Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/foj3wxZ-vtEq-ZNGaHXGXJBPPZ4.roa
File: foj3wxZ-vtEq-ZNGaHXGXJBPPZ4.roa (raw, json)
Hash identifier: YKATndLpT6xlZT8C0s4iCTzEsBCAnIUWa7dwMMehpso=
Subject key identifier: 7E:88:F7:C3:16:7E:BE:D1:2A:F9:93:46:68:75:C6:5C:90:4F:3D:9E
Certificate issuer: /CN=8452b03e1b01709638940d9592983cde77ecab77
Certificate serial: 019E4983D400B271276E69E79E0323F363E2
Authority key identifier: 84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/foj3wxZ-vtEq-ZNGaHXGXJBPPZ4.roa
Signing time: Thu 21 May 2026 07:50:36 +0000
ROA not before: Thu 21 May 2026 07:50:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 91.223.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:49:83:d4:00:b2:71:27:6e:69:e7:9e:03:23:f3:63:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8452b03e1b01709638940d9592983cde77ecab77
Validity
Not Before: May 21 07:50:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e88f7c3167ebed12af993466875c65c904f3d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f4:2d:c5:48:57:cf:30:e9:41:53:1e:d3:15:
0d:ce:5a:e7:a4:cc:90:d1:df:a6:35:e7:99:ba:5f:
c3:55:18:88:9a:d8:80:85:a6:cc:00:5d:df:f5:23:
85:27:5e:af:fd:85:8c:51:ea:1a:d0:ef:e8:4a:de:
cf:49:b9:d5:07:c6:c8:61:ff:8d:6a:76:76:34:4d:
eb:26:dc:71:ad:1d:a9:a1:a2:dc:29:d8:e3:07:b7:
29:2b:4b:63:62:73:43:82:59:2d:1a:55:e1:dc:d3:
d5:bb:44:8c:cc:e6:9b:aa:cd:c1:9a:90:d4:c5:32:
8a:68:24:b3:ea:94:b6:b7:48:94:96:d7:cc:b4:fb:
f3:9e:9e:e5:56:7e:38:8c:10:7f:d3:be:b8:0c:20:
a9:bd:f8:b5:85:5b:ed:e3:80:42:50:3b:8c:06:f1:
4b:34:ac:27:0f:de:88:af:98:12:1a:aa:a0:67:2b:
8a:9f:f5:f1:07:a5:92:34:4c:e1:6f:91:d9:b5:32:
f5:09:8f:c5:dd:11:d3:76:d4:e5:44:c5:04:d6:67:
90:00:34:08:90:cb:62:20:19:ab:cb:27:14:bc:00:
53:df:24:36:39:ad:20:ea:c0:63:4f:22:60:68:72:
2f:f9:94:4c:f4:48:49:ef:7f:28:5a:42:61:19:d6:
bf:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:88:F7:C3:16:7E:BE:D1:2A:F9:93:46:68:75:C6:5C:90:4F:3D:9E
X509v3 Authority Key Identifier:
keyid:84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/foj3wxZ-vtEq-ZNGaHXGXJBPPZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.94.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:f6:c3:b1:f1:9e:6a:8f:c8:4c:0a:50:a1:a3:1b:fc:9d:24:
6b:b1:c1:29:ae:3e:1c:a9:26:1f:93:bc:af:d8:85:ab:e0:7d:
f5:17:5a:4b:52:85:70:3b:0b:d8:f4:ac:b7:05:cc:4b:00:6d:
89:6b:90:a5:54:c7:41:f1:0c:60:d0:93:2e:a5:3b:d3:11:50:
cb:d3:9e:06:80:bc:80:e0:b0:50:75:a9:9e:ee:49:66:91:a1:
9b:21:62:07:cb:93:08:9b:ed:29:08:23:ee:64:ac:5f:b8:f1:
78:02:d8:ec:7a:a5:db:c4:27:2c:b6:12:f4:a2:a6:88:ce:4e:
43:c4:af:d8:1a:27:8e:85:15:4e:bb:28:94:07:77:3d:b5:e8:
7b:30:5f:6b:3b:f5:a1:13:48:79:fd:fc:83:65:b5:7d:c9:ff:
8a:7c:46:59:5a:ee:f9:7b:f6:2b:ac:f9:64:87:5d:1a:0f:37:
30:8a:cf:61:f0:3c:24:ac:58:ec:e7:46:cb:06:03:c9:4d:14:
09:3a:b3:6d:81:15:77:bd:40:f5:97:5a:ae:8f:cc:48:7e:e0:
a3:02:e6:0c:76:ea:e3:7d:2f:5b:9b:ab:76:13:ff:ba:a4:3f:
5f:8d:ef:bb:b4:76:3a:4b:6c:e8:96:94:7e:4c:3d:7f:ec:5b:
3a:0a:a3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:48:54 2026 by rpki-client