Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/RNXSHxaUUvDblPcGLgkm4Fo6H6o.roa
File: RNXSHxaUUvDblPcGLgkm4Fo6H6o.roa (raw, json)
Hash identifier: b9iwGTQhnBGKAlddBv7VUcrZ47lzTTkkbsL9Gzq0crw=
Subject key identifier: 44:D5:D2:1F:16:94:52:F0:DB:94:F7:06:2E:09:26:E0:5A:3A:1F:AA
Certificate issuer: /CN=03db95b436f531c4e602f39610ad53e26fdff153
Certificate serial: 01A04F87C3481ADB68CE3D93FD94912FD9E4
Authority key identifier: 03:DB:95:B4:36:F5:31:C4:E6:02:F3:96:10:AD:53:E2:6F:DF:F1:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/RNXSHxaUUvDblPcGLgkm4Fo6H6o.roa
Signing time: Sat 29 Aug 2026 21:58:12 +0000
ROA not before: Sat 29 Aug 2026 21:58:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43581
IP address blocks: 77.91.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4f:87:c3:48:1a:db:68:ce:3d:93:fd:94:91:2f:d9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03db95b436f531c4e602f39610ad53e26fdff153
Validity
Not Before: Aug 29 21:58:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44d5d21f169452f0db94f7062e0926e05a3a1faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:76:a7:97:0e:35:71:2e:95:5f:40:75:84:8d:
44:07:f4:15:7d:02:7c:18:d5:56:c1:35:7c:d6:ab:
4b:8b:c2:73:02:11:4c:bf:51:94:f6:5d:dc:b4:22:
5a:a0:aa:0d:41:c3:65:35:af:cc:2e:81:88:9e:fe:
00:91:40:26:d5:37:ba:51:45:dc:40:9d:6e:c8:e9:
03:6e:e3:03:e2:95:be:3a:94:98:68:10:16:6f:8a:
98:ba:9c:95:8a:19:b7:46:56:59:9d:1e:16:df:10:
9b:40:f1:98:42:87:1d:7d:3f:97:4c:b0:7d:2f:26:
0e:d7:ee:bd:aa:14:ec:41:60:8b:c5:a7:9e:7a:50:
68:ae:54:e8:b4:d2:e6:6e:51:f2:a2:30:81:82:0c:
bd:0d:a6:fe:19:cf:e3:fa:2b:04:02:3d:3b:5d:04:
d4:08:96:aa:1a:99:b4:c7:6a:6f:a0:1c:37:e1:47:
5f:24:d0:41:d5:58:b2:f4:4c:3a:a8:06:5d:56:ba:
8a:dd:f5:0b:78:b1:78:f5:75:c3:5a:c7:8b:ef:24:
a1:25:af:f4:f0:10:1a:24:55:8f:2b:90:5e:39:00:
2b:97:cd:39:01:e7:c9:0f:c9:16:e3:eb:0b:90:a4:
8b:76:41:fc:c5:f8:d2:f5:6e:90:8d:4e:7d:45:fc:
b5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D5:D2:1F:16:94:52:F0:DB:94:F7:06:2E:09:26:E0:5A:3A:1F:AA
X509v3 Authority Key Identifier:
keyid:03:DB:95:B4:36:F5:31:C4:E6:02:F3:96:10:AD:53:E2:6F:DF:F1:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/RNXSHxaUUvDblPcGLgkm4Fo6H6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.90.0/24
Signature Algorithm: sha256WithRSAEncryption
65:92:a6:28:8d:aa:07:34:da:f8:68:60:b2:2c:17:ec:f3:8e:
a0:52:c7:66:df:8d:d9:8b:2d:56:99:df:64:5d:d3:45:f3:64:
a3:76:e6:43:21:c7:cb:f1:9e:e3:48:49:92:0e:2e:61:79:32:
9e:a5:4f:6f:24:67:a1:5f:b4:b5:15:60:d8:07:08:83:65:55:
84:58:4b:25:4b:9f:ce:b6:84:f4:cc:cc:aa:9c:4d:06:55:82:
a4:96:7d:dd:25:66:e8:cc:60:8f:bf:2b:58:8a:d4:df:6b:39:
22:e0:f2:e4:8b:b5:33:db:9c:9c:24:67:72:c4:c4:55:2d:1f:
1b:b5:19:df:f6:a4:e1:35:b5:06:59:33:d3:b6:53:d7:1d:17:
ac:9c:54:5c:35:de:3a:f1:48:d2:51:ba:6e:0c:65:43:ee:ac:
9c:97:b9:1f:1c:9c:e0:ea:7b:3a:28:13:fc:86:6e:8f:72:48:
3c:13:53:cd:b4:c6:f4:38:bd:91:47:bc:68:a0:da:33:73:8d:
89:8d:7a:8b:0a:f5:9c:da:af:ff:19:be:95:83:4f:27:6a:15:
04:47:1b:61:de:d7:bc:0c:6e:5f:e9:0c:76:e9:86:e9:ab:91:
2a:1b:08:d6:03:fb:68:4b:2d:00:5b:31:a7:f5:38:3e:ab:72:
76:22:3d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:06:41 2026 by rpki-client