Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/IrmRlXZkUU-WpNHDXk5UVzU9fbE.roa
File: IrmRlXZkUU-WpNHDXk5UVzU9fbE.roa (raw, json)
Hash identifier: Ys0IXZEm55UjwC+NVaugdT1snG6yPNB7JuUQ3nHsC00=
Subject key identifier: 22:B9:91:95:76:64:51:4F:96:A4:D1:C3:5E:4E:54:57:35:3D:7D:B1
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 01A00F43F85F75D3B8EE3399713EB7B170A4
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/IrmRlXZkUU-WpNHDXk5UVzU9fbE.roa
Signing time: Mon 17 Aug 2026 10:28:27 +0000
ROA not before: Mon 17 Aug 2026 10:28:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139659
IP address blocks: 91.208.236.0/24 maxlen: 24
91.208.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 02:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0f:43:f8:5f:75:d3:b8:ee:33:99:71:3e:b7:b1:70:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Aug 17 10:28:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22b991957664514f96a4d1c35e4e5457353d7db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:28:ea:b0:b7:36:bb:eb:48:04:55:b9:9a:f1:
6d:69:03:95:89:5e:40:40:99:33:a3:1c:14:c1:c8:
96:a4:d5:a0:1b:1b:66:9c:a2:d1:89:9d:99:ca:9a:
51:48:65:67:39:f7:d1:f3:4d:58:63:dd:f7:8a:39:
55:b5:91:b1:fe:6a:1a:20:1e:c8:3c:3a:e1:62:9f:
7c:f9:43:45:12:c5:d5:75:63:ea:dc:28:1d:33:b2:
29:98:cf:fa:62:5f:91:76:1f:e7:f1:b8:90:ee:2b:
2a:9d:39:20:b1:23:85:6a:20:ec:25:e9:78:97:d0:
1a:a5:f2:fc:0e:fe:c8:99:cf:63:81:70:a1:f1:0a:
d2:c1:9f:61:3c:93:a3:0a:0b:be:68:1c:68:2d:82:
ff:a4:5b:95:93:54:c4:e6:53:46:81:ae:aa:a7:a6:
3e:52:54:30:24:bc:34:1c:05:58:f9:3a:a1:10:82:
99:82:bd:15:68:32:c7:87:96:6b:79:bd:4a:33:a4:
9b:cf:26:40:33:76:14:77:97:98:0b:3e:01:9a:a9:
de:c0:ef:97:e3:dd:50:e3:58:f5:f8:b1:9b:48:69:
87:1a:ae:ca:53:cf:81:e1:85:16:07:7e:d2:26:20:
a7:34:df:3c:79:91:41:11:98:f9:07:eb:d0:24:9c:
a0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B9:91:95:76:64:51:4F:96:A4:D1:C3:5E:4E:54:57:35:3D:7D:B1
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/IrmRlXZkUU-WpNHDXk5UVzU9fbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.236.0/24
91.208.240.0/24
Signature Algorithm: sha256WithRSAEncryption
87:08:48:1b:f4:1c:59:e0:3b:fa:7d:8a:1b:06:f6:8b:83:7a:
3e:c9:ac:a8:06:74:fc:1c:26:81:4e:e5:5e:8b:2f:de:84:ea:
91:7e:07:ae:2f:77:34:04:a8:58:6c:df:18:80:76:56:82:41:
de:c7:55:39:ab:aa:2b:30:c1:95:a5:ec:1f:25:27:cd:81:74:
9e:ef:a6:de:fa:61:d7:d6:84:aa:04:ad:55:55:07:0b:09:a3:
1e:58:ed:c1:01:a7:f0:69:7a:a2:74:03:57:01:8e:5f:13:75:
27:a7:4a:be:9c:48:19:1e:fc:ae:48:38:2a:83:44:d7:98:d2:
33:79:a9:e0:10:d4:a2:c0:32:11:47:97:20:94:bb:96:de:56:
73:40:67:8c:1b:5a:c3:ba:71:50:c3:93:0b:f5:96:c6:4e:6b:
1f:d1:83:b4:55:60:4f:d3:0e:e2:8e:55:ff:de:40:77:04:90:
7c:db:88:57:7d:46:1b:5a:4b:71:f1:ef:85:3a:0c:b5:7c:9f:
dc:46:d0:f6:99:a4:a8:3a:59:7d:f2:57:96:b4:3b:a4:f0:3c:
8c:72:47:c2:54:ad:85:31:2c:2e:ad:ca:d8:b7:66:03:dd:30:
c7:7d:a5:e5:c1:ea:ef:10:1d:8b:35:89:32:37:45:2a:56:ae:
ca:14:82:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:10:03 2026 by rpki-client