Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/C2Dua67H9ppGw_IqCF-_xRvUZJo.roa
File: C2Dua67H9ppGw_IqCF-_xRvUZJo.roa (raw, json)
Hash identifier: /y+Q+CFUCFosXClFOhn+TiGIZCZk4HVM1uc/dsUOZbo=
Subject key identifier: 0B:60:EE:6B:AE:C7:F6:9A:46:C3:F2:2A:08:5F:BF:C5:1B:D4:64:9A
Certificate issuer: /CN=d7a80068bd7328ef41120f4788c28d3a92047067
Certificate serial: 019CD24C231EA3CAC80332137E2BDBDEFB57
Authority key identifier: D7:A8:00:68:BD:73:28:EF:41:12:0F:47:88:C2:8D:3A:92:04:70:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/C2Dua67H9ppGw_IqCF-_xRvUZJo.roa
Signing time: Mon 09 Mar 2026 11:12:10 +0000
ROA not before: Mon 09 Mar 2026 11:12:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 91.236.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d2:4c:23:1e:a3:ca:c8:03:32:13:7e:2b:db:de:fb:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7a80068bd7328ef41120f4788c28d3a92047067
Validity
Not Before: Mar 9 11:12:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b60ee6baec7f69a46c3f22a085fbfc51bd4649a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:75:76:72:46:29:ce:e0:a2:6a:d7:3a:25:cf:
85:54:f5:43:47:58:92:ea:83:94:09:fd:27:cc:0b:
d0:61:0e:f1:3e:b5:5e:a8:ed:d5:b6:23:8a:00:cd:
1a:6a:23:b0:16:5a:cd:b6:95:ee:65:25:63:ef:04:
f2:f8:51:eb:e3:5c:82:a2:1d:39:bb:8a:9f:fa:2b:
97:24:e6:cd:b3:d3:87:3d:d5:7e:ba:0f:b9:ce:f0:
1a:75:d9:e1:38:b9:57:a1:d1:cf:4a:6b:89:79:9c:
20:39:b2:24:73:cd:cf:12:51:db:ac:b3:fd:71:4c:
af:38:34:f3:cb:60:a4:0f:48:b0:92:70:92:d5:09:
45:1d:a8:bc:de:b4:3f:10:9c:b0:b3:81:76:70:56:
ca:33:01:dd:1c:2b:69:14:d5:87:3b:4f:f9:c5:fe:
b6:2a:a7:e9:f3:d7:10:92:a5:5f:3e:44:09:b2:c8:
22:9b:7d:77:99:13:5d:a6:31:5e:47:16:41:55:9b:
81:6a:88:90:e8:f4:80:c2:73:67:db:9f:4a:b7:49:
13:22:3d:25:48:bd:a2:16:11:cd:49:1e:99:d0:39:
66:87:c2:8e:5f:e4:87:9d:27:01:38:62:0a:2d:91:
dd:9f:18:ef:bc:26:b0:14:18:c0:87:46:9f:81:28:
78:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:60:EE:6B:AE:C7:F6:9A:46:C3:F2:2A:08:5F:BF:C5:1B:D4:64:9A
X509v3 Authority Key Identifier:
keyid:D7:A8:00:68:BD:73:28:EF:41:12:0F:47:88:C2:8D:3A:92:04:70:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/C2Dua67H9ppGw_IqCF-_xRvUZJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.118.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:d1:b5:84:54:9d:65:b3:1d:dc:b3:cb:40:1c:2f:96:f8:9e:
90:54:d2:5f:f8:02:27:82:97:77:85:8d:85:b0:4b:55:c9:76:
b7:99:bb:7e:e3:0a:ca:04:2f:14:77:5d:9d:d1:28:47:15:5f:
41:f5:ba:3b:f8:9b:7d:7b:00:5e:2d:58:37:46:f4:18:84:d1:
22:2b:f1:e5:7d:62:67:42:63:3f:fe:f1:13:44:23:15:1f:d0:
25:33:d6:f2:62:bd:c0:b7:22:33:94:90:f3:c2:75:eb:eb:b7:
a8:d5:46:2a:87:1b:1d:f2:dd:2e:27:10:8b:a6:58:35:f6:b4:
d3:b6:07:aa:90:79:34:4f:fd:92:9f:06:56:fb:3a:f8:f6:3f:
2a:fa:84:ae:bb:f1:fe:87:c6:c1:c8:01:9c:cf:11:cb:11:8e:
6a:31:e7:50:2e:1f:7d:8a:1b:f9:d4:ea:43:f4:a9:02:8f:2b:
6f:d1:c4:34:6b:fb:0c:43:ca:91:df:77:26:23:a7:76:31:07:
2b:0d:33:33:02:1c:37:45:22:d0:2e:2f:3c:e6:74:0c:88:da:
e9:af:6d:fa:2b:c4:1c:b9:93:3f:0b:86:bf:6d:fd:a1:71:7a:
d8:46:d6:e7:60:f6:ac:64:3f:5e:5e:6a:41:28:e2:ad:64:21:
f8:2a:24:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 12:16:22 2026 by rpki-client