Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/EdGl_6Tic6Mpzlfr59WBM1BADyY.roa
File: EdGl_6Tic6Mpzlfr59WBM1BADyY.roa (raw, json)
Hash identifier: G+FZFwJ2110ZCN0MfLE1n2sVgehSz/THxhnHYjoT0VA=
Subject key identifier: 11:D1:A5:FF:A4:E2:73:A3:29:CE:57:EB:E7:D5:81:33:50:40:0F:26
Certificate issuer: /CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Certificate serial: 019FBDA1A6ECCE7EF380A0C66A3F377DF430
Authority key identifier: 96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/EdGl_6Tic6Mpzlfr59WBM1BADyY.roa
Signing time: Sat 01 Aug 2026 14:01:55 +0000
ROA not before: Sat 01 Aug 2026 14:01:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214151
IP address blocks: 91.108.140.0/24 maxlen: 24
91.108.141.0/24 maxlen: 24
91.108.142.0/24 maxlen: 24
91.108.143.0/24 maxlen: 24
91.108.158.0/24 maxlen: 24
91.108.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:bd:a1:a6:ec:ce:7e:f3:80:a0:c6:6a:3f:37:7d:f4:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Validity
Not Before: Aug 1 14:01:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11d1a5ffa4e273a329ce57ebe7d5813350400f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:01:91:c7:98:8d:fe:fd:2c:ca:35:19:36:7d:
fd:99:84:1c:fc:c5:ae:ee:50:a0:9c:c7:68:15:7d:
d1:bb:08:38:62:a9:16:ab:50:f6:52:2e:20:fd:d7:
a9:d3:e6:6f:78:c2:e8:f7:00:51:22:b8:58:82:64:
6e:5d:12:ea:90:40:2c:31:8e:0e:92:88:19:30:27:
8c:fe:a6:84:c2:4e:88:14:46:32:0a:f6:3c:3c:9c:
56:2b:99:8d:72:29:d6:3d:f0:c0:8f:7d:4e:37:9e:
2b:fe:45:7d:61:69:a2:fe:85:89:1b:a0:6d:01:bf:
d0:bc:aa:24:47:ba:af:f5:76:4f:da:3f:7f:19:5f:
a6:81:2e:15:84:fe:6e:19:5d:b0:7a:0a:02:77:51:
3f:3e:18:df:f3:bd:06:8d:27:79:84:53:2a:df:5c:
38:18:d4:9a:15:b5:76:73:a8:5b:63:54:11:04:21:
a2:f1:b8:b1:67:5f:93:3a:5f:62:69:e3:c0:02:a3:
79:0d:bd:c1:23:3b:a0:1e:b4:c5:87:f5:16:ed:dc:
45:45:de:fb:e7:5f:09:40:dc:b8:70:2e:ad:6f:de:
53:2d:f1:bb:0c:2c:0e:91:17:87:3e:ea:73:84:8d:
a6:16:bb:a4:4e:5b:c2:bc:51:8d:82:c2:24:c2:20:
03:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D1:A5:FF:A4:E2:73:A3:29:CE:57:EB:E7:D5:81:33:50:40:0F:26
X509v3 Authority Key Identifier:
keyid:96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/EdGl_6Tic6Mpzlfr59WBM1BADyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.140.0/22
91.108.158.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:3c:eb:73:33:98:ce:57:c1:2c:7e:a3:6c:d3:71:54:e2:c1:
f1:8e:10:e3:6c:e3:55:08:d2:ee:91:75:89:c4:8d:33:16:18:
f1:49:4b:4f:8f:3d:9f:ff:4d:18:6d:f1:17:19:9d:b6:04:b5:
80:31:c5:bd:eb:66:6b:48:3e:be:2c:ec:23:43:8b:b4:24:65:
69:2b:d2:10:25:30:71:6b:10:1c:01:f0:87:34:b6:5a:3b:89:
23:7c:0d:17:e9:b1:51:1c:b7:a4:2d:80:e2:35:a6:7d:81:e0:
c9:17:cc:4f:e2:3c:cc:23:62:60:05:61:95:84:d8:be:6e:22:
23:4c:e1:d6:e2:91:72:3f:2f:7e:29:b1:07:8c:00:3e:f6:f3:
16:55:bd:b3:01:3b:e6:11:0a:5e:fa:d7:9c:b0:b2:6f:dc:18:
26:8e:96:b9:1f:de:f8:e8:cb:01:67:b2:09:97:3e:56:f3:49:
88:69:ee:09:f3:60:7b:3f:4d:cd:60:f6:bc:df:97:b2:dd:5c:
3a:46:27:eb:95:13:62:2a:bd:e9:c9:8d:ef:df:75:ae:7f:73:
8b:aa:cb:8d:c0:85:9b:e6:b4:b1:f2:72:b7:23:55:ef:a9:d2:
b8:e0:b7:30:5d:b5:9b:36:81:a3:41:4a:38:f2:3b:75:73:b6:
a4:e1:6b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:11:41 2026 by rpki-client