Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/iuEbzqWMcJMEWcYi_VU5jTwMYq4.roa
File: iuEbzqWMcJMEWcYi_VU5jTwMYq4.roa (raw, json)
Hash identifier: mnklv3f+xx2uue3nbyHfu65gufVE0wUia/UVTbAJrX4=
Subject key identifier: 8A:E1:1B:CE:A5:8C:70:93:04:59:C6:22:FD:55:39:8D:3C:0C:62:AE
Certificate issuer: /CN=767eb661936dc95da3ecc4ca3eaf581389c0d855
Certificate serial: 019F7506E6D05EB16319D2CC1DB067AE9B4F
Authority key identifier: 76:7E:B6:61:93:6D:C9:5D:A3:EC:C4:CA:3E:AF:58:13:89:C0:D8:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn62YZNtyV2j7MTKPq9YE4nA2FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/iuEbzqWMcJMEWcYi_VU5jTwMYq4.roa
Signing time: Sat 18 Jul 2026 11:40:14 +0000
ROA not before: Sat 18 Jul 2026 11:40:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6762
IP address blocks: 91.192.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn62YZNtyV2j7MTKPq9YE4nA2FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:75:06:e6:d0:5e:b1:63:19:d2:cc:1d:b0:67:ae:9b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767eb661936dc95da3ecc4ca3eaf581389c0d855
Validity
Not Before: Jul 18 11:40:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ae11bcea58c70930459c622fd55398d3c0c62ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b6:9d:02:bd:4b:6e:2c:b0:3c:e3:f5:37:e1:
7c:de:e3:f2:27:25:21:0c:88:84:f9:89:32:71:bb:
40:f5:16:5e:cd:58:e0:37:4e:ba:26:85:76:be:63:
39:96:e0:0b:19:41:bd:6c:74:11:6f:8f:72:1e:f8:
93:24:bb:ba:c0:f1:8b:67:9a:5f:4f:4d:14:1f:e2:
c9:33:31:26:a3:c3:59:dd:85:10:b6:3f:d8:87:7a:
90:0a:22:12:d6:a5:d6:33:88:fb:34:af:5a:55:5d:
89:0b:19:0c:ee:3d:56:be:db:7c:0c:4a:02:4c:1a:
36:6e:79:55:63:36:39:fa:57:17:c1:25:cb:d6:23:
4a:6c:18:4e:74:9f:d8:3d:97:d6:e6:37:d7:73:88:
8f:4c:83:78:c5:c5:00:3b:af:1c:18:c2:21:88:da:
80:4b:af:81:5f:74:36:a3:b4:bd:78:c8:80:2f:41:
62:bb:20:93:46:af:cb:5c:0a:2f:ca:32:7c:72:6e:
cf:09:57:0a:7d:d9:a1:77:da:55:2e:81:af:9f:36:
80:28:74:7c:e2:21:7a:bd:3a:fa:dd:e5:e9:30:49:
c8:d0:92:1e:87:68:8c:61:dc:cb:25:6a:e1:a5:e6:
cb:ae:6f:72:04:0c:2c:39:d1:ab:12:58:f7:79:55:
c5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E1:1B:CE:A5:8C:70:93:04:59:C6:22:FD:55:39:8D:3C:0C:62:AE
X509v3 Authority Key Identifier:
keyid:76:7E:B6:61:93:6D:C9:5D:A3:EC:C4:CA:3E:AF:58:13:89:C0:D8:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn62YZNtyV2j7MTKPq9YE4nA2FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/iuEbzqWMcJMEWcYi_VU5jTwMYq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.84.0/24
Signature Algorithm: sha256WithRSAEncryption
19:98:4c:bb:88:47:89:d7:df:04:33:0e:97:f6:53:d0:85:77:
cb:e5:0e:2c:78:39:97:33:d2:82:7c:c3:ef:91:d2:44:ee:eb:
7c:cf:46:7d:e0:55:13:f2:ec:42:55:ae:61:a4:e5:b8:22:e6:
fb:ee:7d:48:4d:87:41:11:58:c9:5b:f4:1d:e1:44:dc:79:69:
0b:80:23:59:ff:1c:f2:75:b7:e2:21:0d:5b:77:e6:8e:7a:0b:
78:bb:2f:e3:70:28:be:96:97:e1:c7:2e:8b:34:9d:c2:e6:e4:
aa:50:7d:7d:99:70:a8:72:fc:06:83:f0:04:45:65:44:1b:37:
7c:c0:b2:ac:19:3e:f5:55:0d:11:34:d6:81:29:72:f2:b0:d4:
d5:7b:c0:29:81:1f:36:8f:ed:7a:ee:f7:c3:3a:bc:3d:9a:0e:
d9:cb:c6:6c:47:87:a9:29:37:3b:64:55:61:41:c4:00:84:42:
8e:1c:39:56:5f:1f:eb:1a:de:fc:d7:be:8e:ae:12:92:6b:af:
23:0f:1a:41:cb:9f:be:37:81:35:9d:14:c1:81:43:a8:95:6a:
85:23:1c:55:39:7c:2a:fd:4b:c5:4c:0a:d4:0c:1d:2d:c4:e1:
c9:1a:03:e1:86:d4:85:f4:bc:ee:58:b9:27:b8:1d:b7:68:d3:
eb:06:31:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:10:04 2026 by rpki-client