2:82:8d:a6:a5:40:78:66:1a:90:36:0a:02:56:1a:
1f:6c:30:61:ce:e3:d1:49:53:93:1b:1d:72:43:d0:
b1:94:3b:29:fe:c8:94:96:ef:bc:c2:34:f7:53:c6:
c5:2b:41:eb:28:30:7a:93:f3:a7:d9:0d:64:23:18:
7c:e2:06:af:c7:8c:7a:ca:15:ef:67:ea:40:4e:86:
88:0a:c7:71:5b:dc:0b:09:2f:46:ec:b8:ce:41:3b:
98:fb:1a:e8:3e:19:8d:2d:ff:b0:86:37:03:68:e7:
b4:a8:1c:a0:4d:47:4b:6e:13:e8:8d:fe:c3:67:69:
4e:c8:f0:c7:bd:38:12:7e:19:33:b6:44:fe:a3:33:
93:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BB:EB:7A:F3:71:9F:CC:63:BF:1C:16:3B:DB:21:23:A3:EE:16:F5
X509v3 Authority Key Identifier:
keyid:61:F8:0D:83:D9:48:E2:48:B9:68:60:66:76:60:7B:84:70:E2:E4:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3a51ec-7c70-496c-bc68-514a96519183/1/1-LvrevNxn8xjvxwWO9shI6PuFvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3a51ec-7c70-496c-bc68-514a96519183/1/YfgNg9lI4ki5aGBmdmB7hHDi5Bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.37.0/24
Signature Algorithm: sha256WithRSAEncryption
49:a8:66:11:81:ac:b4:25:c1:ec:fe:ff:31:b2:9f:f0:2d:45:
7e:40:8f:38:cb:52:ba:75:34:14:28:eb:eb:89:27:ac:29:9b:
b6:91:88:ec:a9:b3:ee:6d:3b:78:07:77:ce:29:1f:ce:19:22:
65:04:3f:2b:d2:86:b4:23:91:54:90:98:62:1a:7b:b1:86:a0:
e8:ef:a7:78:90:79:90:08:39:58:08:d1:77:03:5c:f6:2b:18:
68:96:c8:a0:60:7f:20:2e:f5:f0:fe:8c:5b:26:29:36:ac:ae:
e3:ac:49:0c:44:dd:c8:90:b9:e9:57:d5:60:c7:c3:fc:22:67:
da:11:b4:fd:41:9d:c6:65:1e:b0:ef:19:87:2c:73:58:c8:d0:
3b:0d:87:1d:81:12:3b:c4:bb:6f:d8:1a:34:05:28:4a:d8:1e:
f0:9b:fb:ea:a9:bf:69:22:a4:75:64:da:45:fb:0e:19:ef:24:
72:86:18:98:66:be:d0:a8:b5:f5:ab:bd:ed:6c:8c:46:d9:ca:
2b:d1:4c:f9:ad:ad:88:78:8b:10:d9:f4:05:c1:ed:a0:c7:a6:
60:45:df:02:8b:02:3f:83:a3:7c:3e:14:1f:42:dd:b8:37:44:
76:a1:ce:3a:f9:16:e5:e4:76:ac:16:d2:3c:6e:aa:c4:33:05:
f1:5b:a2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 21:13:21 2026 by rpki-client