Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/76195d-d818-475a-b28f-210e47585152/1/Crlq-O90H2Y_SCDtCxJrFKys-lI.roa
File: Crlq-O90H2Y_SCDtCxJrFKys-lI.roa (raw, json)
Hash identifier: Om40Q8nPKFJ5xYk9aPCywHUGR05xZzipyARUEuqjnc8=
Subject key identifier: 0A:B9:6A:F8:EF:74:1F:66:3F:48:20:ED:0B:12:6B:14:AC:AC:FA:52
Certificate issuer: /CN=17b6adf257da6a2401fb4dcf590c861335e11ba9
Certificate serial: 01A11AA50BA71997CB1B04857B4EFA10C3D5
Authority key identifier: 17:B6:AD:F2:57:DA:6A:24:01:FB:4D:CF:59:0C:86:13:35:E1:1B:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7at8lfaaiQB-03PWQyGEzXhG6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/76195d-d818-475a-b28f-210e47585152/1/Crlq-O90H2Y_SCDtCxJrFKys-lI.roa
Signing time: Thu 08 Oct 2026 08:33:06 +0000
ROA not before: Thu 08 Oct 2026 08:33:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213069
IP address blocks: 91.199.14.0/24 maxlen: 24
2001:3040::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/76195d-d818-475a-b28f-210e47585152/1/F7at8lfaaiQB-03PWQyGEzXhG6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/76195d-d818-475a-b28f-210e47585152/1/F7at8lfaaiQB-03PWQyGEzXhG6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7at8lfaaiQB-03PWQyGEzXhG6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:a5:0b:a7:19:97:cb:1b:04:85:7b:4e:fa:10:c3:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b6adf257da6a2401fb4dcf590c861335e11ba9
Validity
Not Before: Oct 8 08:33:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ab96af8ef741f663f4820ed0b126b14acacfa52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e6:c1:47:6c:fe:a7:1a:d0:88:35:bb:bb:c1:
ef:27:89:b8:8a:bf:47:ef:bd:01:e0:9f:de:94:9b:
e5:31:55:c3:0d:07:1a:8c:c8:1d:3e:fd:30:14:5a:
bc:15:2a:cb:bf:d1:9a:49:51:8d:e7:a0:90:70:16:
1e:ea:22:02:72:40:5c:6c:7b:cd:cd:07:9a:dd:71:
4f:73:76:b6:e6:95:e0:03:42:d0:79:78:24:8f:70:
70:e5:f7:42:f1:31:21:7b:95:1a:94:89:cf:75:d2:
cd:60:18:27:19:d9:06:54:b0:ca:31:f5:fe:3b:28:
d0:0f:20:92:ef:74:bd:6f:1b:49:b3:f5:6b:37:75:
1b:83:ea:4b:0e:57:e4:77:d2:3f:37:6d:91:30:4f:
8b:2b:91:a7:e9:13:c9:87:bb:ec:9c:26:c0:c9:ff:
f1:ab:d6:27:d7:ef:a8:aa:5b:66:9a:19:d2:a4:8a:
92:55:43:32:1d:2c:98:97:6c:74:68:c1:93:0b:24:
4a:b8:11:5f:2c:6b:85:aa:91:d3:49:92:1a:04:8a:
97:a0:ab:d2:26:7a:4b:69:20:3d:75:50:72:91:ac:
6c:5a:f1:ac:ca:1d:d6:b7:86:b0:ff:14:c0:cd:85:
f6:f4:c3:14:c2:a4:e1:53:f8:c9:14:b4:2d:82:f0:
97:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B9:6A:F8:EF:74:1F:66:3F:48:20:ED:0B:12:6B:14:AC:AC:FA:52
X509v3 Authority Key Identifier:
keyid:17:B6:AD:F2:57:DA:6A:24:01:FB:4D:CF:59:0C:86:13:35:E1:1B:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7at8lfaaiQB-03PWQyGEzXhG6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/76195d-d818-475a-b28f-210e47585152/1/Crlq-O90H2Y_SCDtCxJrFKys-lI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/76195d-d818-475a-b28f-210e47585152/1/F7at8lfaaiQB-03PWQyGEzXhG6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.14.0/24
IPv6:
2001:3040::/29
Signature Algorithm: sha256WithRSAEncryption
bc:7d:c2:61:e5:77:d0:76:b5:4f:4d:d3:6d:51:9c:5e:b5:25:
cf:55:85:28:b6:cf:4f:4a:85:9d:4b:f5:54:0e:1b:49:ce:9a:
bd:95:9c:65:c3:7d:a3:0a:8d:da:a2:71:ca:a2:57:a8:98:56:
c0:38:95:1f:a5:df:32:1a:29:87:77:ff:e4:05:9f:44:be:71:
16:ad:c3:4f:61:0e:fb:ae:d5:f3:82:61:ad:c5:2b:f9:8d:8f:
dd:bf:04:02:15:83:e0:63:98:c4:fd:85:8f:58:49:b5:01:31:
52:62:28:43:39:92:f9:d5:be:ff:ee:5d:23:92:c6:6b:03:ff:
dc:30:ff:8a:c6:44:1a:40:52:6f:cf:73:91:1b:a4:17:1f:9d:
58:ac:d9:03:15:0b:1a:da:98:b9:9a:47:7a:6a:1b:f8:3e:9f:
27:19:47:e1:bd:0e:5a:70:0c:94:99:a3:40:4d:ce:4b:c6:d8:
0d:1d:98:12:3c:7f:91:dc:20:05:16:d0:40:74:e1:81:fe:87:
da:d6:e9:59:a8:a1:3f:56:79:a0:86:aa:7f:56:6b:b5:a2:19:
bb:4b:46:44:67:95:ba:84:7e:d4:1d:9e:5d:e9:51:6b:81:a7:
74:61:42:7a:a9:0b:e1:2b:99:dd:93:1c:0b:6d:24:96:f2:c8:
c8:08:9b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:48:37 2026 by rpki-client