Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/b1swFPJJREwO7cx297uALIQsAqo.roa
File: b1swFPJJREwO7cx297uALIQsAqo.roa (raw, json)
Hash identifier: OKc3LjMWMxGzGg+rjr90PHIdb2q9ia63zVSKKzhRN5s=
Subject key identifier: 6F:5B:30:14:F2:49:44:4C:0E:ED:CC:76:F7:BB:80:2C:84:2C:02:AA
Certificate issuer: /CN=23fd1aa19e5932f24c2777e7ec18d8a6ca924c5e
Certificate serial: 019CE1282797B1FC9D0FD208B6B6CA0F67EB
Authority key identifier: 23:FD:1A:A1:9E:59:32:F2:4C:27:77:E7:EC:18:D8:A6:CA:92:4C:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/b1swFPJJREwO7cx297uALIQsAqo.roa
Signing time: Thu 12 Mar 2026 08:27:10 +0000
ROA not before: Thu 12 Mar 2026 08:27:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56770
IP address blocks: 91.227.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:28:27:97:b1:fc:9d:0f:d2:08:b6:b6:ca:0f:67:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23fd1aa19e5932f24c2777e7ec18d8a6ca924c5e
Validity
Not Before: Mar 12 08:27:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f5b3014f249444c0eedcc76f7bb802c842c02aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:48:55:a3:c6:f6:63:8e:2f:f6:d5:2b:03:6a:
7c:ee:71:4b:45:a8:bd:79:69:41:57:0b:67:0c:29:
7c:6b:8a:bc:d9:6c:99:0a:98:b8:e4:56:9f:75:92:
70:93:4a:03:86:42:47:79:14:0c:2f:61:fd:7c:f0:
b5:2b:03:0b:bd:63:5f:2e:5c:df:6a:b8:cd:1a:ba:
20:d3:b4:be:70:e5:a9:6e:33:15:4d:4b:91:c3:d1:
44:1b:d4:64:7c:38:73:fe:9f:03:f8:97:71:12:ab:
e7:12:de:39:ae:03:01:8b:e2:59:e5:ec:71:03:23:
37:9b:fb:17:d0:54:d8:51:dd:09:1a:0f:40:5a:08:
6a:49:6e:93:b7:4a:3c:cf:68:0b:be:7d:9a:7d:4e:
4f:fd:e2:24:74:ec:e8:22:5c:4b:57:f0:23:ef:40:
6e:bc:57:b3:18:ad:87:64:48:ad:b9:29:a1:04:cc:
09:02:0c:0e:b3:38:2c:87:a5:9b:84:07:af:ff:56:
e9:0b:1f:3f:0f:26:53:52:06:26:76:94:42:c7:da:
a9:fa:28:f3:24:b5:98:3a:6f:3e:8d:a2:e0:0d:a0:
f0:ae:1f:ac:8e:2c:37:c7:40:28:36:6d:74:62:86:
0e:d6:e6:f8:41:a3:40:72:1c:c5:b6:71:11:76:a1:
c5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5B:30:14:F2:49:44:4C:0E:ED:CC:76:F7:BB:80:2C:84:2C:02:AA
X509v3 Authority Key Identifier:
keyid:23:FD:1A:A1:9E:59:32:F2:4C:27:77:E7:EC:18:D8:A6:CA:92:4C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/b1swFPJJREwO7cx297uALIQsAqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.131.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:12:b0:ce:bf:76:98:53:a2:d3:4d:76:fe:d9:40:02:00:0a:
71:45:67:ef:28:e5:9e:b0:fe:79:a9:05:ba:9b:d8:fc:7f:ba:
b4:08:a2:4b:2b:b0:97:bd:2e:7e:4d:3f:71:1d:b5:0b:88:b1:
82:09:40:84:15:37:e7:ee:97:c6:7e:38:e8:e7:e4:56:0b:74:
76:34:a5:4e:39:78:e2:fd:bc:7a:5e:64:3a:74:02:fa:3b:2d:
60:94:2a:6c:28:75:12:4d:ec:b9:f4:27:d2:b9:16:36:ed:95:
8c:4e:b2:55:04:51:2e:6a:c8:98:c2:00:31:4e:9a:7d:61:86:
b5:bf:ad:a6:6a:9b:96:18:0d:80:f9:ea:78:c3:9f:59:f3:94:
d0:f2:ac:a3:de:5e:b2:67:3b:b2:f3:67:5f:36:1d:a1:62:a7:
03:0b:58:6e:aa:1b:c0:32:7a:6c:f7:ca:6d:33:53:79:69:77:
e9:9e:5e:40:1c:0f:23:cb:a4:db:2b:03:3f:b1:53:99:bd:8c:
18:7b:6b:5d:52:ea:fa:38:ed:b4:90:68:83:1f:23:29:d6:6e:
80:74:47:21:8f:36:38:b3:e8:b9:56:d5:a5:30:62:b3:6a:12:
a6:37:4e:12:e6:ce:31:0e:76:a5:6c:c6:e0:16:0c:89:23:dd:
cd:6f:8d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 08:17:33 2026 by rpki-client