Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/V7PWzU2t3vkVAV89dEpwUD3smfA.roa
File: V7PWzU2t3vkVAV89dEpwUD3smfA.roa (raw, json)
Hash identifier: NqsbYJcQ3xvsOoac8r1+2QIWje6UGU60aNdH7WHDSQo=
Subject key identifier: 57:B3:D6:CD:4D:AD:DE:F9:15:01:5F:3D:74:4A:70:50:3D:EC:99:F0
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 019E454D56732C72C8253E3A3908541DB87B
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/V7PWzU2t3vkVAV89dEpwUD3smfA.roa
Signing time: Wed 20 May 2026 12:12:36 +0000
ROA not before: Wed 20 May 2026 12:12:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 91.219.17.0/24 maxlen: 24
91.219.18.0/23 maxlen: 23
91.232.182.0/24 maxlen: 24
91.232.184.0/24 maxlen: 24
91.232.185.0/24 maxlen: 24
91.233.192.0/24 maxlen: 24
109.166.36.0/22 maxlen: 24
151.248.68.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:45:4d:56:73:2c:72:c8:25:3e:3a:39:08:54:1d:b8:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: May 20 12:12:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57b3d6cd4daddef915015f3d744a70503dec99f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:60:27:88:82:a3:2e:8c:b6:50:f2:af:8d:ac:
3b:5c:90:f0:8e:9b:5f:f6:6d:bf:5a:9e:75:d7:1f:
78:1c:f5:ba:0c:a3:04:70:c6:34:b5:f6:66:5e:a5:
9a:a7:9f:68:26:5f:d7:fe:ca:23:69:c0:20:f3:ad:
dc:4d:a9:1e:00:45:b3:97:ac:f2:56:4c:50:10:1d:
ae:bc:2d:c4:80:a3:11:11:5d:50:bc:b9:09:13:0f:
35:8f:78:85:85:84:46:a8:27:be:1e:42:c5:9e:ed:
18:0c:69:18:ee:73:57:b2:8c:32:c7:bc:57:b0:a1:
dd:3f:8f:86:51:b7:21:69:54:c9:9c:58:fa:76:79:
86:6d:ad:e5:63:1a:87:99:08:a3:74:a3:1d:cd:c4:
c5:fe:09:eb:50:74:ae:dd:4e:36:f2:eb:84:ee:2a:
e0:9b:9b:52:0b:ab:70:f5:e4:8a:97:1a:4b:03:67:
11:e6:dd:82:a4:00:19:c7:9d:d5:61:e4:98:31:95:
4a:0d:a9:23:7b:d5:b0:bd:53:df:31:76:e3:77:5c:
8d:9d:41:63:61:ac:98:4f:38:09:3f:b8:55:27:2a:
65:26:92:26:ef:1d:5e:ec:73:c2:37:16:a5:4c:a0:
9d:57:0b:d8:75:b6:dd:a5:12:ed:19:26:58:1d:3b:
7e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B3:D6:CD:4D:AD:DE:F9:15:01:5F:3D:74:4A:70:50:3D:EC:99:F0
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/V7PWzU2t3vkVAV89dEpwUD3smfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.17.0-91.219.19.255
91.232.182.0/24
91.232.184.0/23
91.233.192.0/24
109.166.36.0/22
151.248.68.0/23
Signature Algorithm: sha256WithRSAEncryption
09:35:2e:35:31:40:05:f0:6d:9f:a1:ef:1c:1f:9e:ab:06:81:
a3:5a:34:2e:7c:82:f8:63:2e:f0:0b:51:47:48:83:0e:51:1b:
fa:69:c2:2c:1c:b0:b7:c7:62:be:8b:ad:fa:5f:28:08:40:e6:
2c:32:74:c8:2b:f9:04:af:df:86:b4:40:7d:b7:f1:a3:f6:5a:
58:62:5b:26:bc:57:92:14:07:77:2e:bf:87:76:0e:15:27:96:
09:c8:0c:c2:33:b9:00:0c:e2:a1:e2:73:ad:e2:eb:17:69:ca:
6a:a3:35:a8:7d:70:a2:c3:ea:b1:39:6c:2c:72:da:e4:68:db:
8e:05:7c:8b:e9:69:c4:f1:6b:f5:31:a7:a0:c9:c0:dd:4b:99:
0c:4c:a2:c1:64:af:a3:e0:a7:14:4b:fc:a8:af:1a:05:48:61:
70:e3:c6:47:6b:97:15:a2:bf:1b:e9:c6:9c:0f:0e:64:ff:a6:
28:50:f6:f6:55:fb:c4:76:f5:1a:b3:78:93:d6:82:b2:75:24:
d8:de:14:86:8b:5b:e2:70:92:65:f8:4e:23:7b:13:85:36:9f:
aa:9d:ce:3f:76:c6:0b:35:bd:a5:47:9f:95:8e:85:71:c4:44:
3a:43:f1:d3:49:20:b6:d1:8a:a4:17:b9:64:a2:43:87:8c:fe:
51:07:6d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:36:05 2026 by rpki-client