Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/v91kL514Tr0vC9OU_qq8iUX8Heg.roa
File: v91kL514Tr0vC9OU_qq8iUX8Heg.roa (raw, json)
Hash identifier: c/1WpstXsWe3Dr8EPEdmAs09m077kweRX8/CQbrJHoA=
Subject key identifier: BF:DD:64:2F:9D:78:4E:BD:2F:0B:D3:94:FE:AA:BC:89:45:FC:1D:E8
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019D76C0CEB2B4839A0D48F705BD625EAE9C
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/v91kL514Tr0vC9OU_qq8iUX8Heg.roa
Signing time: Fri 10 Apr 2026 09:37:20 +0000
ROA not before: Fri 10 Apr 2026 09:37:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55177
IP address blocks: 87.229.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Apr 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:76:c0:ce:b2:b4:83:9a:0d:48:f7:05:bd:62:5e:ae:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Apr 10 09:37:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bfdd642f9d784ebd2f0bd394feaabc8945fc1de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8e:e9:ed:cb:cb:0f:5d:2c:6f:98:2b:6a:c7:
a8:25:82:4d:99:4c:9c:65:de:5a:b2:63:57:81:6d:
51:77:f0:86:5e:e0:92:ed:4d:5a:f5:81:5e:99:0a:
f5:7f:0a:00:9b:5f:48:fb:d2:17:ae:f1:6c:f0:b0:
4b:81:94:93:cc:56:ad:97:1b:90:64:f0:11:3a:69:
62:1a:46:49:7d:4d:c4:c5:fd:0e:a3:f0:75:31:25:
07:e0:54:bb:57:2b:a6:6a:e4:03:8a:93:a8:1d:09:
37:84:4f:1e:59:dc:92:66:aa:aa:9c:af:b6:7e:14:
f3:43:98:19:19:0c:53:e6:e8:89:a5:90:66:60:2a:
01:0d:f7:d0:2b:d7:6f:26:9f:a8:97:1d:b6:3b:dd:
4a:13:aa:57:5e:e4:c5:b1:02:aa:69:c0:20:bf:4e:
49:91:27:ad:11:fa:76:48:42:1e:11:40:f7:3c:7c:
0a:66:af:ac:4a:02:10:69:3b:bb:66:86:94:47:13:
02:db:ba:01:56:48:fc:04:a5:6c:e2:20:fb:fa:aa:
e3:e8:6d:67:6a:1c:bd:fb:33:1c:27:85:a6:4f:fe:
53:db:6e:18:24:50:be:10:ed:45:38:23:ce:8a:45:
a2:00:21:12:c3:e0:61:71:eb:15:43:93:4c:21:2d:
f2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DD:64:2F:9D:78:4E:BD:2F:0B:D3:94:FE:AA:BC:89:45:FC:1D:E8
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/v91kL514Tr0vC9OU_qq8iUX8Heg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.8.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:a2:8c:c0:09:db:d8:f4:94:69:bc:5c:ab:13:ed:23:c7:7a:
87:57:d8:13:60:b3:a3:40:66:ba:42:b8:b1:7e:69:0a:7f:03:
e7:23:e4:de:f9:70:cc:e8:34:69:fe:8d:da:b9:6d:d4:64:f4:
d4:05:b0:2c:3d:51:88:d7:49:b4:f8:2c:ad:40:1d:ea:7d:04:
df:0b:eb:cc:07:3b:ee:fe:36:13:17:67:47:cd:d7:dc:86:61:
d7:d3:e0:c1:c0:28:e0:0b:13:0c:bc:a9:1f:1d:44:c0:00:03:
51:9a:0a:27:33:c6:6e:1d:c0:e4:b3:ea:7d:37:c6:f9:bf:b2:
09:13:66:69:47:d5:ba:39:cf:c9:6a:ff:6c:b1:03:a4:dd:5a:
b9:3d:99:9f:49:c4:2e:eb:fe:46:a7:83:e2:ad:be:1a:cc:08:
f8:4a:35:99:66:a4:5c:48:48:72:64:6e:14:9e:c5:35:b7:8c:
0a:44:e1:e8:9b:af:a4:8f:24:16:cf:8c:b1:05:87:c5:84:82:
0c:89:7b:2c:ec:53:91:cf:98:38:e8:e4:86:7c:b1:1a:e5:a3:
c5:8e:88:60:e2:40:ad:09:02:e5:ae:5a:98:f6:76:3b:83:92:
dd:38:8f:f6:55:bd:77:24:75:42:a3:db:4c:e9:14:c1:fe:48:
db:6d:08:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:23:31 2026 by rpki-client