Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/op71npEadOyd07159Wej77YQILI.roa
File: op71npEadOyd07159Wej77YQILI.roa (raw, json)
Hash identifier: eD5sjYOJWPP4UoIDZC6vYDF6ENzBilI2Pagr2VoIOrw=
Subject key identifier: A2:9E:F5:9E:91:1A:74:EC:9D:D3:BD:79:F5:67:A3:EF:B6:10:20:B2
Certificate issuer: /CN=dc621dcdc7ad0be331d7c9a447f2a164e42ea4fd
Certificate serial: 019CBAAA934AFFD07C575F211D12BBED5A56
Authority key identifier: DC:62:1D:CD:C7:AD:0B:E3:31:D7:C9:A4:47:F2:A1:64:E4:2E:A4:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GIdzcetC-Mx18mkR_KhZOQupP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/op71npEadOyd07159Wej77YQILI.roa
Signing time: Wed 04 Mar 2026 21:04:26 +0000
ROA not before: Wed 04 Mar 2026 21:04:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2613
IP address blocks: 91.218.38.0/24 maxlen: 24
193.135.150.0/24 maxlen: 24
2a07:e640::/29 maxlen: 29
2a0c:d0c1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GIdzcetC-Mx18mkR_KhZOQupP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ba:aa:93:4a:ff:d0:7c:57:5f:21:1d:12:bb:ed:5a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc621dcdc7ad0be331d7c9a447f2a164e42ea4fd
Validity
Not Before: Mar 4 21:04:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a29ef59e911a74ec9dd3bd79f567a3efb61020b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:53:0d:3a:25:4b:4a:a7:06:e4:a1:7e:ea:db:
2c:e6:7f:b9:3e:76:43:ca:90:95:a4:43:87:9e:15:
72:5d:d1:7f:ea:73:86:3c:01:a7:96:9c:79:48:22:
13:cd:ec:5c:db:d6:2c:0e:c6:e8:5b:5d:82:03:e8:
32:b0:91:41:49:31:8e:20:88:ed:b0:2b:e0:f3:40:
a3:09:55:58:e9:28:57:30:ff:62:95:df:e5:b7:22:
fc:9d:6e:1d:5b:94:25:6a:d2:11:f3:10:95:cc:fd:
c7:20:79:f1:53:f8:b3:33:bd:2b:a7:28:dd:f7:84:
3c:ae:a5:b8:15:16:2a:82:94:10:4f:20:8f:24:3e:
a8:c7:e6:d4:6d:b5:47:4b:73:c4:e5:8c:76:bd:98:
70:ce:b9:b5:18:fb:f3:70:db:63:6d:35:72:59:59:
dd:d2:1b:da:9a:f1:cc:51:9b:37:72:08:50:f3:0f:
09:8f:0e:8e:01:a8:97:ae:9b:74:b7:7e:26:69:00:
fc:9e:a2:8a:c1:a2:5c:41:8b:41:96:29:15:12:d7:
c7:8d:d1:69:69:63:9b:ad:06:be:c1:a2:e6:74:16:
4b:b5:b9:81:e9:5d:9e:9d:97:44:4a:ab:42:7a:02:
0f:69:86:72:d7:1f:5e:ad:fc:8d:2c:9b:8b:cf:d9:
3f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9E:F5:9E:91:1A:74:EC:9D:D3:BD:79:F5:67:A3:EF:B6:10:20:B2
X509v3 Authority Key Identifier:
keyid:DC:62:1D:CD:C7:AD:0B:E3:31:D7:C9:A4:47:F2:A1:64:E4:2E:A4:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GIdzcetC-Mx18mkR_KhZOQupP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/op71npEadOyd07159Wej77YQILI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.38.0/24
193.135.150.0/24
IPv6:
2a07:e640::/29
2a0c:d0c1::/32
Signature Algorithm: sha256WithRSAEncryption
9d:fa:71:2f:92:b9:5e:72:6d:f6:ce:f1:58:77:dc:90:19:66:
dd:06:23:12:9e:43:1a:f3:a9:3f:2d:b1:5b:41:44:65:71:ff:
4e:57:05:5a:04:fc:a3:a9:94:54:78:90:f8:bb:22:18:06:25:
70:42:24:a5:50:c1:dc:6d:3d:90:2b:18:44:68:6a:b3:62:e1:
bd:48:f8:51:bb:a3:ee:de:8a:40:d4:50:01:8b:07:1b:36:28:
de:9a:96:0f:6e:5e:a4:20:2b:a8:fd:15:31:93:49:86:0c:6b:
01:b2:2e:79:78:d2:c5:7b:06:29:09:c4:3a:2e:3b:d5:9b:f9:
aa:f1:57:1c:1d:13:13:33:7b:d4:b5:96:bd:36:ed:bb:da:82:
6e:4e:e9:9c:41:5f:4e:77:d4:68:9e:4e:f9:34:98:ec:ee:e3:
3f:0f:27:16:15:ea:8c:f2:36:7d:64:b1:a2:b0:0c:28:a5:1d:
16:d6:af:69:34:60:f5:e0:25:b0:87:b0:13:7d:bd:55:5d:bc:
1b:ee:fa:23:d9:ea:4d:4f:6f:d8:1f:d9:e1:91:2d:8d:dd:2f:
2a:7d:66:6c:37:1a:35:bf:1a:f5:ae:3d:15:be:9b:ec:80:3e:
0e:7c:7e:19:26:08:b1:c2:d1:87:84:df:45:79:6e:f9:41:ce:
2d:ba:13:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 07:51:01 2026 by rpki-client