Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/1-VG2zZYo2Xw41U8d-T9E0vuUf_0.roa
File: 1-VG2zZYo2Xw41U8d-T9E0vuUf_0.roa (raw, json)
Hash identifier: Fzs5u72SRgE/o/nqzBGPWFy7PHtNgvPIh7SZEq3fBpU=
Subject key identifier: F9:51:B6:CD:96:28:D9:7C:38:D5:4F:1D:F9:3F:44:D2:FB:94:7F:FD
Certificate issuer: /CN=896d5866c35093352e7b9e0762c591e08e50f967
Certificate serial: 019FB2C18734269D45995DF237EDB2CA926A
Authority key identifier: 89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/1-VG2zZYo2Xw41U8d-T9E0vuUf_0.roa
Signing time: Thu 30 Jul 2026 11:20:55 +0000
ROA not before: Thu 30 Jul 2026 11:20:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31308
IP address blocks: 91.195.24.0/24 maxlen: 24
91.195.25.0/24 maxlen: 24
193.151.20.0/24 maxlen: 24
193.151.21.0/24 maxlen: 24
2001:67c:2c88::/48 maxlen: 48
2001:67c:2c89::/48 maxlen: 48
2001:67c:2c90::/48 maxlen: 48
2001:67c:2c91::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 22:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b2:c1:87:34:26:9d:45:99:5d:f2:37:ed:b2:ca:92:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896d5866c35093352e7b9e0762c591e08e50f967
Validity
Not Before: Jul 30 11:20:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f951b6cd9628d97c38d54f1df93f44d2fb947ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:15:0b:23:ff:9b:90:db:6e:5d:fd:b3:01:66:
5a:c1:7f:57:a9:4e:d4:38:66:84:84:85:7a:d8:47:
2b:ab:0c:fb:96:af:7d:01:e9:a9:e6:6e:29:80:89:
98:a1:ec:dd:82:58:21:48:2e:78:c0:8d:cf:22:7d:
bc:25:f8:85:f9:30:27:1b:ea:48:7c:42:af:03:8b:
af:0d:32:04:43:8f:a6:bf:d1:a6:fd:64:0b:ae:a0:
d4:07:f7:90:64:68:20:a7:e6:7b:82:07:ef:3e:3e:
55:26:e4:6c:c0:f9:95:3f:ef:90:27:70:14:54:cf:
16:aa:66:87:f5:56:ce:be:6c:64:f8:d1:c9:29:68:
5e:48:79:82:5a:fb:b6:18:96:63:66:01:e7:20:16:
bc:74:07:8c:dd:0c:54:ac:09:b6:2f:ca:13:89:e0:
78:bd:c1:58:b3:55:fa:1b:37:ea:c8:ab:53:16:54:
13:61:35:ad:99:b7:42:c2:af:96:45:63:2e:e3:87:
d2:3f:ee:5f:73:b9:65:b5:4b:d6:0d:d5:c8:7c:7e:
df:43:e1:a5:5c:9b:24:df:22:f9:f9:59:11:12:b9:
a7:3e:a3:18:8d:68:65:41:09:ef:8f:0b:a6:16:60:
72:4a:de:2d:c0:3d:9e:3f:c3:27:1e:3a:88:9b:21:
e0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:51:B6:CD:96:28:D9:7C:38:D5:4F:1D:F9:3F:44:D2:FB:94:7F:FD
X509v3 Authority Key Identifier:
keyid:89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/1-VG2zZYo2Xw41U8d-T9E0vuUf_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.24.0/23
193.151.20.0/23
IPv6:
2001:67c:2c88::/47
2001:67c:2c90::/47
Signature Algorithm: sha256WithRSAEncryption
91:4b:e3:e2:32:65:30:01:be:37:df:07:a1:88:84:48:b7:94:
76:86:79:75:cb:72:d1:55:18:1c:ff:a7:46:0c:65:b3:4d:4b:
4b:fd:59:0e:5e:19:10:e9:73:e3:3f:3a:54:90:4d:0a:93:23:
6b:06:16:29:b2:29:29:e8:d4:e7:90:52:21:c0:a9:8f:58:10:
90:c0:84:87:cb:24:70:83:5b:d2:77:a9:d4:6f:8a:6d:e1:90:
56:58:f8:f0:76:0b:e2:ec:10:3b:37:12:2f:cf:3d:99:c0:54:
f9:40:17:f5:48:b2:cf:20:a4:3a:ae:78:15:0f:ec:8a:4b:07:
0d:a1:08:e0:59:15:35:7b:ff:09:bc:f0:48:90:6c:bd:a9:21:
fb:e6:62:b2:18:3a:04:ff:d0:bb:9b:11:9c:47:bd:16:99:b9:
c7:38:16:ce:32:95:f2:77:aa:13:50:b7:6a:3e:3d:27:99:13:
3b:4b:8c:5d:be:44:ca:d8:03:5c:b2:99:ec:cb:ef:d3:b2:d7:
db:e2:55:4f:3b:d7:ee:b1:f8:17:64:e7:b3:2e:08:d5:b9:7d:
48:15:c8:72:13:d8:ab:7f:97:47:b7:a2:7b:1c:b8:8f:20:91:
01:7a:e3:13:eb:55:e4:1c:46:c4:de:ec:81:34:d4:8d:28:62:
61:fe:db:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:47:19 2026 by rpki-client