Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/U7PSP9nWfWRKWIUoCFTyUjwxEDg.roa
File: U7PSP9nWfWRKWIUoCFTyUjwxEDg.roa (raw, json)
Hash identifier: G17Pia5bNZc2B8AE0xsa/dxprFpgNsjPpfQnTzG97J0=
Subject key identifier: 53:B3:D2:3F:D9:D6:7D:64:4A:58:85:28:08:54:F2:52:3C:31:10:38
Certificate issuer: /CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51
Certificate serial: 019E7AF3ED7A886CC9EE925C1EBCFA1C797D
Authority key identifier: F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/U7PSP9nWfWRKWIUoCFTyUjwxEDg.roa
Signing time: Sat 30 May 2026 22:14:26 +0000
ROA not before: Sat 30 May 2026 22:14:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201814
IP address blocks: 77.91.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7a:f3:ed:7a:88:6c:c9:ee:92:5c:1e:bc:fa:1c:79:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51
Validity
Not Before: May 30 22:14:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53b3d23fd9d67d644a5885280854f2523c311038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:49:b2:5a:7a:7a:f3:0c:b9:9f:e8:17:c2:e4:
7f:22:db:de:8e:62:5e:66:ad:a0:05:45:e4:db:b5:
ff:71:9d:db:b2:45:96:5f:1f:68:27:b3:f0:eb:46:
28:4b:4d:77:43:a0:7b:9b:90:62:50:e2:7f:55:fd:
bc:0e:28:c5:37:cc:59:25:78:7f:1c:9b:9a:78:b6:
2c:d6:87:bb:4d:64:f3:0a:56:a6:c1:9b:fb:23:19:
fa:b5:65:69:31:02:d5:25:7a:98:7c:ac:31:01:4e:
39:44:d5:13:f5:a5:f5:45:b4:da:5c:43:d4:23:79:
47:97:e3:4a:56:c2:dc:32:02:29:05:bf:ad:ca:99:
4e:c5:fb:95:5a:61:13:61:ee:76:14:4b:92:a8:dc:
0b:92:05:49:75:14:62:86:0c:67:f0:89:11:40:de:
f0:49:52:47:e7:d1:fa:8f:0b:c8:fd:4f:cb:4e:37:
30:24:59:a3:c6:34:94:c2:f6:81:f6:36:5c:06:fe:
ae:d0:cf:03:a8:3b:e2:1b:4c:a0:c1:70:9f:fa:bf:
c2:bb:8f:30:fb:3c:21:b4:9e:43:5d:bf:f5:c4:9e:
f0:c2:09:50:0f:b9:e5:a6:74:c0:39:ae:49:f1:e5:
6b:3f:fc:e7:14:2a:f5:ef:33:58:d6:d7:54:a0:81:
9a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B3:D2:3F:D9:D6:7D:64:4A:58:85:28:08:54:F2:52:3C:31:10:38
X509v3 Authority Key Identifier:
keyid:F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/U7PSP9nWfWRKWIUoCFTyUjwxEDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.122.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:86:0e:86:3d:89:f4:3a:c0:44:ab:0d:f4:3b:51:a7:6c:ca:
da:23:70:0f:e7:6b:0d:a5:60:36:e0:15:a1:f0:ff:6d:a0:98:
54:a5:46:42:79:ef:53:b8:5b:b9:d4:e4:af:fc:dc:70:a1:0b:
f8:6d:ef:b5:89:5b:a3:bd:b2:50:7e:d9:36:8f:ef:55:f1:91:
e9:dc:e2:59:c8:98:f9:18:fc:19:dd:af:16:d4:e9:e9:f4:d2:
30:57:7d:6a:d8:d4:e2:0a:ef:4d:01:6a:67:76:84:b9:d0:06:
23:9b:5f:17:4f:55:a6:f0:3f:f1:7e:9e:27:33:76:41:3b:2b:
1e:6f:38:2e:d9:34:3b:04:33:78:dc:db:5c:c9:63:a7:3c:3b:
46:c3:2e:f6:16:60:c0:08:2b:71:d9:a4:04:4b:b2:1b:e4:29:
ef:da:02:bc:50:47:40:4c:76:a6:a5:57:d8:a8:7b:30:77:00:
a3:bd:aa:88:79:80:ea:a9:80:69:23:66:6d:9c:f8:00:a2:e0:
4a:b2:d6:66:b9:51:64:57:16:db:fd:cf:81:9a:00:c7:81:f9:
9e:26:2e:88:56:d0:1e:67:89:12:25:9f:2b:f4:9f:15:63:18:
20:39:50:07:65:bb:f3:7a:a3:a3:9f:f7:9f:3d:db:7a:22:88:
cd:2c:51:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:34:21 2026 by rpki-client