Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/0-M2wHYVJo6WO_dOM_FrtWqv32g.roa
File: 0-M2wHYVJo6WO_dOM_FrtWqv32g.roa (raw, json)
Hash identifier: Syur9QoTGjJsrlDvPR/2jwpPclrs3Zqpe7DQd8jDoYk=
Subject key identifier: D3:E3:36:C0:76:15:26:8E:96:3B:F7:4E:33:F1:6B:B5:6A:AF:DF:68
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019E79945F9B86DED1C20BAB05D93A1656A6
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/0-M2wHYVJo6WO_dOM_FrtWqv32g.roa
Signing time: Sat 30 May 2026 15:50:27 +0000
ROA not before: Sat 30 May 2026 15:50:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208673
IP address blocks: 91.217.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:79:94:5f:9b:86:de:d1:c2:0b:ab:05:d9:3a:16:56:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: May 30 15:50:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3e336c07615268e963bf74e33f16bb56aafdf68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6a:23:33:1a:24:e7:5a:44:cc:35:3d:f5:6b:
47:c1:a0:42:34:ef:b2:ca:b8:07:cf:5c:2d:04:b5:
08:80:1e:33:a5:6d:a0:a0:51:f3:4b:ae:c6:0d:8f:
2b:b8:29:cc:3a:47:d3:4e:48:a8:9f:dd:1c:54:92:
52:7d:40:08:8c:13:0e:b3:b3:e2:8c:84:88:80:3b:
65:ee:a9:a0:8e:51:65:85:f8:4f:f3:a9:38:4a:be:
bf:28:a4:60:b3:e4:e1:11:5b:85:c9:fd:0f:17:e5:
0f:4a:8d:f7:97:92:b3:b8:70:a7:86:3c:64:ab:ba:
2d:e0:a7:b9:53:3e:a4:d2:80:5d:2a:cd:7d:1a:f6:
1f:bf:d3:cb:c3:06:62:0b:51:50:18:e5:a3:5f:7e:
b3:54:2d:c7:e2:f9:b0:27:21:ce:fa:96:79:16:99:
0d:a9:27:c6:a5:20:8e:fa:04:e5:4d:73:26:7b:98:
97:37:64:d0:51:ab:d5:e7:75:b3:c5:8d:91:d0:94:
e5:88:77:e6:59:8b:f0:f2:b0:e8:60:72:ac:e0:62:
4b:f8:fb:86:e6:e5:d3:45:91:51:80:e5:03:72:a6:
39:1b:fa:94:b0:75:49:8f:92:62:dd:b9:bd:e0:00:
f8:dc:18:91:5f:d0:31:fb:4f:0e:a6:c4:05:84:d1:
81:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E3:36:C0:76:15:26:8E:96:3B:F7:4E:33:F1:6B:B5:6A:AF:DF:68
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/0-M2wHYVJo6WO_dOM_FrtWqv32g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.166.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:d3:dd:e0:c4:f3:e2:ca:bd:bb:4e:1b:35:70:7e:c3:76:75:
fd:27:a6:05:46:a5:10:ed:9a:ba:ed:c5:36:05:17:9c:d6:a9:
cb:4d:dd:33:da:93:e9:28:ee:a4:21:0a:a5:dd:69:a0:a0:85:
c5:5a:a8:d6:b7:74:e1:0b:4e:f3:ef:ed:a0:06:cd:be:34:33:
99:07:cf:eb:c1:0c:5e:ba:c5:21:d9:95:1e:02:a7:3a:5b:ef:
05:f7:b3:3c:c3:13:7b:9f:03:9a:21:b5:75:4c:59:55:a6:93:
6d:b8:13:da:4e:1b:45:e4:29:a6:22:73:33:11:05:d6:23:c3:
ae:54:cd:4b:f3:56:20:d0:a7:d5:69:8d:54:f4:05:5a:82:3a:
7b:39:18:2f:fd:6b:e3:79:2d:e9:72:62:dc:f8:ac:19:2b:38:
a6:f6:4b:d4:68:78:73:3b:64:44:4a:f3:e1:7a:61:03:0c:7f:
45:61:e4:1d:50:23:be:36:74:94:a8:66:b9:19:2a:76:3f:a0:
5d:98:d0:44:f0:b0:d3:35:a0:d3:54:da:d9:87:a9:49:f0:35:
d2:0e:9c:42:69:9b:5c:12:34:5e:b9:c1:af:8a:28:6d:5d:64:
c5:9c:33:cc:8a:f5:c3:b2:53:d0:33:dd:dd:b8:14:8a:dd:b5:
0f:8d:8e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 04:12:51 2026 by rpki-client