Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/rSFzoYg1DWGt5G0rymJYt80j5Qo.roa
File: rSFzoYg1DWGt5G0rymJYt80j5Qo.roa (raw, json)
Hash identifier: uBwbOZ8cehnb1tmNI9kGZz/QbOKevBgdJeXNpvm02qA=
Subject key identifier: AD:21:73:A1:88:35:0D:61:AD:E4:6D:2B:CA:62:58:B7:CD:23:E5:0A
Certificate issuer: /CN=44f56ecd3f4b1d6e8d669ead0e033fdaf0be4f40
Certificate serial: 019E1CA689A6EE6838560B6C4188635277BC
Authority key identifier: 44:F5:6E:CD:3F:4B:1D:6E:8D:66:9E:AD:0E:03:3F:DA:F0:BE:4F:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPVuzT9LHW6NZp6tDgM_2vC-T0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/rSFzoYg1DWGt5G0rymJYt80j5Qo.roa
Signing time: Tue 12 May 2026 14:45:36 +0000
ROA not before: Tue 12 May 2026 14:45:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48748
IP address blocks: 91.214.132.0/22 maxlen: 22
193.107.132.0/22 maxlen: 22
193.107.132.0/23 maxlen: 23
193.107.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPVuzT9LHW6NZp6tDgM_2vC-T0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:a6:89:a6:ee:68:38:56:0b:6c:41:88:63:52:77:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f56ecd3f4b1d6e8d669ead0e033fdaf0be4f40
Validity
Not Before: May 12 14:45:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad2173a188350d61ade46d2bca6258b7cd23e50a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:24:45:be:fa:cd:d6:34:2d:ad:e9:b6:00:98:
7d:de:d7:39:7a:22:54:c5:eb:38:94:e9:e4:ad:91:
1c:3f:14:f9:0c:8c:cb:02:e5:95:6b:6d:a9:df:15:
16:57:c9:1b:fe:e0:f8:8b:5b:1c:07:83:4e:d4:fa:
96:95:ed:8c:ca:b8:61:ae:80:77:6a:0f:a4:c4:72:
ea:c6:c2:95:96:2d:bb:aa:61:00:fe:8c:b2:2c:64:
6d:1b:ca:c8:80:79:f7:9a:2a:13:1f:5e:cc:d1:6f:
7b:76:65:a3:ec:df:88:b0:1e:fe:50:78:9e:5f:17:
41:33:71:28:e6:7e:31:18:d0:a2:6f:df:22:ab:6f:
dc:d3:66:4e:e4:ac:ea:f0:c2:fe:c5:0f:63:cb:b0:
44:60:f6:7a:a5:35:72:15:6f:40:17:96:ac:c7:85:
6d:e6:13:e5:61:74:a4:97:58:70:e7:26:62:c6:c4:
ae:68:53:94:cd:3e:52:bd:f6:31:af:79:ee:35:bb:
90:9c:70:2e:80:c2:e0:6f:9b:a4:a4:ac:9f:43:e5:
dd:a0:fd:d6:94:24:7b:ff:38:bb:aa:5a:f0:75:50:
3d:6b:04:4e:98:be:ce:04:07:77:eb:fe:9c:9f:a1:
d9:62:21:89:d8:cf:53:de:62:8f:ed:de:05:5e:77:
4b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:21:73:A1:88:35:0D:61:AD:E4:6D:2B:CA:62:58:B7:CD:23:E5:0A
X509v3 Authority Key Identifier:
keyid:44:F5:6E:CD:3F:4B:1D:6E:8D:66:9E:AD:0E:03:3F:DA:F0:BE:4F:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPVuzT9LHW6NZp6tDgM_2vC-T0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/rSFzoYg1DWGt5G0rymJYt80j5Qo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/0e01de-cde3-447f-b5dc-036354a2c22f/1/RPVuzT9LHW6NZp6tDgM_2vC-T0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.132.0/22
193.107.132.0/22
Signature Algorithm: sha256WithRSAEncryption
98:1e:71:ea:45:06:90:1c:ff:5f:00:41:bd:48:25:87:06:0f:
a8:d6:d0:0f:c2:49:ef:ff:6c:98:49:d8:37:0e:f2:b7:ee:94:
95:cb:7b:16:43:88:16:fb:5e:f8:03:71:4f:f2:8c:79:7b:18:
63:5b:ec:7d:7b:d2:e6:df:32:b4:6c:5e:da:8b:b6:a7:22:82:
88:7e:6d:ca:20:24:64:d4:76:2c:1f:65:bf:0d:10:ab:8b:88:
79:0c:3f:a6:8c:bd:62:12:9e:68:da:6e:bf:de:49:bf:10:d9:
3b:30:f4:6b:5a:aa:7a:22:d0:3f:d1:c4:9a:de:64:e8:eb:c3:
0b:e4:29:66:4e:0b:9b:24:be:3c:5a:42:11:d4:d1:69:4c:03:
e7:3d:87:97:e6:4e:8a:ea:e1:52:47:61:3c:b5:d3:87:f1:ea:
47:f6:a2:60:fd:af:7a:a1:be:50:73:66:dd:04:fc:35:c9:0b:
0a:eb:40:f3:52:09:eb:8d:fa:0c:36:d2:ea:45:1b:cd:ed:21:
c3:d4:cf:53:a1:a8:60:c4:ff:94:e2:b1:66:eb:30:b4:52:89:
c3:56:3a:60:b5:b9:29:5f:ef:ea:db:77:fd:c6:0e:0a:36:c7:
56:a5:16:60:c6:bc:8a:38:ea:3d:ba:9a:6b:30:26:ab:3d:cf:
d4:61:f0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:31:31 2026 by rpki-client