Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/3xMKlPHIGaOyntvxq5-0cJGkEM8.roa
File: 3xMKlPHIGaOyntvxq5-0cJGkEM8.roa (raw, json)
Hash identifier: /cEKrRNTiBM5gi3hqFnttqfsa8KXp+I1M1pMt+zCB0M=
Subject key identifier: DF:13:0A:94:F1:C8:19:A3:B2:9E:DB:F1:AB:9F:B4:70:91:A4:10:CF
Certificate issuer: /CN=07f231365985828d5a9663ed1b440624b24fec13
Certificate serial: 019E73272A54BA79F47DD613734968C1B0F0
Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/3xMKlPHIGaOyntvxq5-0cJGkEM8.roa
Signing time: Fri 29 May 2026 09:53:26 +0000
ROA not before: Fri 29 May 2026 09:53:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 91.199.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:73:27:2a:54:ba:79:f4:7d:d6:13:73:49:68:c1:b0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13
Validity
Not Before: May 29 09:53:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df130a94f1c819a3b29edbf1ab9fb47091a410cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ce:22:8b:c2:d6:bc:13:1c:f9:75:19:55:2f:
7d:e6:b3:4a:d6:ca:68:84:d1:35:21:dd:04:41:6d:
0c:57:d4:9e:45:c7:a6:46:12:f9:1b:4e:46:8f:2d:
db:3c:2e:14:38:fc:97:56:24:0b:36:c1:d9:f0:d1:
5b:f6:ee:32:e2:3b:a2:ba:54:37:46:c7:8b:f4:a9:
21:c2:1c:52:ad:ce:3a:87:a4:8b:ba:f1:3c:59:76:
40:96:01:c2:3b:84:3f:21:80:85:97:3a:d0:25:2a:
b9:cb:63:5a:67:62:2f:9a:32:f3:6d:eb:a4:ae:78:
a6:9d:e0:60:2c:4f:92:13:d9:f3:6d:e1:aa:58:7c:
2f:a4:01:ca:46:0d:37:90:82:0a:c6:ad:20:c0:d1:
2e:5a:49:7e:f7:0e:d6:29:03:5b:85:3b:08:b9:da:
c4:43:6d:30:b9:70:6a:7b:44:31:f0:18:bb:0e:31:
2e:d0:46:25:eb:47:48:04:ed:1e:83:58:21:a1:84:
c8:51:f0:5f:7f:c4:6b:b0:ca:e9:a5:49:c7:04:45:
8f:a1:1a:a8:0b:0c:f0:c3:52:c2:65:d6:d1:7f:d5:
76:fc:a9:92:f8:6d:75:26:2f:0c:6f:93:1c:91:d0:
6b:73:c2:76:1d:30:fd:53:ba:42:fc:60:90:66:2f:
95:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:13:0A:94:F1:C8:19:A3:B2:9E:DB:F1:AB:9F:B4:70:91:A4:10:CF
X509v3 Authority Key Identifier:
keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/3xMKlPHIGaOyntvxq5-0cJGkEM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.42.0/24
Signature Algorithm: sha256WithRSAEncryption
38:f2:a6:9b:8e:44:9f:c4:52:1c:51:d9:c3:91:ab:3f:a0:ff:
db:6e:d1:d9:b0:8a:2b:c2:94:cb:02:f9:68:cb:4d:0f:2f:67:
61:10:a7:13:e0:2d:d4:2b:ad:b1:71:61:ac:db:2a:75:e7:57:
99:c3:6e:56:16:3c:3d:92:a5:70:e4:0e:99:a2:dc:c5:65:04:
f2:a7:da:ea:54:7a:a1:22:fd:bc:9a:ff:4d:25:09:27:6f:c4:
9b:f1:6c:41:22:7d:b9:0e:67:32:8f:11:cf:fa:cb:b3:73:b1:
35:3e:4e:e1:f8:ca:99:ed:a5:8d:24:6e:89:85:58:1c:a6:ad:
32:b0:8a:2b:45:87:55:7e:a4:d7:6a:05:54:f9:08:09:a4:52:
eb:39:bb:37:ee:70:9d:02:1a:20:38:da:d0:d7:1b:6b:19:8e:
ce:f4:36:48:60:34:91:50:8c:cb:a4:0a:f8:5a:1f:90:ee:5a:
bb:55:7a:cc:43:e7:d0:a4:2c:ab:60:87:8d:fb:b3:5e:20:13:
fe:3e:e2:c3:6c:3d:3b:0e:68:25:b9:8a:cf:d3:4f:a7:a7:41:
22:b6:ae:57:b8:17:70:d4:41:7a:3b:1f:e8:9e:ef:d4:ba:c8:
9f:bb:b1:b0:c1:85:ca:e2:44:26:3b:f6:dd:06:97:81:b5:3d:
16:7c:3e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 20:50:31 2026 by rpki-client