Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/v3R0DtJMPZhzlajIduzXFhZoO_E.roa
File: v3R0DtJMPZhzlajIduzXFhZoO_E.roa (raw, json)
Hash identifier: Sl285/xqAo03/LCxxgIVKjlExnIU20Jr5a1QIY+kGH0=
Subject key identifier: BF:74:74:0E:D2:4C:3D:98:73:95:A8:C8:76:EC:D7:16:16:68:3B:F1
Certificate issuer: /CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307
Certificate serial: 019F2368422B3A1E6A39CFCDBDA58588E4FB
Authority key identifier: CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/v3R0DtJMPZhzlajIduzXFhZoO_E.roa
Signing time: Thu 02 Jul 2026 15:17:42 +0000
ROA not before: Thu 02 Jul 2026 15:17:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48241
IP address blocks: 91.210.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:42:2b:3a:1e:6a:39:cf:cd:bd:a5:85:88:e4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307
Validity
Not Before: Jul 2 15:17:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf74740ed24c3d987395a8c876ecd71616683bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:43:4a:a8:88:d6:aa:eb:0f:61:7d:63:7a:68:
2c:bd:50:e9:f2:0e:d0:3f:d4:12:37:90:91:bc:87:
da:66:51:4b:04:15:d9:ff:47:db:74:c9:0c:d2:33:
49:4d:17:0f:b6:c5:db:32:1e:d6:02:06:b7:38:5b:
c1:3f:ce:20:6f:c7:cd:d7:86:7f:d3:28:0a:79:82:
27:0d:27:c0:55:6e:4f:2c:47:7b:45:34:36:11:b7:
f3:ea:89:46:a7:3b:99:5c:30:0f:e6:5c:ec:ad:04:
bb:6f:d7:87:d0:3e:d0:f1:f8:a1:d3:06:dd:26:e7:
97:5b:bc:d7:38:6c:37:0c:38:16:29:bc:82:ad:96:
46:f0:52:6c:e8:37:eb:05:66:50:02:32:4a:82:a7:
c5:76:70:49:81:d1:e1:68:73:97:cb:8a:d9:df:db:
55:01:21:c3:fc:21:72:85:b8:db:49:c6:3b:ea:b2:
b2:ef:c1:a5:7a:16:2d:42:d5:6d:1e:d7:a3:d1:92:
41:5e:2d:95:bf:e3:d6:0d:dd:28:0e:72:34:a1:59:
2a:2c:b6:b0:b1:4f:ad:af:8a:75:dd:a7:b5:fd:e9:
26:2f:f4:7e:62:c9:18:7f:ca:92:ef:57:bf:a5:6e:
ed:39:33:0d:bd:28:36:39:89:89:f8:8f:f5:7c:23:
81:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:74:74:0E:D2:4C:3D:98:73:95:A8:C8:76:EC:D7:16:16:68:3B:F1
X509v3 Authority Key Identifier:
keyid:CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/v3R0DtJMPZhzlajIduzXFhZoO_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.132.0/22
Signature Algorithm: sha256WithRSAEncryption
27:32:fe:76:11:45:54:8e:81:58:59:d4:31:7e:e0:a0:07:65:
03:c9:38:a5:00:49:ed:0a:b0:ba:82:2b:58:bb:57:8f:c4:05:
f2:5a:70:87:0a:97:2e:74:48:1d:42:2b:bd:83:e5:25:75:e6:
5f:c6:45:68:ab:7f:35:14:d6:fd:a4:dd:7a:96:dc:e1:7f:5e:
92:cf:fb:64:e6:ea:19:82:ef:cd:b8:71:66:40:37:4d:de:ca:
16:68:72:af:b8:c1:57:5c:e9:da:f4:27:b4:45:93:44:4f:9a:
28:49:b3:a0:d7:f2:eb:54:2e:29:0c:af:21:f5:f0:12:91:b6:
8d:73:76:d6:f6:d3:bb:7d:73:53:1c:8c:99:ce:da:bc:d5:a9:
ec:5d:37:5b:f5:ff:f6:21:1f:b3:a4:9b:f2:7c:58:07:c0:44:
76:4c:bb:63:9d:7b:28:a9:fb:52:b5:0f:ec:88:6d:9c:35:30:
26:b0:f4:0b:f0:4f:c1:9b:7b:1b:40:b5:2c:d8:f0:4d:41:f4:
1e:1a:cf:b3:c8:40:24:83:a5:33:da:dc:17:51:39:dd:28:fb:
a1:21:67:1e:40:b7:72:6b:09:79:3c:23:66:50:b1:51:af:d5:
9f:bf:d9:ae:1b:15:46:0f:ac:cf:d5:98:3a:af:0b:2f:f0:cc:
33:65:cc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:44 2026 by rpki-client