Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/Bz5NRIKEHWfWVwIKVd1EZ3eOmwc.roa
File: Bz5NRIKEHWfWVwIKVd1EZ3eOmwc.roa (raw, json)
Hash identifier: xvKgGhY+ZlcBTXkjAQHJhU0l6IZYcdXuey6wO6lkMfc=
Subject key identifier: 07:3E:4D:44:82:84:1D:67:D6:57:02:0A:55:DD:44:67:77:8E:9B:07
Certificate issuer: /CN=d022158fd4f7e3096a037dc3cfabd8f34eeaabd1
Certificate serial: 019F23691CAA1B92DC89F1EC2100AF6909FB
Authority key identifier: D0:22:15:8F:D4:F7:E3:09:6A:03:7D:C3:CF:AB:D8:F3:4E:EA:AB:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CIVj9T34wlqA33Dz6vY807qq9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/Bz5NRIKEHWfWVwIKVd1EZ3eOmwc.roa
Signing time: Thu 02 Jul 2026 15:18:38 +0000
ROA not before: Thu 02 Jul 2026 15:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62350
IP address blocks: 91.240.236.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CIVj9T34wlqA33Dz6vY807qq9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1c:aa:1b:92:dc:89:f1:ec:21:00:af:69:09:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d022158fd4f7e3096a037dc3cfabd8f34eeaabd1
Validity
Not Before: Jul 2 15:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=073e4d4482841d67d657020a55dd4467778e9b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e8:1d:27:db:e7:59:eb:b0:19:c5:c6:8a:37:
f9:86:2e:5e:dd:dc:f9:88:86:a3:d9:73:57:39:78:
2e:ac:98:93:05:47:28:af:61:6c:fd:84:2d:a0:8d:
19:7e:5f:3a:a7:e0:3a:d9:89:84:fd:2e:1f:5f:65:
64:3e:4e:0f:f0:16:88:74:19:31:e2:2b:72:28:54:
36:e4:17:95:67:85:ca:63:5e:67:09:12:63:a9:e8:
ab:09:b0:d2:1f:46:cf:a2:a9:ea:91:63:58:bc:23:
3e:7f:2b:f7:d2:b7:56:b0:20:08:37:8c:54:6f:48:
ed:ea:a9:d8:b0:d0:c4:a6:1c:78:5f:3b:dd:23:60:
b3:35:b3:a2:e1:28:c8:12:e2:8e:82:ab:b1:ae:15:
a5:61:b3:9c:6f:9e:66:31:9c:19:64:80:b7:9e:86:
47:31:cd:44:04:66:9d:7d:10:73:3e:e0:0a:e4:31:
54:71:29:78:26:2f:b6:88:cc:6b:29:cb:7e:f9:a0:
45:93:75:c5:73:69:cc:95:65:96:72:03:f8:5c:fc:
ff:b0:ba:14:b8:9b:a3:3a:15:c8:6e:70:b9:d6:ef:
6b:28:15:b1:2a:5d:28:3c:65:04:fa:28:19:bd:fd:
c8:dc:ac:e5:c8:75:1c:0a:c7:f6:98:28:88:95:4b:
96:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3E:4D:44:82:84:1D:67:D6:57:02:0A:55:DD:44:67:77:8E:9B:07
X509v3 Authority Key Identifier:
keyid:D0:22:15:8F:D4:F7:E3:09:6A:03:7D:C3:CF:AB:D8:F3:4E:EA:AB:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CIVj9T34wlqA33Dz6vY807qq9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/Bz5NRIKEHWfWVwIKVd1EZ3eOmwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.236.0/23
Signature Algorithm: sha256WithRSAEncryption
65:c3:a6:a7:09:7a:37:83:fe:3d:b2:9f:2b:3a:54:fc:e7:4b:
96:43:e4:60:01:78:f6:a1:16:66:8d:5a:7e:cb:e9:57:09:9e:
63:f1:89:c0:74:56:f7:2e:aa:fe:5a:3c:b4:2e:85:c2:c8:18:
e6:c5:63:1f:69:a0:d9:10:ee:60:c4:59:00:93:f8:63:5c:95:
0f:a1:29:77:61:da:1b:31:d7:85:cd:cb:01:15:48:c1:c5:75:
8d:07:df:06:1a:71:fa:15:b7:8e:1e:b6:a5:f6:d0:9d:9e:8c:
3b:30:10:a3:e1:c3:d0:d5:26:30:5b:79:7d:5b:91:6c:86:9e:
a7:a5:cc:1d:52:5d:30:eb:ff:1c:c7:92:69:fa:ad:17:d6:8b:
b7:cb:19:16:78:9a:68:7f:90:36:5b:21:bd:84:11:2e:2d:e8:
74:bc:45:4e:b0:78:87:61:5f:ba:96:dc:74:ef:2f:d3:36:80:
e1:fa:c5:64:8c:73:bb:f8:6f:69:8b:94:74:83:09:c2:58:75:
82:40:e6:b6:ce:ba:62:08:68:36:24:1a:b3:d5:62:80:1e:a1:
b6:a4:ff:5c:34:43:ea:5b:f4:0b:73:5d:c8:0f:31:a3:58:b5:
63:1a:7c:9a:7d:82:4c:84:12:af:36:b3:a7:20:82:e5:6a:4e:
dc:db:97:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:36 2026 by rpki-client