Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/voGOvW0BRa27Yr9p1xeqy3udyvc.roa
File: voGOvW0BRa27Yr9p1xeqy3udyvc.roa (raw, json)
Hash identifier: JKI8fmA0jDEWhuhuTal1D06exvXzvzQH3NDd7ekumtI=
Subject key identifier: BE:81:8E:BD:6D:01:45:AD:BB:62:BF:69:D7:17:AA:CB:7B:9D:CA:F7
Certificate issuer: /CN=a9f347103ef349ad82f1b6ac43e76c0ffa38c2f8
Certificate serial: 019F2368B0F0EBE7147E8215A7649C80A1D5
Authority key identifier: A9:F3:47:10:3E:F3:49:AD:82:F1:B6:AC:43:E7:6C:0F:FA:38:C2:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfNHED7zSa2C8basQ-dsD_o4wvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/voGOvW0BRa27Yr9p1xeqy3udyvc.roa
Signing time: Thu 02 Jul 2026 15:18:11 +0000
ROA not before: Thu 02 Jul 2026 15:18:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6453
IP address blocks: 91.223.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfNHED7zSa2C8basQ-dsD_o4wvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 09:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b0:f0:eb:e7:14:7e:82:15:a7:64:9c:80:a1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9f347103ef349ad82f1b6ac43e76c0ffa38c2f8
Validity
Not Before: Jul 2 15:18:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be818ebd6d0145adbb62bf69d717aacb7b9dcaf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:94:4b:96:74:56:59:a0:6b:41:55:e6:4f:74:
05:2a:e8:61:fc:fc:4f:05:c5:02:5f:a6:81:4f:b8:
e1:ce:ca:48:9c:83:b2:eb:e3:1b:ee:d7:a4:cb:3d:
5e:a5:11:40:7a:1a:5f:78:86:49:9c:5d:ac:83:5d:
34:95:19:4c:09:ed:c3:a3:f0:07:a2:07:ee:7f:2e:
ad:09:cb:07:f6:2d:69:c7:d3:76:d2:4a:1d:b5:54:
94:9c:75:c6:c6:4e:e3:7d:de:16:2e:b0:cc:af:9d:
93:b5:4f:b4:46:af:7e:eb:47:58:e9:9a:20:c2:e6:
53:96:be:75:0f:d4:99:8f:8a:1d:e7:7f:a2:5d:6a:
36:47:53:6b:7c:b9:65:99:db:68:d8:ff:c0:5d:b8:
23:8f:be:b4:92:4c:68:87:ef:de:5a:c7:95:2c:c1:
6f:e2:db:94:bb:77:b0:2b:90:30:f2:ea:08:c8:db:
60:77:fa:ce:11:8d:e1:57:d9:41:2b:2d:66:23:36:
e2:4c:5c:4c:e9:d1:d2:eb:43:14:c8:1a:fc:92:d5:
3f:84:12:e8:97:9c:df:0d:c1:5f:59:96:90:c6:cb:
48:df:84:ac:56:ca:de:70:56:11:1b:7e:e6:30:13:
36:cc:3d:f2:e6:cf:bd:8d:ee:09:72:cd:a3:86:c1:
f0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:81:8E:BD:6D:01:45:AD:BB:62:BF:69:D7:17:AA:CB:7B:9D:CA:F7
X509v3 Authority Key Identifier:
keyid:A9:F3:47:10:3E:F3:49:AD:82:F1:B6:AC:43:E7:6C:0F:FA:38:C2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfNHED7zSa2C8basQ-dsD_o4wvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/voGOvW0BRa27Yr9p1xeqy3udyvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/qfNHED7zSa2C8basQ-dsD_o4wvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.85.0/24
Signature Algorithm: sha256WithRSAEncryption
49:67:08:72:b6:80:37:a9:be:9e:b7:90:a5:47:b4:68:b8:6a:
64:88:0c:01:a0:ac:3d:c5:53:0a:0b:77:0a:1f:6e:1f:52:14:
89:97:9f:94:1d:a4:66:6a:65:30:e6:c5:3b:4a:15:a4:c0:6d:
3e:03:54:0e:6d:f9:a1:1f:30:2e:f4:65:e1:c4:08:d3:cb:55:
d0:98:0a:9c:8a:ae:d6:cc:95:db:5f:18:43:ff:b1:31:94:3d:
c3:61:60:a4:32:61:73:7c:16:cf:1a:07:54:3e:b1:d0:be:d7:
35:23:65:84:a2:d5:b0:9a:04:1c:d7:e9:68:c2:c9:0b:05:a6:
67:5a:1b:9e:1b:ed:89:97:fc:2d:30:8a:40:2d:c8:51:1d:2d:
94:2f:43:af:e5:af:64:c2:2d:a0:fc:c6:00:c9:ce:90:08:ba:
20:55:a9:bc:3a:4d:98:2e:17:5f:b0:ce:fb:f6:24:fe:5c:4a:
b4:fd:c5:b6:4d:dc:dd:47:ba:72:33:d2:11:c2:35:73:28:d7:
f4:64:87:b5:4a:53:2d:bd:c5:01:37:2c:c8:92:f1:7d:31:04:
d5:c1:d9:56:df:73:e9:df:1b:f8:65:0c:c6:fc:1c:b9:a0:a8:
38:b3:b1:d3:82:86:4a:b4:d1:f1:9c:32:db:62:57:a1:12:05:
44:cd:49:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:56 2026 by rpki-client