Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/1XLn2EcayJXCpeoADdUargrZ6uQ.roa
File: 1XLn2EcayJXCpeoADdUargrZ6uQ.roa (raw, json)
Hash identifier: 9EjMpW/7TLzpMCvVuiux2e1xySwJuLaEjWMRwlKneqc=
Subject key identifier: D5:72:E7:D8:47:1A:C8:95:C2:A5:EA:00:0D:D5:1A:AE:0A:D9:EA:E4
Certificate issuer: /CN=56e8521e80f2f071a31385bcdfbc31a621c68f94
Certificate serial: 019E89519C3C6642EE3BE465241C9AB59293
Authority key identifier: 56:E8:52:1E:80:F2:F0:71:A3:13:85:BC:DF:BC:31:A6:21:C6:8F:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/1XLn2EcayJXCpeoADdUargrZ6uQ.roa
Signing time: Tue 02 Jun 2026 17:11:27 +0000
ROA not before: Tue 02 Jun 2026 17:11:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199933
IP address blocks: 91.219.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 11:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:89:51:9c:3c:66:42:ee:3b:e4:65:24:1c:9a:b5:92:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56e8521e80f2f071a31385bcdfbc31a621c68f94
Validity
Not Before: Jun 2 17:11:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d572e7d8471ac895c2a5ea000dd51aae0ad9eae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8e:09:8c:c1:ee:ba:ff:ac:36:c8:bf:e2:50:
95:4d:95:8c:34:ca:71:af:a8:58:c0:7f:4a:cb:7c:
af:ed:34:be:1d:2a:18:3b:b4:ba:a2:5b:41:cf:70:
1b:46:87:aa:76:fc:16:a0:00:f6:ec:bb:e3:9d:c1:
9d:3e:c3:71:6f:c0:37:56:3a:92:ff:4d:41:21:ff:
28:82:f7:f2:78:42:c7:39:47:ba:77:89:88:d7:2e:
3b:50:74:c9:e5:8b:bd:e4:ab:71:08:a5:17:aa:c2:
b9:86:7c:bf:26:1a:21:ee:42:5a:eb:ea:1d:e3:a6:
20:64:b4:a4:67:64:7e:3f:26:ba:61:3e:8c:eb:02:
c4:07:00:28:57:87:de:25:e4:63:0d:f8:92:c0:6a:
e1:86:fc:74:88:6a:bc:dd:ce:5a:c2:20:af:d1:c1:
48:79:d0:20:86:e3:b9:10:53:53:9a:6a:99:84:96:
0a:b0:86:0f:3a:11:90:3b:5d:50:30:78:64:fa:c4:
81:e0:e6:d0:11:98:f0:04:81:2a:c9:cf:ca:01:f7:
24:25:1c:0c:cd:e5:2e:9a:fc:98:40:12:7d:5a:c6:
26:04:48:a8:ba:28:57:c2:ea:67:39:5b:39:ee:9f:
17:57:6d:17:e9:9f:b2:56:e5:9e:9b:3a:3f:a1:5b:
03:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:72:E7:D8:47:1A:C8:95:C2:A5:EA:00:0D:D5:1A:AE:0A:D9:EA:E4
X509v3 Authority Key Identifier:
keyid:56:E8:52:1E:80:F2:F0:71:A3:13:85:BC:DF:BC:31:A6:21:C6:8F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/1XLn2EcayJXCpeoADdUargrZ6uQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.117.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:06:a0:03:fb:bb:93:91:12:1b:08:aa:09:40:95:0b:24:16:
e9:96:50:14:5c:63:6c:f7:db:0f:4b:9d:92:6e:80:7e:bb:86:
9b:c8:a0:23:40:22:8a:d7:be:2d:3d:b1:bf:73:61:94:79:40:
f5:70:e9:a7:82:25:cd:ec:89:dd:d2:a6:f4:a4:a7:ea:3d:9f:
7a:4d:03:ea:66:68:0a:e3:d7:0f:fb:fa:ae:a7:80:2c:a1:93:
2b:75:35:ae:9d:45:14:17:59:6f:a7:c9:06:de:56:cd:a3:03:
4c:3c:97:9d:19:c6:06:66:30:db:a6:8b:40:03:80:2f:32:60:
54:85:8b:9f:2f:6b:f6:4f:bb:e9:65:df:12:4c:ea:49:c6:61:
9f:f0:9e:df:66:65:d0:1f:cf:de:a1:f5:16:aa:8a:07:63:82:
c3:c0:85:10:9f:b6:39:a8:fa:58:96:dc:63:d1:12:91:72:80:
89:1c:d9:3e:1d:9a:a5:7f:9e:c0:d6:e4:76:39:b3:65:8e:c7:
69:14:43:36:57:dd:a5:25:4c:8f:05:b7:24:d8:65:50:3c:d9:
d6:ce:6a:46:50:e5:01:8f:40:62:f4:80:4c:21:cb:6c:03:25:
e1:1d:12:b0:e1:7e:b4:1b:51:4d:ea:1c:2c:fa:95:f5:3e:41:
9a:0a:8a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:53:54 2026 by rpki-client