Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/ehM6TAJv9Xbu-lvdPOyBuDK6Eyg.roa
File: ehM6TAJv9Xbu-lvdPOyBuDK6Eyg.roa (raw, json)
Hash identifier: CP8g2bPiECUDsq5QB1ti9WR4HH2XCU4VO+4gIqWnJMk=
Subject key identifier: 7A:13:3A:4C:02:6F:F5:76:EE:FA:5B:DD:3C:EC:81:B8:32:BA:13:28
Certificate issuer: /CN=07f231365985828d5a9663ed1b440624b24fec13
Certificate serial: 019DB942F7B62A98AA876D998AFC1DAA8083
Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/ehM6TAJv9Xbu-lvdPOyBuDK6Eyg.roa
Signing time: Thu 23 Apr 2026 07:34:26 +0000
ROA not before: Thu 23 Apr 2026 07:34:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 91.199.32.0/24 maxlen: 24
91.199.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b9:42:f7:b6:2a:98:aa:87:6d:99:8a:fc:1d:aa:80:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13
Validity
Not Before: Apr 23 07:34:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a133a4c026ff576eefa5bdd3cec81b832ba1328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b0:f3:b2:9c:37:f8:7a:79:8c:0d:99:3f:fb:
e1:f2:4e:ed:bd:f1:e0:d5:ed:ee:55:07:44:40:eb:
1f:c3:ea:0c:60:f0:b7:ee:7c:41:4f:b0:a1:0e:36:
03:c2:45:e9:d0:fd:2f:75:a1:0f:2f:4d:44:0b:ab:
a0:49:aa:f7:4a:4a:19:ab:81:ed:dd:db:ae:59:74:
b0:3a:b7:e2:f9:a7:f7:6c:16:70:26:9b:d2:0b:90:
8a:5b:a7:e0:99:6e:31:ec:2c:df:20:0d:cf:63:a1:
88:38:04:d5:db:b2:be:5c:a1:d7:29:7e:29:fb:c5:
a7:03:39:91:97:28:8c:67:6d:88:d6:27:cc:bf:3b:
f3:e8:ea:11:eb:ff:35:35:2f:ab:38:86:d5:1e:0b:
aa:62:17:49:88:56:22:b5:c5:10:60:fd:54:d3:26:
dc:8e:a3:d1:87:52:2e:4a:35:e0:e0:22:92:6b:7e:
e4:96:f5:4d:52:a6:7a:10:c8:83:1d:bf:ac:01:35:
57:e3:e0:20:55:85:71:34:79:97:3b:84:59:e8:28:
2c:40:6b:85:d3:75:2e:54:54:e7:98:e1:3d:05:18:
11:bc:b4:53:76:68:56:78:6c:2e:98:a5:fd:ec:bb:
fc:1e:56:60:41:c2:4c:b1:a2:5a:d6:54:fc:6f:c3:
e0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:13:3A:4C:02:6F:F5:76:EE:FA:5B:DD:3C:EC:81:B8:32:BA:13:28
X509v3 Authority Key Identifier:
keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/ehM6TAJv9Xbu-lvdPOyBuDK6Eyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.32.0/24
91.199.42.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:82:6b:8f:ec:95:bb:15:18:6d:80:7b:8a:88:14:44:0d:39:
5a:87:32:26:89:36:b1:20:63:70:36:89:0a:1b:d0:10:c1:70:
46:96:cf:4c:ee:71:f2:c6:df:2e:2e:c1:d3:da:85:51:ea:b8:
9c:ea:a9:b8:d0:87:aa:a1:a4:05:33:88:60:73:1c:f1:5b:05:
ff:3e:69:d3:2c:3b:31:ef:65:ab:70:da:94:83:cf:8a:e2:27:
96:2d:47:2c:49:e4:d4:7e:2c:82:30:cb:51:bb:04:65:e5:87:
e4:43:51:e4:f2:9a:eb:50:42:e1:2a:8c:2d:f2:a3:66:73:b9:
a4:c6:74:dd:3b:35:2d:2c:db:1c:02:af:a0:24:82:50:fe:52:
a9:cd:cd:ed:da:39:a1:61:f1:c8:06:d8:4a:3f:d3:d3:db:66:
4d:30:90:6f:bd:86:91:fc:2b:ac:28:84:48:a2:72:25:75:ca:
5b:55:6f:f7:c9:60:26:45:a4:44:60:0a:90:8d:a5:d8:e7:f5:
40:0f:1a:9c:33:0c:7c:0f:2b:32:50:0c:79:e7:e6:55:b0:24:
65:c7:75:c4:43:4e:d9:4c:2a:6f:72:28:0e:b4:a8:c1:74:58:
00:22:fe:69:16:30:68:19:96:36:84:97:8a:73:cf:f1:33:09:
d7:b0:6b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 17:25:38 2026 by rpki-client