Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/01b9RY2Fu1lHntnJT3pNtUlOxDQ.roa
File: 01b9RY2Fu1lHntnJT3pNtUlOxDQ.roa (raw, json)
Hash identifier: Vv31j2T6PEJDGj5zXrQrLiZ0MXVVZbGbZJb6hh8+CQQ=
Subject key identifier: D3:56:FD:45:8D:85:BB:59:47:9E:D9:C9:4F:7A:4D:B5:49:4E:C4:34
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 019F23686C051874BACA76AB3238E279CE41
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/01b9RY2Fu1lHntnJT3pNtUlOxDQ.roa
Signing time: Thu 02 Jul 2026 15:17:53 +0000
ROA not before: Thu 02 Jul 2026 15:17:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219438
IP address blocks: 191.44.36.0/24 maxlen: 24
191.44.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:6c:05:18:74:ba:ca:76:ab:32:38:e2:79:ce:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Jul 2 15:17:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d356fd458d85bb59479ed9c94f7a4db5494ec434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a7:1d:32:d6:80:3c:00:78:40:e4:8e:5e:49:
ea:8d:84:b8:09:4c:df:8b:a4:f9:9a:54:6a:37:02:
1d:ac:e4:b6:14:e1:55:58:33:0e:79:a4:db:fd:8e:
c8:0d:72:c3:6a:d4:c9:d1:ec:86:3b:db:ae:f1:0a:
19:19:37:ce:b6:f0:72:cb:9d:f5:81:e7:3f:7d:7a:
a4:f0:86:4d:65:09:a5:a3:9b:18:14:af:90:2f:30:
93:2f:35:21:22:2b:b6:ef:b2:e6:41:99:75:17:99:
fe:c7:55:b9:c4:d8:6b:20:b6:8e:ee:e4:4e:af:00:
dc:b7:a6:85:e7:0a:8d:4e:60:23:fd:7d:c1:b5:f4:
bc:3e:77:ed:0c:29:06:bf:20:87:59:0b:19:26:56:
4b:b8:4b:51:04:8d:42:db:35:49:d3:13:bd:3e:63:
51:69:e8:95:89:ce:9b:99:3d:6d:a7:87:00:1d:59:
9f:14:3e:f8:d1:64:77:25:92:90:27:d4:06:61:aa:
98:4d:61:19:ec:bb:d9:b1:81:b0:fd:67:fe:8e:25:
0b:c1:11:0a:04:f4:5d:0d:ab:67:dc:65:9f:f2:6b:
8f:cc:3e:55:a4:eb:28:e4:31:43:bc:4f:86:1f:e8:
80:30:43:7f:77:a9:08:ee:72:4e:72:03:b9:60:75:
fd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:56:FD:45:8D:85:BB:59:47:9E:D9:C9:4F:7A:4D:B5:49:4E:C4:34
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/01b9RY2Fu1lHntnJT3pNtUlOxDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.36.0/24
191.44.39.0/24
Signature Algorithm: sha256WithRSAEncryption
47:12:b0:cb:7a:e8:82:bb:f4:0b:09:de:67:1e:ac:09:d8:e3:
ed:96:aa:9a:12:73:3d:cc:62:d1:05:57:aa:37:8b:57:26:c8:
66:c2:42:33:77:98:e1:c3:fe:f2:c5:cd:3f:03:42:66:e5:0e:
10:ea:d6:08:b3:d9:41:eb:1f:d4:eb:49:89:54:50:17:a6:30:
e9:16:ac:10:ce:44:8a:b4:2f:fe:e8:19:ef:97:02:c4:22:f0:
7b:45:6f:8f:90:e5:0d:de:c6:32:d8:d4:74:49:0c:35:d3:59:
73:f1:09:70:20:7e:73:b7:12:0e:1c:cd:05:11:e7:fe:61:26:
24:96:ff:c3:81:a4:b2:5e:15:30:f4:58:48:d1:dc:6c:27:47:
90:9f:c9:17:fc:57:d3:bc:d0:b0:b4:ae:1a:52:ae:07:f7:19:
ca:85:96:f5:29:90:03:01:c0:75:fd:18:1e:56:c5:93:63:81:
97:25:98:74:7b:94:e2:88:2c:0a:d5:ac:52:90:7e:ef:a0:58:
81:c9:cb:5f:df:cf:63:33:57:9d:8a:4e:2d:20:65:b5:60:f2:
da:42:3f:6b:72:8b:ca:1a:24:8b:e2:64:e3:88:63:20:52:02:
ec:6c:04:10:79:96:f7:9d:49:69:cc:55:42:3b:94:10:6c:d1:
10:09:71:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:26:45 2026 by rpki-client