Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/ssW78z2mnJkOzOZmUnXMkDw6DDk.roa
File: ssW78z2mnJkOzOZmUnXMkDw6DDk.roa (raw, json)
Hash identifier: /yrIaP9kfqHBBzpn1v5OUAHVa+R+kgnJcpfPWDrfgkU=
Subject key identifier: B2:C5:BB:F3:3D:A6:9C:99:0E:CC:E6:66:52:75:CC:90:3C:3A:0C:39
Certificate issuer: /CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Certificate serial: 01A15F304E3D969862288F81018CC17EC4D7
Authority key identifier: 96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/ssW78z2mnJkOzOZmUnXMkDw6DDk.roa
Signing time: Wed 21 Oct 2026 15:59:23 +0000
ROA not before: Wed 21 Oct 2026 15:59:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216074
IP address blocks: 91.108.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5f:30:4e:3d:96:98:62:28:8f:81:01:8c:c1:7e:c4:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Validity
Not Before: Oct 21 15:59:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2c5bbf33da69c990ecce6665275cc903c3a0c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6b:10:e7:c5:5a:36:50:6b:42:a7:16:d4:2a:
22:e2:47:fe:f4:67:18:80:fb:08:52:30:95:32:09:
3d:9b:ae:82:87:d3:09:eb:9c:fe:65:77:36:5f:75:
b4:95:c7:30:02:b3:63:56:00:07:2e:73:3d:b1:5f:
a7:9a:6c:33:00:ae:c1:3d:a9:00:53:51:ba:d8:27:
e2:9f:8f:16:1c:ac:e5:5d:17:26:13:40:8d:d1:6b:
20:ee:2b:69:bd:83:c1:cb:e7:21:d5:cc:d1:21:e7:
ab:de:9c:74:e9:f3:a2:49:a6:b9:00:62:ed:dd:17:
5a:30:d4:98:77:1f:71:49:99:39:f9:c0:6c:4d:77:
ba:42:d3:1e:ca:d0:b8:a2:9c:47:63:46:6f:f3:31:
35:68:73:f1:da:03:5d:97:b4:bd:6e:54:80:9a:35:
a9:cc:fd:d4:84:1e:dc:d0:57:c1:f2:c6:91:3e:16:
81:c0:31:8c:96:e4:af:c7:01:c7:da:84:27:00:89:
11:49:e5:f9:05:2d:f2:36:8f:6a:53:13:5e:84:c7:
05:c7:4a:b6:99:c0:6b:a5:ae:ee:42:10:6d:c0:41:
ee:c0:c4:2c:67:b8:f1:97:b2:45:cb:b8:8a:e7:3c:
c8:60:38:a7:fc:ee:36:11:be:9a:93:39:e7:65:7b:
e8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C5:BB:F3:3D:A6:9C:99:0E:CC:E6:66:52:75:CC:90:3C:3A:0C:39
X509v3 Authority Key Identifier:
keyid:96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/ssW78z2mnJkOzOZmUnXMkDw6DDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.153.0/24
Signature Algorithm: sha256WithRSAEncryption
45:92:0d:0b:35:a2:14:14:0e:8e:4b:50:f2:5b:c3:bb:1c:e0:
dd:c1:91:90:9b:e4:d2:a4:ed:a2:5b:a3:6b:3b:68:8e:9e:69:
88:6c:01:a0:8c:8b:9a:5e:ab:1c:07:fb:ed:0b:66:29:0a:c7:
bf:44:6c:18:81:bd:0d:3d:12:5b:db:53:0f:ea:cf:2f:f8:9e:
8c:fc:c6:eb:8d:96:48:4d:30:53:95:9b:47:13:7f:a9:1b:70:
a3:b7:99:c7:e8:c6:8a:64:d7:22:58:0c:05:96:46:97:df:b3:
cf:0f:bf:33:65:9f:2d:b9:1c:17:52:be:80:87:6e:6a:d2:4d:
cd:f8:18:9d:ae:e3:92:43:cf:66:06:57:f0:1a:51:8b:20:80:
29:2d:c8:0f:9a:e7:0c:a4:94:20:01:e3:ce:35:1e:cd:6d:96:
f1:86:4d:c9:cf:b4:d9:f6:44:fd:22:a2:2f:1a:33:a0:1e:7f:
13:e6:93:a8:3e:19:0e:21:7b:d4:0a:35:82:f9:f6:37:85:7a:
13:45:20:83:db:ff:c4:7d:0e:09:70:dc:bd:9e:5c:11:dd:9a:
66:ff:75:63:5a:a1:1f:97:a7:b1:81:1a:b7:a1:53:f1:f0:64:
81:eb:ff:0b:6e:ec:de:18:01:13:24:65:10:29:f2:88:b3:2f:
95:87:fe:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:34:13 2026 by rpki-client