Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/AH9yLOQnJco82xC5xRuM9Qn0XEU.roa
File: AH9yLOQnJco82xC5xRuM9Qn0XEU.roa (raw, json)
Hash identifier: xrXroH/FNPhJYj3t5qMMfpmUVD8nqiBTV0DGwjLlqHc=
Subject key identifier: 00:7F:72:2C:E4:27:25:CA:3C:DB:10:B9:C5:1B:8C:F5:09:F4:5C:45
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 019FDCEC72B48857F082506927F009F00919
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/AH9yLOQnJco82xC5xRuM9Qn0XEU.roa
Signing time: Fri 07 Aug 2026 15:51:51 +0000
ROA not before: Fri 07 Aug 2026 15:51:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 91.108.247.0/24 maxlen: 24
91.108.248.0/24 maxlen: 24
91.108.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 06:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:ec:72:b4:88:57:f0:82:50:69:27:f0:09:f0:09:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Aug 7 15:51:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=007f722ce42725ca3cdb10b9c51b8cf509f45c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:45:7d:5b:ba:88:9c:f0:f8:c5:26:c7:7b:c3:
c0:0f:13:99:8c:9a:7b:dd:fa:ee:42:30:c5:06:9f:
b1:90:b1:36:40:00:6b:c3:15:97:4f:0a:e3:13:e9:
19:ec:d3:3d:bf:c4:ff:0c:0f:0c:75:bb:e9:0e:32:
85:0a:03:f6:b9:ab:9b:bd:a2:be:d4:00:5f:09:22:
03:10:52:d1:4c:68:f2:2a:f5:dd:d7:35:3c:16:0f:
1a:b3:6e:7d:4a:7a:2e:4d:84:23:8e:51:32:e0:c0:
8a:fd:af:9e:c0:64:b4:71:4a:30:84:96:1a:62:14:
b7:7d:7b:73:2f:92:bb:94:c8:f7:e4:bf:3c:d6:91:
82:73:89:c8:6a:58:b1:9c:c5:05:f7:8e:6c:33:ae:
c2:e8:0b:48:68:59:c1:40:1a:bd:87:2f:3a:50:ca:
b3:59:3a:8e:e4:69:5b:10:f3:63:bc:53:49:35:2e:
59:57:92:76:64:53:18:af:29:b7:0d:17:11:c4:32:
ce:2e:f7:81:8c:8c:cb:54:7c:c3:03:a6:17:9a:36:
3e:de:4b:cb:83:ad:13:ea:ff:a1:06:48:fb:0b:7f:
11:57:8f:ff:8e:23:e2:2d:66:ae:4a:83:70:11:f6:
36:79:ae:c4:97:28:5a:f4:fd:50:c9:6a:99:a7:bc:
09:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:7F:72:2C:E4:27:25:CA:3C:DB:10:B9:C5:1B:8C:F5:09:F4:5C:45
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/AH9yLOQnJco82xC5xRuM9Qn0XEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.247.0-91.108.248.255
91.108.254.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:79:02:f6:0e:f1:c8:14:56:85:a1:96:74:38:db:43:56:57:
3b:bb:51:cf:c1:61:17:ec:31:70:44:77:34:14:0c:ee:88:5f:
c0:d8:28:d0:dc:a8:0a:17:31:c1:bd:0d:5f:4a:49:3d:f8:90:
f0:f2:25:c1:33:8d:c9:68:a6:77:ef:da:99:b3:ca:b1:7a:88:
33:af:a7:72:b9:2f:47:42:18:dc:c8:c3:cf:85:5c:a8:70:d9:
2d:53:70:6e:73:81:96:79:1b:ab:d0:3a:d4:ce:d2:f9:f4:29:
47:bb:03:ac:01:10:02:e6:8e:bb:38:83:e9:91:a0:a5:0e:66:
d2:e1:64:22:ed:34:89:fc:22:8b:d4:78:9d:e6:81:f1:cc:94:
74:b7:f0:70:32:0a:74:a6:84:00:c5:7b:25:dd:49:76:c0:14:
06:38:a1:f8:e0:33:bc:82:7f:4e:ce:85:c5:bb:d9:af:95:f9:
19:e0:dc:37:03:1a:39:12:42:e7:0a:70:79:41:dd:40:be:0f:
a1:4b:ea:c3:30:5e:44:1a:da:cb:2e:be:40:b7:09:36:51:d3:
b2:5c:92:a3:ec:0d:03:ab:53:6b:88:9d:5e:c6:e1:3e:f3:a1:
2a:68:2a:4b:0b:9a:ae:fd:4c:85:85:d4:b1:46:66:98:ef:ab:
7f:3f:25:6d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Aug 13 16:13:14 2026 by rpki-client