Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/NrPhMbNEQ5Hy65EgCIMVMLJW6SU.roa
File: NrPhMbNEQ5Hy65EgCIMVMLJW6SU.roa (raw, json)
Hash identifier: pgLvN3w9KeywnJfFLpn8p6RzPM/iAQ+Wg4umJ0qc8jo=
Subject key identifier: 36:B3:E1:31:B3:44:43:91:F2:EB:91:20:08:83:15:30:B2:56:E9:25
Certificate issuer: /CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
Certificate serial: 019EFEF1701B8716C99FE5F763EDC727773E
Authority key identifier: 12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/NrPhMbNEQ5Hy65EgCIMVMLJW6SU.roa
Signing time: Thu 25 Jun 2026 13:21:36 +0000
ROA not before: Thu 25 Jun 2026 13:21:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56971
IP address blocks: 91.108.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fe:f1:70:1b:87:16:c9:9f:e5:f7:63:ed:c7:27:77:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
Validity
Not Before: Jun 25 13:21:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36b3e131b3444391f2eb912008831530b256e925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3d:0c:ce:df:55:bd:4d:ef:cb:b2:5e:cf:9e:
60:5f:6f:24:02:4e:95:50:a9:36:69:c8:77:e6:d6:
c0:2b:47:4b:c5:96:57:e1:99:01:1e:ce:f3:81:77:
84:b1:cb:41:f7:86:d5:e4:ee:58:33:1a:51:69:df:
dc:a5:4f:ff:ca:2f:ff:cf:0e:3f:1b:5b:25:8e:b0:
93:43:bd:35:0f:16:b9:6e:cb:ba:e1:07:ff:e8:5c:
39:b2:c2:5a:e0:d8:b2:77:e5:1b:27:44:c5:28:b3:
47:87:0e:6a:60:7b:b3:44:72:b4:de:07:c1:89:88:
b9:af:28:2b:7a:0c:fd:a1:8f:a0:65:9c:d4:08:e6:
11:80:61:c2:24:d5:13:ac:ff:9b:01:f8:49:14:f9:
a7:89:a2:9b:e9:5e:18:2d:74:bb:e7:7c:0d:45:04:
b1:5a:26:5c:84:b2:8a:9f:80:bf:2f:9e:71:86:6e:
d2:57:9a:2a:9c:b8:35:b9:08:0d:e4:ea:e9:f0:58:
51:cc:9b:1b:74:53:74:c4:b3:35:32:ce:60:72:aa:
7a:43:fe:c2:23:a7:92:d9:41:11:5b:be:70:8a:03:
2b:44:66:f4:d2:55:31:6f:fe:a0:69:25:95:f4:e3:
74:3e:fb:96:c4:d3:ac:ff:44:ed:7b:ad:25:98:8e:
0a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B3:E1:31:B3:44:43:91:F2:EB:91:20:08:83:15:30:B2:56:E9:25
X509v3 Authority Key Identifier:
keyid:12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/NrPhMbNEQ5Hy65EgCIMVMLJW6SU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.189.0/24
Signature Algorithm: sha256WithRSAEncryption
66:cb:ec:84:c5:46:41:e1:5a:72:f2:b6:d9:30:d1:1d:87:25:
90:d9:20:25:6f:30:ab:6a:a3:d6:e0:f3:23:3f:64:5f:ed:8a:
92:27:a3:23:67:43:4c:2a:95:a9:a9:34:b3:f5:d9:76:f9:16:
3e:58:f9:74:29:1b:86:eb:2a:9e:80:bf:b3:bd:fc:1b:6b:72:
9f:75:3e:17:e0:29:c3:db:c3:7f:86:09:b1:96:41:bf:a3:f6:
cb:ff:32:87:aa:c5:8f:3a:5c:14:ba:0f:33:fd:ba:82:f0:f8:
12:02:3b:6d:76:f4:e6:7a:ad:9f:54:b8:3d:a3:f4:7e:ad:17:
c2:b1:27:fa:ae:ee:7a:1e:8a:51:ef:0f:b8:28:07:f2:96:93:
e7:43:8a:8c:f0:1c:f6:b4:76:31:c0:bb:75:ad:9d:42:f7:fa:
9f:08:4b:d6:6a:f3:a3:26:88:83:b7:fd:a0:ec:be:73:39:96:
21:9c:c2:0b:50:32:67:17:78:45:ee:2f:df:fc:03:b7:1a:10:
e4:dd:86:43:b8:43:bd:57:85:3e:c5:21:a2:d9:c8:7b:fd:9e:
7f:c3:97:93:d1:9f:a4:54:05:ef:76:5f:aa:4a:93:d1:3e:82:
b3:64:39:89:71:86:67:1b:c9:1a:06:cb:ae:81:55:d8:1b:8f:
f9:71:f9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 15:18:03 2026 by rpki-client