Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/1-Kn9rZ3EpyAdOInb_UyGK70XqeU.roa
File: 1-Kn9rZ3EpyAdOInb_UyGK70XqeU.roa (raw, json)
Hash identifier: bC2ZSqIYPz9d1sFK8N82Sqnihc8qevEeHEpU1XmcKZg=
Subject key identifier: F8:A9:FD:AD:9D:C4:A7:20:1D:38:89:DB:FD:4C:86:2B:BD:17:A9:E5
Certificate issuer: /CN=110e56177308c20c42fbf42f310f4c0ef6b27890
Certificate serial: 01A001F3766BBAFDCDD8EF5A9D1327436E92
Authority key identifier: 11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/1-Kn9rZ3EpyAdOInb_UyGK70XqeU.roa
Signing time: Fri 14 Aug 2026 20:25:27 +0000
ROA not before: Fri 14 Aug 2026 20:25:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36351
IP address blocks: 91.206.64.0/23 maxlen: 23
91.206.64.0/24 maxlen: 24
91.206.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:f3:76:6b:ba:fd:cd:d8:ef:5a:9d:13:27:43:6e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=110e56177308c20c42fbf42f310f4c0ef6b27890
Validity
Not Before: Aug 14 20:25:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8a9fdad9dc4a7201d3889dbfd4c862bbd17a9e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:aa:1b:06:18:7a:66:5a:a3:63:b1:c8:8f:1a:
d3:99:f9:95:50:84:07:c2:7f:25:23:df:dc:f4:13:
35:21:6c:2a:ac:f9:b7:bb:16:7e:35:ec:cd:e2:38:
ee:70:14:b0:b2:f1:60:2d:bc:e2:19:ee:a7:a4:4d:
0a:a9:1e:cf:85:de:bb:7c:f9:0f:ef:c6:ad:45:50:
87:06:fe:dc:c1:62:49:90:dd:fc:3d:b0:48:9a:c7:
cd:12:ee:ff:94:83:f0:08:81:26:59:f9:3f:08:1e:
e3:84:f7:07:58:8a:b1:6f:80:a0:f0:cd:8f:b8:5d:
ee:9a:aa:eb:11:bb:d1:aa:99:97:a0:57:74:d0:17:
8e:d2:d0:86:d4:76:47:ce:96:43:98:88:6c:3f:77:
56:ab:ee:a0:28:0e:69:7a:c0:1d:22:90:40:4e:85:
61:42:25:f3:3b:30:57:05:a8:22:d2:69:38:82:2f:
2c:a9:13:98:38:9b:f0:89:8e:b0:d8:61:9d:5e:83:
80:d6:c3:0e:90:de:b7:76:88:b2:97:ef:43:1c:4e:
08:25:48:8d:97:4d:3d:97:c9:f4:45:2b:a4:72:96:
75:11:b1:cf:25:72:26:41:1f:e7:e4:3a:fc:8f:8c:
a7:fa:82:59:ad:9e:1a:14:ee:83:4b:3f:9b:37:f5:
0e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A9:FD:AD:9D:C4:A7:20:1D:38:89:DB:FD:4C:86:2B:BD:17:A9:E5
X509v3 Authority Key Identifier:
keyid:11:0E:56:17:73:08:C2:0C:42:FB:F4:2F:31:0F:4C:0E:F6:B2:78:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/1-Kn9rZ3EpyAdOInb_UyGK70XqeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0e5711-2fd4-40ca-9136-6f4e6585b54b/1/EQ5WF3MIwgxC-_QvMQ9MDvayeJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.64.0/23
Signature Algorithm: sha256WithRSAEncryption
70:2b:14:20:4f:ba:5f:4d:2e:8b:9c:19:6c:9e:2e:46:89:4a:
55:1b:76:c2:60:c3:83:af:16:3b:3f:79:ca:b4:68:4b:b8:a8:
38:7c:dd:a4:e5:5c:d5:72:b3:72:b1:a5:90:87:b1:8c:55:1d:
f0:8a:3f:80:d2:cd:8b:12:d7:88:df:3e:2c:b8:55:ef:03:52:
ce:41:f5:4c:16:22:de:9e:cb:51:10:7d:31:d3:4d:7a:89:41:
60:44:e4:dd:1d:a3:dc:10:5d:e8:f3:7c:b1:19:7d:f4:e9:6d:
8d:34:0a:bd:d4:5c:d4:78:39:18:d9:2b:03:1b:43:df:99:d3:
15:26:05:04:e5:ff:d6:71:fd:77:a2:b9:0d:ae:b0:38:04:96:
36:5f:85:cf:4b:59:c2:95:d8:44:c3:0e:2d:18:52:0c:49:67:
d0:a3:47:0a:95:d8:85:96:08:84:a9:e5:bd:9a:31:a2:52:b3:
ef:de:08:c7:58:5c:f3:91:69:7e:b9:74:90:17:6f:31:35:0d:
38:4c:e0:83:13:36:3b:03:0d:86:8e:79:b9:bb:e6:30:87:92:
60:3c:11:8a:cf:11:d1:62:89:70:c5:fc:73:98:a3:24:a0:c1:
43:b6:1b:7e:cf:6a:8e:a2:19:e3:68:77:65:22:b3:2c:5d:09:
01:23:3a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:31:18 2026 by rpki-client