Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/f9y5C0Tnuxyj1cjyhKMncCOvWzs.roa
File: f9y5C0Tnuxyj1cjyhKMncCOvWzs.roa (raw, json)
Hash identifier: x3B4LgDUPnspHBHjnqM8sp9Buwpr9ojlnB4dg3iOYh8=
Subject key identifier: 7F:DC:B9:0B:44:E7:BB:1C:A3:D5:C8:F2:84:A3:27:70:23:AF:5B:3B
Certificate issuer: /CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834
Certificate serial: 019FCBAA49AAD3A99A5F1E476AB5DD2F955A
Authority key identifier: F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/f9y5C0Tnuxyj1cjyhKMncCOvWzs.roa
Signing time: Tue 04 Aug 2026 07:26:02 +0000
ROA not before: Tue 04 Aug 2026 07:26:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50807
IP address blocks: 91.193.104.0/24 maxlen: 24
91.193.105.0/24 maxlen: 24
195.149.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:aa:49:aa:d3:a9:9a:5f:1e:47:6a:b5:dd:2f:95:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834
Validity
Not Before: Aug 4 07:26:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7fdcb90b44e7bb1ca3d5c8f284a3277023af5b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:23:a1:aa:63:39:a7:61:f3:a8:28:f9:83:a0:
75:19:79:aa:88:e5:01:36:ca:86:b2:0c:6e:09:2f:
21:2e:af:4f:3c:6b:7a:89:0f:5c:dd:27:ee:55:d9:
53:33:30:bd:c9:e8:5e:f6:c2:f0:76:e5:a7:c2:73:
5f:ea:98:57:e4:78:de:55:d5:6a:21:92:5b:44:c5:
a2:a4:b6:41:2e:2f:0c:42:96:56:b0:f8:e9:cc:a2:
01:42:f0:ef:7a:e8:88:f2:09:bd:fb:2f:a0:79:6a:
91:19:ce:74:1b:de:e2:89:1d:a3:53:c1:c9:44:52:
40:98:d1:6a:3e:9a:72:7d:1a:3a:e3:97:a0:fc:fc:
82:f0:f6:aa:66:df:cb:79:d0:8a:ea:82:4f:e9:36:
44:eb:35:d2:43:81:f8:c1:15:fe:18:47:2b:1f:02:
d2:e4:cf:b4:ab:59:5a:da:ad:55:d9:06:70:1f:69:
42:fd:f9:65:6d:63:d4:0b:29:59:1d:88:88:87:63:
6e:a5:46:b8:e8:a9:5f:a6:53:79:98:95:77:3a:2a:
53:84:7e:3f:cb:2c:f6:2f:51:eb:14:63:28:2d:9a:
15:3f:00:76:f0:ba:38:cf:d6:f2:9d:02:bd:40:43:
d1:ae:d6:df:b9:d1:d3:37:0f:5a:fe:fe:53:71:8a:
58:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DC:B9:0B:44:E7:BB:1C:A3:D5:C8:F2:84:A3:27:70:23:AF:5B:3B
X509v3 Authority Key Identifier:
keyid:F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/f9y5C0Tnuxyj1cjyhKMncCOvWzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.104.0/23
195.149.121.0/24
Signature Algorithm: sha256WithRSAEncryption
64:80:65:8b:66:2a:ab:0e:32:8b:6f:de:96:50:73:bf:5f:37:
10:a9:ff:f8:bd:34:11:82:9d:35:2c:1b:6c:28:85:a8:36:e5:
0d:8f:fc:52:aa:90:32:99:18:31:24:94:7e:bf:a5:e7:1b:00:
99:7f:e6:3f:e5:3d:2a:eb:c0:27:8a:6c:bf:22:7d:72:2c:06:
54:0e:22:7a:3f:c1:ca:e2:43:39:90:fc:bd:d2:83:44:e9:3b:
b8:74:79:f0:9f:e8:ff:fc:cb:66:c3:b3:39:d0:f5:a1:e8:3d:
59:1c:8d:f5:73:66:63:20:7d:dd:a4:db:bd:09:fc:f6:3f:f7:
3d:4c:93:b9:bc:0b:c4:2c:f5:ff:ed:a1:9b:ed:1a:7f:8c:b0:
c2:23:48:a7:2a:a2:91:31:0e:38:6f:84:0c:82:7c:87:2b:36:
97:55:67:2d:ff:ff:49:6e:6b:19:0b:20:16:e7:81:3c:6f:62:
a1:5e:25:b8:76:79:fc:de:67:1f:bd:73:6e:cf:05:b3:a7:e5:
85:9c:e6:99:39:68:9f:4f:0c:0d:be:3d:e1:2f:8c:e2:4b:f5:
27:08:17:80:94:dd:59:9b:ba:d6:f5:ef:7e:18:f6:e9:6a:77:
c8:43:f4:79:5d:d7:90:4d:59:ec:be:37:64:c2:ad:92:6e:f8:
61:78:a4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:53:36 2026 by rpki-client