Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/sxcdm8hMPFs7hwfFtctneyGAbtY.roa
File: sxcdm8hMPFs7hwfFtctneyGAbtY.roa (raw, json)
Hash identifier: qSfMKSLLYHXoos50NdW6B+8JG0v//N7ZW2DTOD6cmAA=
Subject key identifier: B3:17:1D:9B:C8:4C:3C:5B:3B:87:07:C5:B5:CB:67:7B:21:80:6E:D6
Certificate issuer: /CN=d191557a20d3299613c702e9993e9d59c39b4708
Certificate serial: 019F379B6B4C230512423F56AAF156C5CAE7
Authority key identifier: D1:91:55:7A:20:D3:29:96:13:C7:02:E9:99:3E:9D:59:C3:9B:47:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZFVeiDTKZYTxwLpmT6dWcObRwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/sxcdm8hMPFs7hwfFtctneyGAbtY.roa
Signing time: Mon 06 Jul 2026 13:26:00 +0000
ROA not before: Mon 06 Jul 2026 13:26:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15557
IP address blocks: 91.220.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZFVeiDTKZYTxwLpmT6dWcObRwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:9b:6b:4c:23:05:12:42:3f:56:aa:f1:56:c5:ca:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d191557a20d3299613c702e9993e9d59c39b4708
Validity
Not Before: Jul 6 13:26:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3171d9bc84c3c5b3b8707c5b5cb677b21806ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8f:13:63:3b:0d:75:70:63:40:46:8d:01:b4:
34:34:d2:24:6f:9b:30:af:b2:05:60:31:79:78:9a:
df:83:4e:4b:24:03:72:a8:86:44:df:e8:17:ab:49:
ef:3e:4e:86:26:45:da:48:34:48:6e:26:c1:64:c2:
20:ef:85:00:62:0e:94:86:48:c0:ae:7d:17:c6:48:
f4:39:06:c9:71:11:ba:8e:07:ff:ce:f2:1b:c8:28:
75:d2:ba:ce:02:8b:95:45:b5:d2:38:70:9d:c9:f8:
80:2e:42:3f:ce:12:0c:9a:e6:ad:ba:0f:ae:a2:2d:
0e:9b:89:6d:e9:cb:e7:a4:ae:93:d3:38:e0:7d:f3:
2f:13:c7:9a:7e:f1:b8:20:de:02:b3:c7:59:de:53:
80:3d:6f:04:0f:2d:9b:aa:92:ec:d1:82:46:5a:d9:
af:ce:1b:4a:78:52:c9:cc:fc:04:af:e4:94:6f:37:
03:8f:86:c5:bc:91:9c:33:c5:d4:ef:e2:7b:65:3e:
4e:02:e2:21:93:dc:3a:3b:be:34:41:9a:90:a9:f1:
8d:f7:9f:7f:84:a6:78:28:97:67:6e:c7:41:8a:a1:
e5:b1:0a:93:2d:bd:b9:a5:d5:ba:86:98:25:89:34:
a0:aa:b3:c0:aa:45:7d:ee:b4:a4:e6:89:c3:4b:5c:
0e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:17:1D:9B:C8:4C:3C:5B:3B:87:07:C5:B5:CB:67:7B:21:80:6E:D6
X509v3 Authority Key Identifier:
keyid:D1:91:55:7A:20:D3:29:96:13:C7:02:E9:99:3E:9D:59:C3:9B:47:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZFVeiDTKZYTxwLpmT6dWcObRwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/sxcdm8hMPFs7hwfFtctneyGAbtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/439cb7-4a36-425e-a084-dcf8ae924993/1/0ZFVeiDTKZYTxwLpmT6dWcObRwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.200.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:f4:66:d0:33:fb:ee:7d:fa:e7:f4:f3:94:f4:9c:d1:bb:7b:
76:2d:35:04:dd:5b:eb:50:92:af:bb:80:49:e9:01:0b:fd:a9:
80:ec:0c:74:dc:57:f3:fe:2a:06:f8:f6:54:16:50:2f:a1:a6:
1f:18:87:cc:62:f7:04:43:08:1d:11:86:e4:7b:33:61:53:90:
58:9e:5c:90:84:8f:8d:c6:f0:ec:e9:b1:49:08:a3:0c:7d:bd:
8a:1e:99:83:18:27:02:13:33:dc:8a:83:ae:5b:7a:c0:84:87:
06:54:9c:18:13:ee:30:7a:1c:30:0f:5f:a3:a2:98:fa:c9:5d:
c0:0a:da:b1:2d:4d:a8:af:87:8e:86:2a:c6:25:20:ce:7e:f2:
7b:ea:7b:6b:f4:98:89:34:09:ed:bd:da:23:e6:85:d8:ec:e3:
b5:cc:57:71:6c:03:30:7b:7a:75:c0:20:4c:39:84:32:b7:a5:
67:80:53:2e:94:87:30:24:56:f3:ea:fc:d8:8d:23:f5:c8:e2:
f6:55:1c:12:69:1f:b1:9b:d9:d1:2a:eb:02:75:e3:b0:8b:ec:
fd:a4:81:29:5e:13:d2:cd:f8:49:69:68:dd:8b:66:d9:35:f9:
f1:6a:38:fa:9d:17:73:41:09:83:00:04:03:78:66:42:9c:a0:
81:f1:c2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:37 2026 by rpki-client