Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/7T91iIuINJaK7q9-RmGAoagWnZI.roa
File: 7T91iIuINJaK7q9-RmGAoagWnZI.roa (raw, json)
Hash identifier: cUvWnJUjFFXwtQW08/PivirYP2f40S5Y+aQ8YgIyzUQ=
Subject key identifier: ED:3F:75:88:8B:88:34:96:8A:EE:AF:7E:46:61:80:A1:A8:16:9D:92
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019CDE3C2C6B1C0B1074E747D8EC54EE187D
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/7T91iIuINJaK7q9-RmGAoagWnZI.roa
Signing time: Wed 11 Mar 2026 18:50:11 +0000
ROA not before: Wed 11 Mar 2026 18:50:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42268
IP address blocks: 170.168.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 20:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:de:3c:2c:6b:1c:0b:10:74:e7:47:d8:ec:54:ee:18:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Mar 11 18:50:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed3f75888b8834968aeeaf7e466180a1a8169d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:af:8c:d4:02:70:44:85:30:82:a8:e5:8e:f8:
b8:1a:e2:1b:f7:9e:68:b9:40:a9:35:81:90:24:0f:
63:fb:0f:37:48:42:4a:71:67:70:7e:2b:ca:07:88:
d9:ac:97:b5:e8:b5:9b:1d:ac:99:1f:92:a3:25:ea:
43:e1:88:ac:f1:08:9d:f0:e5:ae:58:2a:81:34:e7:
df:a2:22:9e:3e:bd:f5:62:ea:b2:8c:fd:c0:5e:83:
ce:29:da:5d:02:42:b8:17:f5:f1:09:a8:f0:80:1e:
d7:ea:12:2e:de:21:ba:76:da:96:4c:5c:27:55:40:
b7:26:dd:2e:51:81:68:cf:5f:bc:9e:f7:c9:e3:c0:
01:c8:ac:61:8d:8b:1c:f0:47:4e:6c:e0:0e:c8:5d:
ca:94:ed:e0:3c:3c:2a:31:98:e7:71:4f:bd:9e:5d:
66:1e:bf:05:13:19:b2:e6:ab:80:23:5e:d9:2b:17:
cf:01:f6:78:c7:63:7e:3d:36:b2:8e:b1:c6:1d:74:
27:2d:32:40:44:0c:90:86:42:f8:54:c8:19:da:ec:
ff:bd:b5:5b:a5:82:1b:dd:13:bb:60:b6:a4:42:4f:
71:8d:7f:c0:e6:9c:4f:1f:e8:94:17:2f:07:e7:80:
6a:40:5b:74:de:db:87:bd:15:aa:1b:48:83:4a:3f:
fb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3F:75:88:8B:88:34:96:8A:EE:AF:7E:46:61:80:A1:A8:16:9D:92
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/7T91iIuINJaK7q9-RmGAoagWnZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.168.47.0/24
Signature Algorithm: sha256WithRSAEncryption
15:df:d4:05:40:fc:a7:23:00:73:d0:98:91:f9:98:1c:33:29:
05:3c:60:5d:91:fc:a8:33:9c:86:56:9c:a7:39:6e:29:e4:26:
f6:e5:2c:13:bf:80:db:52:0a:6b:a1:1c:b8:34:19:65:ff:85:
23:f8:7d:ae:20:2c:c9:3d:84:e0:9d:65:91:82:af:c5:59:e6:
ca:9c:98:91:8a:68:79:64:05:a8:5f:48:89:b0:d8:82:b9:c2:
41:41:14:72:71:3e:d8:cf:69:fc:c2:7c:f2:99:6e:ab:91:a6:
dd:84:2a:13:06:bd:6d:05:ed:6f:b5:0f:6d:4d:18:67:05:ff:
c3:b0:b7:e9:3b:bd:b7:96:cd:fc:a3:dc:35:cf:77:c6:be:d3:
48:4f:18:fd:b5:e7:47:6c:5f:cc:67:a2:99:57:84:9a:90:88:
f8:ad:57:93:65:87:e8:ef:69:34:0d:86:ad:59:f9:a8:93:4e:
8e:30:3e:70:92:92:70:99:bf:0e:aa:5c:f3:29:70:b1:67:de:
6a:47:8e:9e:8b:55:02:c5:e2:6f:64:72:00:93:75:d9:e0:a5:
17:f5:2d:89:49:af:77:de:9c:98:22:f3:5b:44:4c:3b:57:cc:
f0:56:47:ca:2e:fa:d7:f6:fb:5f:f8:99:d7:90:ca:2a:cf:bb:
51:dc:94:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 01:52:38 2026 by rpki-client