Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/54cbX3-yOfJX4GZIWJiBOEs5WC4.roa
File: 54cbX3-yOfJX4GZIWJiBOEs5WC4.roa (raw, json)
Hash identifier: oBq1x8bGZfgJOoRJVnELWpxM6oiDHIA1YLfoBrdqQuY=
Subject key identifier: E7:87:1B:5F:7F:B2:39:F2:57:E0:66:48:58:98:81:38:4B:39:58:2E
Certificate issuer: /CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Certificate serial: 019FF9A16234552E929D6DB6A507FC60D45A
Authority key identifier: B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/54cbX3-yOfJX4GZIWJiBOEs5WC4.roa
Signing time: Thu 13 Aug 2026 05:38:51 +0000
ROA not before: Thu 13 Aug 2026 05:38:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202391
IP address blocks: 91.216.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:a1:62:34:55:2e:92:9d:6d:b6:a5:07:fc:60:d4:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Validity
Not Before: Aug 13 05:38:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7871b5f7fb239f257e06648589881384b39582e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b9:17:b1:68:2b:55:5f:f7:16:53:37:42:96:
af:a8:9a:c8:67:c0:92:02:ae:03:0b:98:d2:cc:06:
0c:de:01:2e:59:ad:06:ed:d8:40:f0:cd:d2:dd:40:
2c:76:b0:30:b6:68:bc:64:16:11:3c:6b:dd:5a:6f:
a3:e6:ee:cf:51:a6:b7:d8:70:94:23:e5:20:16:d3:
4c:e4:d2:18:05:5e:db:63:69:3e:ab:20:8d:95:aa:
cd:d3:8d:8f:86:3a:15:4d:e5:72:8e:e3:01:fd:37:
bc:73:e3:a6:bf:c8:4e:0c:a5:99:e4:80:d0:d3:fc:
80:93:e4:3b:38:d6:35:ef:72:b1:7a:43:a6:10:df:
87:86:ba:20:47:be:4a:f3:4e:63:65:69:75:7f:c5:
02:e6:96:3f:5a:d4:63:4d:82:df:b8:91:fa:b8:0f:
11:ef:c8:ff:e7:15:c3:0f:b9:49:8c:7e:5e:62:fc:
f6:b6:01:54:e9:8a:da:73:1b:82:eb:60:b3:40:58:
e0:1d:47:5e:49:0c:fc:4a:16:42:f3:6d:df:f2:a8:
91:89:b8:da:44:84:75:c9:2b:99:bf:07:5c:3e:83:
8e:03:38:2b:4f:0a:42:90:c9:bd:14:f2:81:af:de:
6c:bf:02:0d:6f:c9:39:3a:de:88:5b:f6:47:66:14:
66:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:87:1B:5F:7F:B2:39:F2:57:E0:66:48:58:98:81:38:4B:39:58:2E
X509v3 Authority Key Identifier:
keyid:B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/54cbX3-yOfJX4GZIWJiBOEs5WC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.71.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:a5:ff:97:a3:2f:58:dc:3d:ef:01:4e:98:31:cd:5c:a2:ad:
8f:5d:6e:87:49:94:fa:d4:71:ca:5b:da:71:53:74:69:87:0a:
e9:3e:b0:09:ea:6d:4d:9a:9c:89:18:bf:8d:61:c2:e5:92:a4:
9b:0c:b5:0b:52:34:fa:27:68:5a:6a:72:14:e0:96:db:3e:05:
7f:25:f5:e6:c3:b0:c8:a7:e2:7a:2f:f9:d3:a3:bb:ac:67:9b:
22:4c:ea:fa:1f:c5:75:ca:74:b6:8f:65:95:6f:e9:e6:f8:6a:
48:09:f7:2f:13:0c:a1:ea:c7:8b:10:8b:00:86:3b:5c:7a:6f:
3f:c7:e9:e9:15:ae:b3:b7:67:a3:83:44:4a:ef:7b:ac:30:5f:
33:cc:d8:e3:9e:3d:08:b5:ba:23:60:c2:71:59:15:80:1c:e8:
52:82:54:4f:d6:ab:93:2d:66:e4:d7:08:43:65:ad:e5:9b:1f:
a5:aa:e9:dd:64:94:fd:88:9c:29:bd:5e:f1:22:f5:78:4d:29:
cf:b7:ff:13:69:8c:e8:44:bd:de:63:8b:10:65:85:c6:47:af:
0f:01:b1:cd:0c:1a:a5:8f:8b:2f:49:4f:93:d0:4e:dc:ce:a6:
93:fc:b2:66:dd:0e:46:23:0a:9a:14:65:d2:1f:08:8a:77:ce:
3c:a8:c1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:03:13 2026 by rpki-client