Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/xTfVxlDggFox5PUuDnUsOPvWhQM.roa
File: xTfVxlDggFox5PUuDnUsOPvWhQM.roa (raw, json)
Hash identifier: bQBdyFyO07zmwln6EqiEUBlqxDxw1Z3Lucvcv7jJ+Oc=
Subject key identifier: C5:37:D5:C6:50:E0:80:5A:31:E4:F5:2E:0E:75:2C:38:FB:D6:85:03
Certificate issuer: /CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51
Certificate serial: 019E7AF6AD45603B566D459F184DDA94B72C
Authority key identifier: F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/xTfVxlDggFox5PUuDnUsOPvWhQM.roa
Signing time: Sat 30 May 2026 22:17:27 +0000
ROA not before: Sat 30 May 2026 22:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209847
IP address blocks: 77.91.100.0/24 maxlen: 24
77.91.101.0/24 maxlen: 24
77.91.102.0/24 maxlen: 24
77.91.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7a:f6:ad:45:60:3b:56:6d:45:9f:18:4d:da:94:b7:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51
Validity
Not Before: May 30 22:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c537d5c650e0805a31e4f52e0e752c38fbd68503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:07:7a:af:56:95:fc:e5:df:99:8c:0f:50:d2:
2c:1d:92:0f:0f:ea:6f:d5:22:91:d5:ff:5b:3c:ca:
1b:19:05:15:4a:b9:c3:f2:20:ce:36:2c:6f:69:39:
1b:5b:5e:c0:08:31:a6:b6:2a:dd:7b:fb:21:79:71:
e0:f6:86:fe:76:23:8e:e8:c4:8b:57:44:29:ac:88:
35:84:fe:ca:ea:9c:ab:4c:f8:63:b6:8d:03:78:ed:
e6:48:a6:24:56:d3:f9:f0:ac:dd:cd:d7:55:9e:b6:
38:51:9e:48:44:4d:35:8b:e2:af:65:19:ab:51:2a:
fa:2a:83:fe:ca:60:46:45:12:ff:19:77:51:99:9c:
7a:fb:35:3c:2a:86:e3:9a:72:ce:6f:79:cd:e3:2e:
ca:77:34:90:a6:16:f9:c4:8a:75:74:f0:40:c6:b9:
1a:ca:a1:ae:d8:6e:09:d6:12:a7:8d:3e:7a:6f:42:
3f:fe:4a:80:31:f1:de:35:a8:96:fd:c4:3b:e4:91:
82:00:23:bc:83:3a:f5:7a:c2:42:62:8a:7a:b7:0d:
f4:b9:27:68:aa:c5:d9:48:cd:35:f2:69:14:52:76:
b2:f7:7e:4c:b3:2c:3f:12:f8:4f:05:0b:cf:b8:31:
bf:8c:a0:15:62:66:81:74:3c:1b:c6:99:51:99:9c:
e4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:37:D5:C6:50:E0:80:5A:31:E4:F5:2E:0E:75:2C:38:FB:D6:85:03
X509v3 Authority Key Identifier:
keyid:F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/xTfVxlDggFox5PUuDnUsOPvWhQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.100.0/22
Signature Algorithm: sha256WithRSAEncryption
d0:3e:ad:d1:28:09:f6:d3:5b:27:ff:51:56:a1:07:a5:84:7e:
4a:a7:a9:cd:9e:b7:85:43:c9:c2:47:1d:80:65:3d:52:cb:15:
9e:31:ed:4c:1c:fc:d6:66:10:1a:91:c9:11:67:4d:2c:c4:9e:
9b:ed:56:f6:8f:bd:14:f1:d7:38:2a:97:12:05:19:89:2d:12:
55:0e:2a:19:67:23:01:3d:8b:4f:bb:66:fd:7c:13:21:56:08:
b3:f8:3b:27:64:a8:a1:f2:fb:f4:1e:8e:1c:4a:08:e0:e7:03:
c4:05:95:2a:0d:82:3d:d7:63:54:4b:3c:27:89:b8:49:72:21:
b9:4f:ab:e1:6c:5b:cf:b5:0b:c3:b0:f6:80:e1:b1:f5:8b:62:
73:d7:28:47:ad:cd:01:03:78:a3:f0:77:e6:87:47:6f:9f:fe:
b1:a0:09:75:37:f5:bf:2c:13:a9:a7:87:8b:19:91:74:aa:22:
78:05:b9:0c:63:88:b1:ef:21:ea:ca:c4:47:3a:22:38:76:72:
1e:cf:06:ae:b6:c7:ec:ca:06:d9:8c:c4:ef:36:7a:49:df:03:
44:74:ee:88:d7:02:11:ac:e0:c6:05:70:1f:b6:fb:c3:3b:a1:
7a:bb:f3:e4:e8:1e:0e:6f:ab:98:09:7d:0a:d4:56:77:b1:0d:
e2:86:69:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:06:05 2026 by rpki-client