Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/P_bdTkV7IZuzOClv_6ZvyP43Uho.roa
File: P_bdTkV7IZuzOClv_6ZvyP43Uho.roa (raw, json)
Hash identifier: lNcsKv1+gV/lLgtE9ucNZ9+OmqR8K2Sir1xcm0vQFHw=
Subject key identifier: 3F:F6:DD:4E:45:7B:21:9B:B3:38:29:6F:FF:A6:6F:C8:FE:37:52:1A
Certificate issuer: /CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307
Certificate serial: 019F23684872289443161ED71BD2AB9B87AD
Authority key identifier: CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/P_bdTkV7IZuzOClv_6ZvyP43Uho.roa
Signing time: Thu 02 Jul 2026 15:17:44 +0000
ROA not before: Thu 02 Jul 2026 15:17:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209938
IP address blocks: 91.210.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:48:72:28:94:43:16:1e:d7:1b:d2:ab:9b:87:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307
Validity
Not Before: Jul 2 15:17:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ff6dd4e457b219bb338296fffa66fc8fe37521a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:92:ef:2e:71:69:cb:00:a5:f1:72:2d:38:1e:
2e:f5:ca:e8:c3:bc:7e:8e:40:bc:d5:7c:c0:99:84:
b5:62:c8:03:58:44:74:c3:84:12:33:6f:73:7a:42:
d8:00:01:04:97:f0:ed:fc:62:25:21:0c:9f:cd:41:
9d:9c:94:c8:b7:f0:00:40:a6:1c:0b:b3:d3:8a:db:
5f:3f:6d:f1:89:be:fe:ac:87:d9:0f:0d:5a:3d:51:
44:21:d2:e8:3a:d7:10:fe:30:b2:f2:95:a0:34:db:
33:a5:55:e1:8f:45:ed:c8:83:b7:e1:83:ce:3a:74:
cb:6a:96:2d:72:43:c6:c3:3b:6f:da:c4:3c:40:5a:
e1:d0:10:3d:3c:50:10:98:81:de:03:5e:e6:8e:e3:
cd:e3:cc:57:1c:a2:24:32:57:8d:14:3d:b0:db:12:
0c:02:e8:7c:47:5d:47:cc:41:49:1a:a0:61:e3:30:
dc:a0:90:92:8b:25:ac:91:01:0c:40:b1:5f:38:e8:
fc:e4:8b:9f:2d:3e:9d:4e:37:8a:ce:33:05:61:14:
15:dc:0f:78:35:c5:6c:cf:87:55:8e:5a:49:a7:7b:
c0:17:38:c4:d3:f6:19:02:be:1b:24:10:ab:2d:38:
58:63:f5:bc:24:81:76:40:7a:d3:82:77:77:0b:8f:
23:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F6:DD:4E:45:7B:21:9B:B3:38:29:6F:FF:A6:6F:C8:FE:37:52:1A
X509v3 Authority Key Identifier:
keyid:CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/P_bdTkV7IZuzOClv_6ZvyP43Uho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.132.0/22
Signature Algorithm: sha256WithRSAEncryption
14:30:f0:6b:52:9e:e1:7d:d1:56:57:30:90:a7:ec:2b:3d:4c:
35:09:d9:79:18:0a:e6:71:17:9d:8b:12:da:b1:96:f5:7c:04:
2e:4f:88:9a:cd:96:1d:da:ed:73:f7:75:6f:3e:59:04:bb:11:
e1:b7:63:8c:f9:06:32:f8:18:87:3d:61:56:b3:22:fe:95:61:
fc:16:a1:9c:b4:9a:e2:e6:4f:1d:0b:f8:fe:27:c9:89:c6:76:
51:fe:fe:b4:18:83:a3:ed:92:93:55:27:11:b0:73:f4:cc:83:
3c:f3:46:a3:d7:82:14:ec:6f:b6:58:3b:80:a2:e6:f2:f7:86:
5c:2b:1f:2d:41:56:11:8d:58:01:60:e5:04:f8:7f:41:28:43:
0e:81:0b:8f:59:94:7c:13:7b:c8:e9:a1:76:79:4b:e6:25:5a:
d9:04:99:c7:73:1f:97:05:9c:f0:33:4c:42:7b:d9:d2:ca:bb:
0c:8b:b7:17:57:f6:b6:fb:89:eb:9b:dd:74:1b:af:03:23:21:
f4:7a:c7:84:cd:5c:92:bf:6a:2b:66:8d:8d:76:b1:f3:89:46:
e4:d3:b1:61:54:84:4c:5f:cb:24:71:66:14:07:4d:cb:f0:be:
47:18:d7:57:ad:64:81:8c:0b:9f:2c:1b:20:12:1b:87:b8:ad:
a9:44:52:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:55 2026 by rpki-client