Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/wktP20h7fSODZANVGDm7ZiO-Vcc.roa
File: wktP20h7fSODZANVGDm7ZiO-Vcc.roa (raw, json)
Hash identifier: 1JRN1Veu3nmM2MIXfwmspbtUX8SWnNZ8r9nc1tacNI8=
Subject key identifier: C2:4B:4F:DB:48:7B:7D:23:83:64:03:55:18:39:BB:66:23:BE:55:C7
Certificate issuer: /CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Certificate serial: 019F2368E8013B51CB2B4D2C594B91679487
Authority key identifier: F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/wktP20h7fSODZANVGDm7ZiO-Vcc.roa
Signing time: Thu 02 Jul 2026 15:18:25 +0000
ROA not before: Thu 02 Jul 2026 15:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29372
IP address blocks: 91.68.247.0/24 maxlen: 24
91.68.248.0/24 maxlen: 24
91.68.249.0/24 maxlen: 24
91.68.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e8:01:3b:51:cb:2b:4d:2c:59:4b:91:67:94:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Validity
Not Before: Jul 2 15:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c24b4fdb487b7d23836403551839bb6623be55c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:90:c6:15:e7:06:1b:6b:43:78:00:c7:19:9d:
4c:37:ed:56:2b:ea:7d:91:35:11:75:a1:26:17:c3:
9f:f9:09:a7:df:4c:30:ed:d9:33:f6:2f:d3:f5:3b:
84:20:56:de:4e:ff:37:a7:ae:52:00:b8:63:fb:b5:
1f:b3:92:f5:b3:9b:61:98:82:03:dd:7c:e2:a0:56:
11:ac:83:54:1c:7d:eb:22:81:1a:49:45:7f:c3:6a:
d7:4b:2a:bd:20:80:1d:f6:98:2f:e8:b4:c5:a7:40:
77:3f:dc:38:92:df:82:03:34:91:f8:ab:fc:de:ba:
69:9d:6c:7e:b6:9d:c2:0d:4f:80:25:1b:31:b0:12:
95:ba:ed:a6:81:99:4d:1d:fa:81:5b:07:e2:38:a1:
fd:43:95:e0:c7:78:56:75:c2:95:6f:16:f9:72:7a:
76:39:28:ed:b5:a2:dd:b1:95:af:a0:dc:e5:7d:4c:
9f:9c:91:bb:3c:77:b9:3e:8f:a5:dc:fb:55:64:24:
91:7c:ed:c1:be:ad:a8:c3:37:7a:a1:4b:4c:05:da:
56:14:c3:39:27:57:85:7a:fd:1b:5b:e0:49:50:1f:
dc:21:b4:6f:2c:49:56:e5:fc:a7:78:c0:19:6b:78:
b4:a0:e1:75:53:f9:3f:4f:5c:fd:1e:7a:5c:7d:5d:
f9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4B:4F:DB:48:7B:7D:23:83:64:03:55:18:39:BB:66:23:BE:55:C7
X509v3 Authority Key Identifier:
keyid:F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/wktP20h7fSODZANVGDm7ZiO-Vcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.68.247.0-91.68.250.255
Signature Algorithm: sha256WithRSAEncryption
1c:13:4a:bd:32:ff:e1:79:19:18:97:40:a3:d0:f0:ec:78:85:
c9:68:5e:17:7c:1f:09:b8:0c:93:e2:2d:6a:c3:41:32:b3:00:
75:32:cd:6d:7b:41:94:1c:76:be:44:f9:4a:61:e2:c2:4f:5f:
98:f2:d5:56:11:6b:b9:c1:72:90:2f:0f:78:ee:af:aa:be:30:
a5:bc:1e:00:0e:28:14:4a:7f:4e:5d:ce:fd:26:97:f4:f9:fe:
d5:a3:bc:9d:ef:ec:98:94:d6:97:53:eb:cc:8e:fc:94:0b:7e:
54:50:4a:86:91:5c:8f:b3:9f:67:0d:0f:2b:39:31:3b:0f:17:
f8:92:fb:29:20:a0:be:cc:cc:a5:a8:cb:26:dd:0f:35:79:4d:
74:a7:5d:64:aa:3d:b8:df:d9:03:c8:ef:f1:bb:8e:3d:63:3a:
84:e6:b2:5a:e9:18:69:5d:1d:4f:93:41:6a:88:35:9d:79:e7:
b5:30:fa:55:cf:e1:48:e7:2d:79:f7:88:18:43:eb:88:47:87:
85:7f:23:72:69:de:f3:ba:2e:5f:7c:cb:d7:41:60:99:e4:fa:
34:bf:18:8a:6b:05:a2:d7:26:b9:b2:49:fd:3f:ef:c6:e1:c1:
ad:d2:4f:f7:4b:a0:08:88:6e:a0:9f:55:a6:b1:d6:2a:76:ae:
9f:5f:44:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:56:35 2026 by rpki-client