Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/98oECme-w_GgSaFmZh37RLhYD9g.roa
File: 98oECme-w_GgSaFmZh37RLhYD9g.roa (raw, json)
Hash identifier: iPDzJ3v3jfejnPGzBAdLpmHo920TlkgN96SVjOqNj5w=
Subject key identifier: F7:CA:04:0A:67:BE:C3:F1:A0:49:A1:66:66:1D:FB:44:B8:58:0F:D8
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 019FD1630603E7161AF2DDD45F482AEA6F15
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/98oECme-w_GgSaFmZh37RLhYD9g.roa
Signing time: Wed 05 Aug 2026 10:05:55 +0000
ROA not before: Wed 05 Aug 2026 10:05:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219284
IP address blocks: 91.190.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Aug 2026 16:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:63:06:03:e7:16:1a:f2:dd:d4:5f:48:2a:ea:6f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Aug 5 10:05:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7ca040a67bec3f1a049a166661dfb44b8580fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b4:b7:78:14:f3:67:7c:54:45:95:e2:d6:fe:
a2:16:8f:a5:60:3e:58:0a:55:5c:7f:fb:78:e8:52:
18:95:d3:9b:72:20:d8:89:45:a9:75:aa:d5:5f:f1:
8c:d6:ac:b6:11:ca:a3:09:99:e2:cd:0c:7b:ef:0c:
8b:59:23:a6:55:f7:f8:47:b0:d1:15:88:5e:f6:d1:
cf:ce:2f:70:03:d1:1a:09:b3:a9:a0:ea:cb:f8:c2:
cb:ed:a9:e2:6f:c4:fc:b2:20:33:91:25:1a:b3:98:
e4:59:39:71:77:ed:49:95:d7:35:6c:12:ee:2b:10:
fa:0d:56:77:8e:a1:34:c3:09:9c:f3:b8:ca:04:9c:
a2:75:93:eb:83:49:cb:74:91:44:ed:b7:38:86:6a:
1f:dc:0e:26:c7:10:d6:92:63:26:75:ef:92:66:80:
51:3d:76:ce:64:ec:bf:b5:81:8d:cc:76:cb:7e:db:
84:c6:56:dd:e3:a5:c7:69:ae:f6:b4:b4:17:01:9a:
0f:7d:4c:2a:6b:c8:1d:b7:50:f1:03:06:6b:2d:be:
11:4b:dc:0e:29:95:21:2e:17:81:f3:ae:65:31:ec:
24:3a:c4:cf:b6:c3:0f:c4:07:0c:e0:ec:16:a9:39:
e3:b3:44:74:70:24:65:22:c0:14:1e:72:67:4b:f6:
9d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CA:04:0A:67:BE:C3:F1:A0:49:A1:66:66:1D:FB:44:B8:58:0F:D8
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/98oECme-w_GgSaFmZh37RLhYD9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.190.187.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:67:34:c6:0f:c3:5f:fe:ed:8a:2e:e4:fe:c2:5f:11:7a:7d:
0c:f0:98:53:56:79:89:ed:bb:dd:08:2e:92:1a:ac:a5:e8:35:
72:21:d1:c1:42:00:2d:a1:bc:44:12:fd:69:fb:32:93:eb:3b:
d8:20:87:3e:1f:68:e0:be:55:d8:48:fd:6d:78:d6:2d:46:29:
6b:73:9f:01:6b:19:b5:9e:49:48:b4:c8:9b:35:57:86:54:5d:
f0:78:c0:ee:47:ba:89:e1:69:19:60:28:ba:f6:8c:6d:b8:1c:
30:df:3c:2b:ef:75:37:12:a5:58:06:3b:4c:df:21:a6:c3:4c:
8a:ce:60:54:27:d2:b4:3a:0d:52:ce:7d:88:c2:3b:4c:87:54:
67:ce:fe:ac:ed:42:58:06:85:ba:5b:2c:14:00:4b:a4:5a:a5:
68:b0:b5:08:8d:d4:e4:5b:83:f2:c1:09:f7:23:1d:bb:c7:43:
24:b9:65:ff:c2:a1:44:b7:6e:27:18:9b:1d:9a:d3:21:24:9a:
d7:ae:03:83:0d:33:03:08:97:5a:15:7b:2a:58:14:c5:18:12:
b2:99:54:76:f1:c6:1d:0b:0e:1c:7c:b5:25:f7:eb:43:dc:53:
2f:8a:c5:26:65:9e:62:8c:0b:cb:a6:fc:37:24:65:3f:23:b8:
5f:10:f7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 02:14:12 2026 by rpki-client