Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/K2GWtLYMAohjVuHS9DpG0ijtxy0.roa
File: K2GWtLYMAohjVuHS9DpG0ijtxy0.roa (raw, json)
Hash identifier: Pz8nYPaBGF6TCKGobR6JMsE+6JQiMr6Srm1o6o74t3E=
Subject key identifier: 2B:61:96:B4:B6:0C:02:88:63:56:E1:D2:F4:3A:46:D2:28:ED:C7:2D
Certificate issuer: /CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Certificate serial: 019F2368EBDBBD99924A1EE43B98965C3E7F
Authority key identifier: F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/K2GWtLYMAohjVuHS9DpG0ijtxy0.roa
Signing time: Thu 02 Jul 2026 15:18:26 +0000
ROA not before: Thu 02 Jul 2026 15:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41334
IP address blocks: 91.88.0.0/16 maxlen: 16
2a00:d780::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:eb:db:bd:99:92:4a:1e:e4:3b:98:96:5c:3e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Validity
Not Before: Jul 2 15:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b6196b4b60c02886356e1d2f43a46d228edc72d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6b:4a:a6:dc:38:29:af:fb:89:cd:f1:65:1e:
9d:e1:04:84:77:0e:c4:46:79:39:d2:ac:17:99:6b:
04:12:c2:02:a3:4e:26:86:0e:66:71:2d:11:1a:ad:
eb:a2:a0:21:ab:06:d6:18:2a:77:ce:51:61:e2:3e:
34:5d:6c:c6:1a:89:42:5b:bf:1b:1f:76:a9:71:5d:
e1:a7:08:6c:c8:f0:4f:bd:f4:84:c4:24:b8:dd:11:
3b:6f:80:83:27:8e:2f:1d:a7:9f:62:a8:23:8b:30:
c6:3a:9a:9b:db:dc:31:19:71:94:a5:1d:0d:bd:b6:
58:34:98:bf:60:c7:4c:55:4e:b7:c9:f1:83:6e:20:
f4:a2:93:40:97:34:7a:4e:78:77:c8:45:8a:d1:d6:
74:ea:fe:7c:b2:64:f4:c5:e1:78:33:60:22:1a:e2:
73:65:94:31:ee:79:29:a7:18:dc:4a:86:ba:c5:aa:
c6:e9:c1:2d:e5:9e:a2:da:d7:4a:59:a1:8b:a4:13:
39:a5:de:05:cf:5d:2a:fe:15:50:e7:b8:61:93:7a:
d0:1a:79:22:3c:f6:b2:25:2c:07:f7:4c:10:ae:f7:
7f:37:79:b7:d6:45:89:16:bf:b0:e7:7d:e1:6d:42:
2c:d5:aa:3d:f4:ae:7b:32:24:17:d7:39:4b:62:84:
d0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:61:96:B4:B6:0C:02:88:63:56:E1:D2:F4:3A:46:D2:28:ED:C7:2D
X509v3 Authority Key Identifier:
keyid:F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/K2GWtLYMAohjVuHS9DpG0ijtxy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.88.0.0/16
IPv6:
2a00:d780::/32
Signature Algorithm: sha256WithRSAEncryption
37:81:d1:3c:e8:b3:ad:9f:1e:2c:d6:d1:59:3a:75:5e:b0:8f:
6a:52:bc:82:f7:e1:7f:56:d8:cc:43:19:6f:13:1c:fb:ba:e8:
16:b5:56:c9:8d:ba:7c:4f:39:93:41:22:52:b8:f2:fe:c7:24:
8e:e6:2d:d7:26:93:fa:12:2d:ec:5f:c4:7e:44:60:7a:52:e2:
2d:3a:d7:57:5a:a0:82:02:ec:46:20:fe:e9:2a:bf:a9:d1:27:
d3:da:6d:d1:11:11:93:94:5d:20:44:e2:53:34:4e:f4:1e:d5:
4e:56:d4:5b:a3:a3:79:0f:19:14:13:38:8a:84:62:d0:0f:d9:
0b:59:72:bc:47:d2:68:f5:45:52:21:97:df:17:1a:4f:d8:9c:
6e:1d:49:64:5d:ce:88:d5:0d:f5:b6:c2:0b:3d:a5:90:db:27:
a7:12:f0:d9:7d:a4:7b:90:7b:f7:30:c7:63:ff:c4:59:33:46:
42:ca:95:cd:45:96:7c:05:88:c7:7b:53:f8:a0:7e:a9:c3:87:
67:8c:29:41:c1:30:81:81:01:fe:db:b8:0f:85:31:46:fe:5f:
b7:49:00:e0:64:22:d5:4e:1a:39:d7:89:43:32:6d:1a:6d:2b:
19:43:f0:05:84:5e:19:66:ba:f0:aa:08:03:80:69:c2:cb:95:
79:78:8f:72
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:57:39 2026 by rpki-client