Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/Q7fi7ALGH77X5Pe8MEOgm6H2b8Q.roa
File: Q7fi7ALGH77X5Pe8MEOgm6H2b8Q.roa (raw, json)
Hash identifier: +YE0JFK9vd7yq+zGNFPKKVgNcjpTaILvPZZX9mMcQSI=
Subject key identifier: 43:B7:E2:EC:02:C6:1F:BE:D7:E4:F7:BC:30:43:A0:9B:A1:F6:6F:C4
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 019F23694A142271FD119CDCC302679C547D
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/Q7fi7ALGH77X5Pe8MEOgm6H2b8Q.roa
Signing time: Thu 02 Jul 2026 15:18:50 +0000
ROA not before: Thu 02 Jul 2026 15:18:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201909
IP address blocks: 91.223.117.0/24 maxlen: 24
91.233.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 06:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:4a:14:22:71:fd:11:9c:dc:c3:02:67:9c:54:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Jul 2 15:18:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43b7e2ec02c61fbed7e4f7bc3043a09ba1f66fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:24:b3:0c:e2:fb:75:42:14:45:2c:2f:ed:8c:
3a:a2:2c:4f:ba:f0:a2:6e:df:ef:a6:45:13:78:7c:
1b:57:e4:b9:61:f3:37:8b:23:e7:17:77:71:d0:ab:
6c:9b:41:e5:7a:6b:fa:8e:d2:e8:98:af:1b:9a:f0:
78:07:7d:f7:f0:44:e6:f3:02:71:ef:a2:a0:ee:55:
58:37:94:b2:82:cf:c7:db:ec:1a:c9:4c:79:ed:dd:
e2:30:12:bc:02:d4:1f:5a:86:0a:86:71:39:76:17:
1b:5c:c7:96:5a:6b:e6:62:c8:9c:81:ed:05:ef:fc:
a8:89:7b:37:4e:1c:be:61:ac:fc:ce:a2:4a:f6:0b:
bf:dd:52:ba:4e:f1:79:70:b0:ee:1f:55:b3:0f:f7:
fa:9e:6c:bc:b4:d7:2e:7f:27:55:8a:be:34:d4:53:
7c:f9:67:43:52:f3:11:ae:16:54:25:3e:b0:4d:de:
eb:62:f8:bb:e3:90:ad:85:eb:56:cd:2a:dd:ad:0c:
f6:1f:35:58:fa:e7:ad:43:77:29:96:92:0c:1a:6c:
18:19:7a:82:ac:29:42:ab:c9:b0:b0:55:33:6b:59:
44:c2:49:e8:5c:95:51:41:14:4c:59:eb:d2:2d:29:
64:bb:6c:0c:7d:df:31:37:48:da:03:34:79:44:d9:
a7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B7:E2:EC:02:C6:1F:BE:D7:E4:F7:BC:30:43:A0:9B:A1:F6:6F:C4
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/Q7fi7ALGH77X5Pe8MEOgm6H2b8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.117.0/24
91.233.201.0/24
Signature Algorithm: sha256WithRSAEncryption
29:06:e1:a1:6a:49:ba:d2:e7:ca:25:f9:44:91:b9:f1:74:e5:
9e:f7:89:e2:fd:d4:97:38:d8:77:51:22:06:07:b9:4c:d5:7b:
22:46:a9:89:df:b4:43:8b:98:93:61:42:72:63:47:8a:af:38:
a1:bf:5c:7d:f5:eb:f5:f0:d6:dc:ac:39:83:04:e8:b1:80:db:
58:73:e0:dc:b0:a1:d4:a3:77:26:00:a1:38:db:a4:05:36:f7:
f0:63:e8:22:27:cc:bc:79:b8:3d:06:a8:1d:5e:38:b4:6e:9c:
e1:09:1f:8b:09:89:95:b5:c3:7c:75:bf:f3:3e:2e:22:7a:1b:
02:e3:a8:a9:28:88:3b:c5:0b:45:5e:3e:cf:37:23:db:e6:29:
5a:31:95:d8:89:79:04:de:00:fc:68:7c:07:ce:de:fc:7c:1c:
36:c3:3a:76:47:29:2f:be:78:34:8a:e8:12:79:a7:bf:a9:74:
63:c4:7b:7e:16:3a:95:f7:93:ec:fe:fd:de:39:72:74:9f:6c:
60:2e:26:9e:d7:0e:bb:4c:ac:c2:41:48:54:06:b6:eb:5b:1e:
03:5a:19:a1:93:7a:1d:ff:8d:64:21:ef:61:ab:58:09:2b:83:
2f:ae:f5:1f:55:db:72:63:d8:58:11:6a:1e:3d:b4:5d:cf:65:
17:c3:20:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:22:28 2026 by rpki-client