Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/m84qFoVIKuq1QfVrwA-bqARbzVc.roa
File: m84qFoVIKuq1QfVrwA-bqARbzVc.roa (raw, json)
Hash identifier: z7G8j3uWWxP/wYgcFiobvZJyK5kPjzvpMVaWwIxiT4U=
Subject key identifier: 9B:CE:2A:16:85:48:2A:EA:B5:41:F5:6B:C0:0F:9B:A8:04:5B:CD:57
Certificate issuer: /CN=91cbd4dee9400991784a22fb4f42b2a72e5e30f2
Certificate serial: 019F2368C440AC1E6635410B8F4C0EE14F2B
Authority key identifier: 91:CB:D4:DE:E9:40:09:91:78:4A:22:FB:4F:42:B2:A7:2E:5E:30:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcvU3ulACZF4SiL7T0Kypy5eMPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/m84qFoVIKuq1QfVrwA-bqARbzVc.roa
Signing time: Thu 02 Jul 2026 15:18:16 +0000
ROA not before: Thu 02 Jul 2026 15:18:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1299
IP address blocks: 94.127.58.0/24 maxlen: 24
94.127.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcvU3ulACZF4SiL7T0Kypy5eMPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c4:40:ac:1e:66:35:41:0b:8f:4c:0e:e1:4f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91cbd4dee9400991784a22fb4f42b2a72e5e30f2
Validity
Not Before: Jul 2 15:18:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9bce2a1685482aeab541f56bc00f9ba8045bcd57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2e:3c:9f:35:fe:29:b4:b1:da:c0:71:51:dc:
92:8d:4a:ef:75:3b:c1:43:72:27:49:9c:7c:b5:ae:
89:25:b4:f9:84:8d:11:39:ed:26:c3:47:73:ae:cb:
88:a6:a2:d4:44:fd:5e:ed:2f:75:1c:4e:a7:7a:f7:
6c:ae:e7:5f:d7:c0:74:49:a6:f8:6d:b1:4d:07:fa:
56:e4:a0:fe:e5:6a:6f:27:e3:20:0c:16:59:a3:15:
cd:03:17:82:c8:36:a9:91:d9:ec:4d:bc:1e:6e:5a:
51:0e:44:8f:e0:6f:a6:6b:d4:82:59:5c:bf:f4:34:
a7:29:13:5a:4b:e0:e9:77:0d:e7:0b:74:3b:b5:e3:
3e:11:ff:bf:2c:55:52:7d:45:a4:96:d9:0d:3d:1c:
1c:a4:fc:18:04:1d:5f:38:65:1d:51:e0:13:44:a7:
db:59:f0:81:23:95:2d:77:50:23:96:b7:5c:01:26:
b5:62:e3:ff:a1:6d:4b:f5:c8:db:bb:1a:3f:f6:7f:
44:06:c4:59:0e:72:cf:da:b4:79:77:c5:49:9d:71:
06:c5:94:70:39:cf:84:d4:4e:01:41:c5:12:c9:98:
1f:b8:38:25:1b:1a:e9:3f:31:ec:06:7a:c4:c6:a4:
bd:84:cc:fa:0f:af:66:70:fc:77:98:96:7e:86:96:
99:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CE:2A:16:85:48:2A:EA:B5:41:F5:6B:C0:0F:9B:A8:04:5B:CD:57
X509v3 Authority Key Identifier:
keyid:91:CB:D4:DE:E9:40:09:91:78:4A:22:FB:4F:42:B2:A7:2E:5E:30:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcvU3ulACZF4SiL7T0Kypy5eMPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/m84qFoVIKuq1QfVrwA-bqARbzVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.127.58.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:d7:af:d2:39:99:2c:83:e9:cc:3d:06:77:e8:29:40:fe:6d:
37:e3:13:b4:16:45:74:1d:ca:f9:e8:51:26:2f:c3:d5:97:44:
fb:0d:96:ab:09:f4:fc:a7:27:f2:4f:b4:34:14:7d:6c:b6:7c:
01:8a:00:71:23:63:02:82:c6:d2:a7:6b:4b:09:fc:5c:4c:43:
db:ce:3d:4e:11:34:d0:c8:75:07:b3:3d:c9:a5:03:4a:e6:4b:
24:07:01:b5:3a:b8:e3:0b:08:6c:c4:9d:cb:65:8a:15:89:dd:
f5:69:58:25:7e:9d:87:e4:bd:eb:54:22:08:d8:0f:95:91:7c:
3e:c1:37:a0:b6:58:a8:f7:1b:e3:a7:2a:c1:64:22:f8:ca:b1:
4b:80:46:1b:a4:9a:6a:8a:50:4a:d4:46:c0:66:e7:d7:01:cd:
fd:6f:6b:68:fa:e7:6b:ee:66:4a:fc:b7:15:10:ee:72:97:e8:
64:93:cf:38:c7:64:6a:bf:2b:e0:89:cb:38:bc:66:2c:23:14:
a9:c7:25:b8:73:43:26:9b:db:10:ab:e7:f3:74:fb:d8:a9:5d:
d2:18:37:64:3c:8f:49:59:bd:55:32:17:83:88:71:77:76:d8:
ac:71:e8:0d:82:32:8e:81:4b:4f:aa:98:71:2c:ff:1a:e9:6b:
98:90:af:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:02:49 2026 by rpki-client