Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/pi-ROLtMli7awGKUJO7UQ8Lvjn0.roa
File: pi-ROLtMli7awGKUJO7UQ8Lvjn0.roa (raw, json)
Hash identifier: uwBBbyFPu4jWRTLTB2q1IA2l9Rly7f5Y/eDPv1LfJd0=
Subject key identifier: A6:2F:91:38:BB:4C:96:2E:DA:C0:62:94:24:EE:D4:43:C2:EF:8E:7D
Certificate issuer: /CN=03db95b436f531c4e602f39610ad53e26fdff153
Certificate serial: 01A04F87C74CB5AF7833B82440F04541F7B4
Authority key identifier: 03:DB:95:B4:36:F5:31:C4:E6:02:F3:96:10:AD:53:E2:6F:DF:F1:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/pi-ROLtMli7awGKUJO7UQ8Lvjn0.roa
Signing time: Sat 29 Aug 2026 21:58:13 +0000
ROA not before: Sat 29 Aug 2026 21:58:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210546
IP address blocks: 77.91.70.0/24 maxlen: 24
92.42.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4f:87:c7:4c:b5:af:78:33:b8:24:40:f0:45:41:f7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03db95b436f531c4e602f39610ad53e26fdff153
Validity
Not Before: Aug 29 21:58:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a62f9138bb4c962edac0629424eed443c2ef8e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:07:e4:0b:70:5e:8d:2b:cc:d5:e8:a4:fc:42:
c5:7e:22:89:a9:b2:c4:3d:ac:9c:85:b1:78:00:78:
36:fb:b3:53:8c:b8:c8:be:c5:9b:cd:ac:c4:00:e0:
99:6a:51:16:8a:47:6d:46:0d:4e:d4:fd:ea:75:b2:
a3:34:91:1b:bb:c7:2a:1b:b6:50:03:c8:2c:59:74:
53:d5:d7:07:5d:ea:66:71:52:19:d0:3b:2d:b2:95:
d0:7c:6e:70:93:f4:aa:18:32:a8:e9:e0:dd:0c:d4:
cb:d2:40:70:4e:79:09:f9:f9:b0:4f:5b:72:32:43:
6f:d4:70:77:27:d5:7c:0b:fd:2f:6c:ca:a0:c6:05:
59:5d:c4:91:a6:c9:c5:ed:79:cd:26:34:78:bb:fa:
df:36:97:57:7c:86:57:3d:e4:ca:6a:ba:2d:33:60:
15:e4:12:da:41:4d:ad:fb:1e:09:92:c0:1f:ea:ac:
06:fa:d2:a3:14:6d:f1:2d:c2:9b:c5:73:c8:43:0f:
5b:b9:21:1e:36:71:47:5f:c4:d7:33:4c:b5:50:40:
69:ea:82:f0:b5:a9:2f:3c:29:57:f0:63:ec:2d:56:
3f:4c:19:62:ec:ca:6e:48:53:c2:5f:83:f6:5e:c4:
02:45:21:8b:30:ae:fc:df:31:aa:48:cf:20:82:e1:
21:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2F:91:38:BB:4C:96:2E:DA:C0:62:94:24:EE:D4:43:C2:EF:8E:7D
X509v3 Authority Key Identifier:
keyid:03:DB:95:B4:36:F5:31:C4:E6:02:F3:96:10:AD:53:E2:6F:DF:F1:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/pi-ROLtMli7awGKUJO7UQ8Lvjn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.70.0/24
92.42.96.0/24
Signature Algorithm: sha256WithRSAEncryption
06:e4:ce:14:e8:f0:2c:e8:5b:4a:8e:84:29:4f:0f:46:ec:4c:
d2:c3:b8:00:9c:1d:49:e4:07:15:f7:52:3e:e7:48:30:a3:30:
e9:2d:89:4d:cb:33:b0:65:bb:8f:d1:9c:75:f4:01:44:2f:6d:
18:61:7e:f0:30:85:6b:8b:21:02:fe:99:ea:65:ff:2e:96:5a:
3c:c9:e2:95:0b:14:05:24:ea:31:8d:a9:8f:e5:4f:b3:44:5c:
13:09:9d:c3:7c:b6:33:1e:5f:27:79:34:61:d9:e0:39:93:32:
1f:b4:ea:89:0a:d2:4d:6c:af:37:a0:e2:af:e3:bb:53:1f:7a:
fc:34:43:ba:7e:2b:f4:04:06:8a:93:a4:0c:97:69:f2:89:11:
4e:0c:5d:1a:94:db:d6:a8:a1:18:8e:d5:a4:21:f6:47:71:e5:
ac:97:a8:fb:89:1a:a2:ed:6b:f6:1b:27:72:52:6d:84:c8:cb:
70:1c:c6:4a:26:d0:68:84:3e:e7:79:6e:12:8b:35:6b:be:0c:
26:8a:87:ac:e7:12:13:3d:db:99:f0:e2:ee:b5:da:ba:50:f1:
b9:66:ef:c0:70:86:ee:e3:b3:41:4a:4a:b6:0c:dc:7b:a5:1f:
35:78:ec:98:eb:d3:cf:b2:0e:24:73:6f:dc:ba:45:1a:68:fb:
d1:76:62:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:06:36 2026 by rpki-client