Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/O4lfIFI5neBXzLMxaV02jkeMzgc.roa
File: O4lfIFI5neBXzLMxaV02jkeMzgc.roa (raw, json)
Hash identifier: ko9jy9JwVheYnkpwrtUCdOV69SgxGZD9WIsq1tTyulI=
Subject key identifier: 3B:89:5F:20:52:39:9D:E0:57:CC:B3:31:69:5D:36:8E:47:8C:CE:07
Certificate issuer: /CN=07f231365985828d5a9663ed1b440624b24fec13
Certificate serial: 019F656A28686945AF7AA92CDA27333AD429
Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/O4lfIFI5neBXzLMxaV02jkeMzgc.roa
Signing time: Wed 15 Jul 2026 10:54:43 +0000
ROA not before: Wed 15 Jul 2026 10:54:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22427
IP address blocks: 91.199.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:6a:28:68:69:45:af:7a:a9:2c:da:27:33:3a:d4:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13
Validity
Not Before: Jul 15 10:54:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b895f2052399de057ccb331695d368e478cce07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:eb:90:58:3d:c7:8f:e6:68:d6:6c:28:26:ea:
56:c1:83:1d:40:a1:c3:5b:68:a6:00:c7:21:9a:5d:
57:f0:88:4f:8e:bf:8d:d3:6f:0d:f7:8e:d3:90:69:
6b:0a:39:00:a7:e1:e2:61:b0:0e:ac:27:cf:8f:29:
c4:d6:97:1b:04:97:b6:ac:67:28:1c:ae:38:1a:49:
dd:af:95:96:8a:e4:df:4b:93:50:b4:7d:17:47:6d:
b4:96:c1:d2:eb:08:83:be:03:a5:08:1d:72:db:66:
3e:06:7e:87:ae:3e:eb:c5:58:1d:b7:c0:87:d9:bd:
f6:42:6d:0b:d8:bf:d0:51:da:b6:d0:cc:53:9c:1c:
27:e7:80:5d:cd:d2:3f:c0:e3:66:63:68:7f:3c:4b:
b1:24:cd:bb:20:64:a3:d9:4d:3f:67:ed:7d:bd:4c:
3e:43:ee:49:49:d7:8d:9d:10:c8:25:c2:c9:9b:a0:
a4:33:d8:0f:6b:c0:52:dd:17:c2:f1:28:78:55:c4:
58:5b:8e:6c:fa:b7:a2:49:55:37:a8:49:8c:8f:6c:
43:09:f2:50:2b:2a:22:bb:44:20:37:69:5b:dd:fd:
01:ff:4c:72:79:81:44:be:5d:a6:b9:cd:55:a9:99:
fa:bd:c6:ba:73:37:43:28:93:c3:8f:9e:eb:39:c6:
27:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:89:5F:20:52:39:9D:E0:57:CC:B3:31:69:5D:36:8E:47:8C:CE:07
X509v3 Authority Key Identifier:
keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/O4lfIFI5neBXzLMxaV02jkeMzgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.42.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:57:44:ba:0a:13:cb:60:bd:40:3a:96:f7:7b:96:dc:08:d4:
bf:41:ce:0f:99:e2:de:af:f8:4f:40:04:12:8e:cf:3e:42:5b:
fc:c0:2d:c4:43:9b:5b:de:72:1a:25:8b:06:fe:25:fd:10:e7:
94:92:26:fb:b1:b4:6b:c0:ff:fa:5b:07:03:e0:ff:ab:29:c7:
b5:4c:11:a0:5c:07:78:55:b7:f9:14:5c:fb:8a:6b:80:e5:a9:
81:3f:ba:2a:5e:a5:4f:14:60:86:7b:01:c0:c7:b8:ca:d5:0b:
9b:64:f7:f5:ea:b4:96:56:8d:c7:df:d5:d8:e2:75:64:51:9a:
eb:6b:30:cf:15:26:03:08:ae:79:1c:dc:10:c4:98:b6:d6:3d:
69:c4:ba:36:d6:c6:85:bc:0c:47:77:32:a2:0d:cf:93:45:0e:
d1:8e:6b:3e:20:85:31:1f:92:01:52:d0:82:02:6d:15:39:00:
8e:21:b5:41:b3:86:65:66:a6:84:1a:ab:d1:9b:38:4d:fc:58:
96:1c:00:15:63:e0:e6:26:48:4a:4d:a4:29:09:0f:38:39:94:
14:ab:f9:64:91:90:3d:cc:75:c5:17:69:c7:b4:ef:11:cc:4c:
d8:67:96:ed:55:47:f6:8e:44:e3:68:06:dc:ef:2b:c2:a3:cc:
8a:4c:63:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:37:26 2026 by rpki-client