Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/CoH26efvvQb9CtXEwy73pJ0fJJI.roa
File: CoH26efvvQb9CtXEwy73pJ0fJJI.roa (raw, json)
Hash identifier: 6ciqJjlwFfT1EVqQe/7eMGMa7V2q24Kz+M01wUj4Q+I=
Subject key identifier: 0A:81:F6:E9:E7:EF:BD:06:FD:0A:D5:C4:C3:2E:F7:A4:9D:1F:24:92
Certificate issuer: /CN=ac41130d77d0f6822df6dc71f569aaff47f672de
Certificate serial: 01A139554A23C8B41FDBF084F25B771EE9D0
Authority key identifier: AC:41:13:0D:77:D0:F6:82:2D:F6:DC:71:F5:69:AA:FF:47:F6:72:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rEETDXfQ9oIt9txx9Wmq_0f2ct4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/CoH26efvvQb9CtXEwy73pJ0fJJI.roa
Signing time: Wed 14 Oct 2026 07:34:13 +0000
ROA not before: Wed 14 Oct 2026 07:34:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219466
IP address blocks: 91.199.19.0/24 maxlen: 24
2a07:dcc0::/29 maxlen: 29
2a07:dcc4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/rEETDXfQ9oIt9txx9Wmq_0f2ct4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/rEETDXfQ9oIt9txx9Wmq_0f2ct4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rEETDXfQ9oIt9txx9Wmq_0f2ct4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 13:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:55:4a:23:c8:b4:1f:db:f0:84:f2:5b:77:1e:e9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac41130d77d0f6822df6dc71f569aaff47f672de
Validity
Not Before: Oct 14 07:34:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a81f6e9e7efbd06fd0ad5c4c32ef7a49d1f2492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:84:7a:46:2b:1d:d9:8a:b0:e4:ff:e8:5f:c5:
84:9e:33:3a:ea:7b:99:3b:62:e9:07:a4:7a:02:bb:
37:60:b4:1e:97:4a:e5:2c:b8:08:53:4d:17:a4:9b:
ec:38:2c:e1:ed:18:a5:93:3f:6d:b9:cd:65:b1:6d:
80:9e:6e:37:e6:be:de:26:73:af:05:69:42:6d:98:
d6:14:aa:82:f5:db:07:e2:76:eb:76:9a:8c:7c:3c:
3a:00:6f:ca:cc:57:79:e0:93:3d:b1:ee:71:07:ac:
2f:0d:02:e1:aa:ed:e7:8c:d8:03:27:d5:86:15:af:
96:7f:c3:44:b4:4c:8b:30:a8:eb:ff:8c:41:b7:a0:
64:22:31:93:9a:3d:e0:a0:4f:cf:3f:c4:2d:6b:85:
9d:78:72:84:6c:5a:ac:55:e4:73:5f:ca:2b:84:dc:
2b:c4:2c:85:6f:5b:0f:36:ec:d0:66:a3:14:36:99:
ec:83:0f:45:03:3a:b6:7b:95:39:47:67:eb:31:2d:
62:89:e3:e4:ba:d6:4f:50:8d:42:67:5d:3c:b7:49:
08:6b:95:57:c2:df:6b:72:c8:0e:c6:7a:2d:9b:a2:
52:a4:98:0c:cf:39:69:7f:c4:00:9c:b2:bb:be:fa:
a0:47:00:8e:07:83:dd:ee:cf:5e:11:70:99:11:b9:
26:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:81:F6:E9:E7:EF:BD:06:FD:0A:D5:C4:C3:2E:F7:A4:9D:1F:24:92
X509v3 Authority Key Identifier:
keyid:AC:41:13:0D:77:D0:F6:82:2D:F6:DC:71:F5:69:AA:FF:47:F6:72:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rEETDXfQ9oIt9txx9Wmq_0f2ct4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/CoH26efvvQb9CtXEwy73pJ0fJJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/rEETDXfQ9oIt9txx9Wmq_0f2ct4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.19.0/24
IPv6:
2a07:dcc0::/29
Signature Algorithm: sha256WithRSAEncryption
83:31:65:5d:2b:0b:1b:68:d9:0c:02:b6:93:98:f2:cf:e5:9d:
5d:1f:b7:64:d4:d0:6a:2c:fa:53:1e:b4:8f:fe:44:90:fd:a7:
46:fc:b8:ab:58:76:96:bb:83:bf:92:65:dc:de:57:fb:e4:04:
76:d5:8a:f7:12:8a:e5:c7:b8:bd:8f:4b:93:29:8c:1d:b9:64:
34:56:b4:7d:16:a3:be:8b:46:b3:a0:60:a7:62:1a:37:82:b1:
1b:a4:0b:5e:ff:f8:14:f9:0f:d5:02:8c:a5:f0:a9:7d:13:b4:
7c:74:b5:59:13:91:2e:e7:a0:e2:8a:26:40:f3:f2:e5:eb:85:
0c:96:1c:da:f3:f3:70:83:44:2f:c4:9c:31:9b:9c:4b:4e:db:
41:ba:3e:dc:ad:a5:c4:65:9b:6d:60:c4:a4:80:d7:95:7e:b4:
72:15:f6:c3:87:b1:66:cf:8a:6f:6a:d4:b1:e1:71:35:fe:5f:
02:4e:37:9f:46:d1:42:84:d5:b0:34:6b:9b:fc:00:e2:b7:7f:
82:c7:48:54:13:fc:b6:22:35:ae:cb:a6:d0:02:13:d3:7e:60:
03:5e:77:49:c6:56:a4:fa:45:4c:2a:8b:57:57:58:86:d4:61:
44:d6:85:a1:c8:ce:1b:8f:20:70:55:9f:c1:7a:8a:fd:2f:e3:
9c:b3:04:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 21:58:08 2026 by rpki-client