Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/05qgDyHYet-7WBfs25erDDbDn9A.roa
File: 05qgDyHYet-7WBfs25erDDbDn9A.roa (raw, json)
Hash identifier: pmCrbCvll+aDpF6qWt8CdpEBEEpH6OZaRLkVhZYDT/E=
Subject key identifier: D3:9A:A0:0F:21:D8:7A:DF:BB:58:17:EC:DB:97:AB:0C:36:C3:9F:D0
Certificate issuer: /CN=de9461c211bf3551c5507c930b4204c6ec43b322
Certificate serial: 01A0FAFE86DE7411F02B8EE23125FCDC1508
Authority key identifier: DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/05qgDyHYet-7WBfs25erDDbDn9A.roa
Signing time: Fri 02 Oct 2026 05:02:59 +0000
ROA not before: Fri 02 Oct 2026 05:02:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 91.192.106.0/23 maxlen: 23
91.193.58.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fa:fe:86:de:74:11:f0:2b:8e:e2:31:25:fc:dc:15:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9461c211bf3551c5507c930b4204c6ec43b322
Validity
Not Before: Oct 2 05:02:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d39aa00f21d87adfbb5817ecdb97ab0c36c39fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:85:93:c1:cd:0b:0b:15:f9:22:80:c0:1f:97:
36:5b:3f:d1:ff:7d:6b:bd:32:c5:3f:16:be:a1:33:
11:a8:6a:40:65:19:97:43:77:3a:b7:1a:ad:eb:a5:
32:8a:1b:7b:56:c4:10:de:88:e9:0f:6c:d9:29:91:
73:09:03:68:5e:8b:da:ed:8e:58:a3:be:e2:8f:04:
cc:e2:25:6f:84:a1:b4:ce:7b:ea:d4:b1:e4:20:7b:
ca:c4:e8:3f:42:a9:0d:e8:28:ea:52:98:94:f6:31:
79:cb:96:50:3c:d8:7a:76:1a:20:e3:fa:c0:b2:9c:
10:ba:f9:3e:71:71:e3:87:e8:9e:9a:f9:ef:e8:03:
e0:b2:26:2b:a9:60:e7:10:3b:6e:a6:5d:c1:12:7e:
b4:69:cd:1d:5a:75:ca:e6:31:85:92:74:59:b3:ee:
9a:64:46:86:de:45:4a:1a:75:67:93:7a:da:ac:d1:
34:d5:08:ac:a2:29:3f:7f:3f:3a:4b:21:7b:94:c5:
78:e3:60:15:05:77:ab:56:52:f0:d6:80:3c:c6:ff:
b1:f7:a6:9c:78:66:57:8e:ed:61:ac:a9:c9:1f:c9:
8a:d5:8a:9c:cb:e7:0d:c5:9a:3a:86:37:4a:00:d1:
8a:71:fa:f8:f5:fd:4a:07:11:3d:04:54:98:c8:5a:
05:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:9A:A0:0F:21:D8:7A:DF:BB:58:17:EC:DB:97:AB:0C:36:C3:9F:D0
X509v3 Authority Key Identifier:
keyid:DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/05qgDyHYet-7WBfs25erDDbDn9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.106.0/23
91.193.58.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:8a:cc:06:d8:16:18:78:ac:7f:c4:ad:44:75:d4:c0:a7:f1:
3e:da:3d:2b:f2:0a:c0:a1:f7:57:ec:b8:c1:d4:ac:3e:d4:a6:
0a:86:9c:f0:82:2b:3d:e3:5b:18:4a:60:84:1e:4e:ef:0d:0e:
97:73:e0:70:1b:f4:44:5f:5c:c1:ec:a5:52:20:a1:2c:7f:49:
4e:40:9c:ec:12:81:db:a3:9f:34:bd:0a:60:2f:68:8c:cf:42:
cd:43:03:b6:bd:ed:71:34:69:35:e5:7a:5f:81:47:0b:3a:2e:
5c:e8:e1:7c:cb:d1:0d:3d:43:51:cb:59:97:56:b4:59:ec:b2:
f5:ed:6b:f1:f8:db:e0:e4:5a:04:2d:78:38:08:56:a7:51:13:
a9:28:4b:e1:65:73:68:be:3e:25:24:e0:ce:cc:ff:e6:9c:02:
e4:fd:90:3f:b3:f7:e5:c5:65:96:6a:85:25:6f:9e:b6:a9:9c:
8c:ac:6f:e4:8f:1b:7d:ae:c2:bd:2e:5d:74:e4:d0:72:47:35:
2c:7c:56:a0:99:91:5d:87:1e:24:ba:ea:9f:8c:2e:63:3f:a2:
fe:88:e6:23:f7:10:e9:ca:0f:fd:1e:82:a3:c2:c7:2a:79:53:
2a:d7:51:ec:25:d6:5b:d6:79:45:7e:8e:76:43:1f:cd:6a:c2:
0d:24:fb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:50:56 2026 by rpki-client