Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/05rFXFI3A4kfX6r22QyghCwPirk.roa
File: 05rFXFI3A4kfX6r22QyghCwPirk.roa (raw, json)
Hash identifier: 8PjiY9BzJB2DkdX2+hxe3msVLY8QoBKmds38yfTHkwE=
Subject key identifier: D3:9A:C5:5C:52:37:03:89:1F:5F:AA:F6:D9:0C:A0:84:2C:0F:8A:B9
Certificate issuer: /CN=6de2aab077c9eef103f97984f309d891e5a19983
Certificate serial: 019FF49CE5EFEB8C93FAC77A9649606FF892
Authority key identifier: 6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/05rFXFI3A4kfX6r22QyghCwPirk.roa
Signing time: Wed 12 Aug 2026 06:15:50 +0000
ROA not before: Wed 12 Aug 2026 06:15:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200590
IP address blocks: 91.147.98.0/24 maxlen: 24
91.147.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f4:9c:e5:ef:eb:8c:93:fa:c7:7a:96:49:60:6f:f8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6de2aab077c9eef103f97984f309d891e5a19983
Validity
Not Before: Aug 12 06:15:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d39ac55c523703891f5faaf6d90ca0842c0f8ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d4:aa:79:42:30:1a:93:4f:99:97:21:9f:22:
14:70:62:77:2a:68:b6:4d:e1:91:94:b9:55:51:a2:
c8:86:26:4c:53:b9:36:ba:18:1f:9d:4d:9b:ef:91:
82:52:a3:1b:e5:a6:a8:c6:b9:e1:e0:e5:c6:8c:28:
43:dc:43:42:4d:19:22:a7:f2:1e:ba:21:6f:25:0d:
04:5c:c7:c1:cd:67:e5:36:e2:cf:4f:b8:ea:40:e0:
3a:25:90:7c:26:75:a3:cd:f9:d8:53:d9:6b:ca:60:
30:72:e3:29:fe:f6:5c:5c:9b:93:3b:9f:c5:06:49:
a4:6c:91:55:25:3e:ac:88:b0:df:24:02:49:61:bf:
8f:a3:3c:7b:37:03:69:87:b8:30:47:41:39:78:bc:
99:97:8b:cc:a0:f5:8d:22:58:5f:e1:32:f9:5f:e7:
8a:0b:89:f3:ea:4f:56:57:36:e9:86:d6:4b:21:4e:
c9:5d:b6:1b:a1:8b:7b:f9:0a:2d:75:d7:48:86:a2:
8e:5b:29:a0:0e:43:dc:1a:7c:37:e8:b3:7d:4b:47:
54:42:10:4f:f5:ee:0b:f4:3c:40:21:52:3a:ff:f0:
84:0d:0e:0b:4e:b6:ed:53:da:e2:20:39:6d:e6:05:
c4:e6:d6:97:40:f1:b8:bb:84:9b:e3:6f:37:aa:40:
2c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:9A:C5:5C:52:37:03:89:1F:5F:AA:F6:D9:0C:A0:84:2C:0F:8A:B9
X509v3 Authority Key Identifier:
keyid:6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/05rFXFI3A4kfX6r22QyghCwPirk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.98.0/23
Signature Algorithm: sha256WithRSAEncryption
49:07:5a:0c:c3:47:79:51:1d:c9:5e:f3:91:a8:80:22:b3:25:
83:df:26:b7:25:73:be:2f:dc:76:44:90:11:31:9c:f7:a2:82:
7d:bb:d7:32:5d:8c:80:41:7e:d2:f0:ef:94:83:75:97:d4:f1:
8d:66:1f:ff:54:c5:b6:00:aa:ab:c3:3d:af:1f:47:d2:10:38:
d0:39:3a:88:20:06:a4:6d:27:70:2f:46:38:29:2d:89:9e:54:
7d:a2:46:b4:64:10:5d:a1:73:15:60:07:86:90:d5:df:e3:07:
90:35:75:9a:9e:0f:d3:14:9e:2c:e2:2b:23:71:54:17:25:de:
9f:ed:a1:69:26:39:92:b6:5b:70:66:d5:3e:73:cf:66:cb:6b:
f0:92:09:dc:89:70:f9:fb:59:ba:ec:78:2f:ee:e2:eb:63:25:
09:c4:94:b3:d5:be:4d:25:cc:45:54:76:9b:02:1e:85:28:f1:
3a:03:ff:45:92:9d:c0:e4:d9:ab:f8:3a:cb:cc:af:7e:cc:1f:
28:3a:03:52:df:47:55:3a:aa:08:a2:88:f4:d9:9e:89:5f:63:
af:6a:e9:40:33:c5:95:9f:64:af:af:a1:31:08:34:93:c1:6d:
58:5c:01:aa:25:d5:7a:9e:35:9c:31:a3:4b:e5:21:fb:50:97:
66:80:32:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 20:10:09 2026 by rpki-client