Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/_4Dr609YNOhUDKTHQ0TUGo3pIWU.roa
File: _4Dr609YNOhUDKTHQ0TUGo3pIWU.roa (raw, json)
Hash identifier: vQ7QP60bTAcq9tzfKC7074Bvhn9+y8dlcR2Sih4FuxU=
Subject key identifier: FF:80:EB:EB:4F:58:34:E8:54:0C:A4:C7:43:44:D4:1A:8D:E9:21:65
Certificate issuer: /CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Certificate serial: 01A0CF379BF062E0EFB8F152C21275B8F5A2
Authority key identifier: 1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/_4Dr609YNOhUDKTHQ0TUGo3pIWU.roa
Signing time: Wed 23 Sep 2026 17:02:03 +0000
ROA not before: Wed 23 Sep 2026 17:02:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29491
IP address blocks: 91.193.164.0/22 maxlen: 22
94.45.128.0/19 maxlen: 19
94.45.128.0/24 maxlen: 24
94.45.130.0/23 maxlen: 23
94.45.132.0/22 maxlen: 22
94.45.137.0/24 maxlen: 24
94.45.138.0/24 maxlen: 24
94.45.140.0/23 maxlen: 23
94.45.143.0/24 maxlen: 24
94.45.145.0/24 maxlen: 24
194.187.108.0/22 maxlen: 22
194.187.110.0/24 maxlen: 24
195.137.202.0/23 maxlen: 23
195.191.214.0/23 maxlen: 23
2a03:5dc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:37:9b:f0:62:e0:ef:b8:f1:52:c2:12:75:b8:f5:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Validity
Not Before: Sep 23 17:02:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff80ebeb4f5834e8540ca4c74344d41a8de92165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:21:2d:03:49:85:48:76:23:31:d9:b4:7d:c9:
03:20:d3:e1:6c:85:2f:fc:84:a2:5a:8c:91:bc:2f:
93:bd:59:2a:54:26:2c:49:89:9f:7b:a1:83:96:a6:
ee:40:16:2a:d1:f2:4c:00:1f:55:7f:99:53:9c:d2:
d2:89:3a:2f:5b:98:55:86:2f:8e:d4:fa:73:9a:73:
e0:78:fd:eb:53:23:03:47:f8:ee:11:d9:a7:e5:83:
bb:cd:4d:8e:f9:22:a6:09:5d:9d:c5:10:80:76:32:
58:67:b1:4d:1a:ca:26:d5:bc:91:bd:51:64:17:4e:
c5:9d:79:cd:c3:a5:71:65:8c:4b:fc:a6:21:8a:d3:
13:9a:fb:b2:dc:bd:84:f2:42:87:6b:9d:e8:22:85:
9d:00:d0:ab:07:9c:02:bd:5f:01:05:04:73:6a:fc:
0f:e7:d2:ef:d8:c4:92:56:96:6c:cd:da:dd:00:78:
7d:35:0c:7a:59:ef:a2:01:d3:a7:e4:99:2d:e0:56:
da:14:b7:d9:80:b3:36:db:f9:24:7a:bb:61:e5:56:
59:6f:d2:56:d5:9c:9a:95:3a:b5:d5:22:83:f2:86:
b4:db:6c:56:28:e7:b3:f3:34:fc:c9:41:57:d1:8b:
35:3f:6e:f9:45:66:9b:19:2f:27:24:ce:22:49:fa:
8f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:80:EB:EB:4F:58:34:E8:54:0C:A4:C7:43:44:D4:1A:8D:E9:21:65
X509v3 Authority Key Identifier:
keyid:1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/_4Dr609YNOhUDKTHQ0TUGo3pIWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.164.0/22
94.45.128.0/19
194.187.108.0/22
195.137.202.0/23
195.191.214.0/23
IPv6:
2a03:5dc0::/29
Signature Algorithm: sha256WithRSAEncryption
15:c8:7c:d1:50:98:8a:a0:6c:ec:d7:91:21:23:78:8e:35:62:
09:dd:b1:00:02:8a:08:66:9b:e1:fb:76:6c:8c:cd:75:71:00:
3c:69:11:6a:69:56:14:42:43:5c:fb:c9:78:46:8e:05:02:9e:
7a:3c:ec:11:82:63:c5:e2:98:5a:95:ff:a9:70:64:fc:40:ce:
79:2d:74:85:52:5a:3e:61:c6:f4:45:49:95:da:b4:55:ca:b4:
e0:24:21:13:24:05:98:8b:16:55:93:d8:ce:4d:8d:07:7d:6f:
5f:72:bc:f6:3d:cb:36:8a:65:05:9d:00:86:e5:23:ba:09:95:
50:30:7a:94:de:db:8f:ed:3c:d9:d7:73:40:bb:c5:95:52:a1:
d8:b0:57:2a:67:19:db:c7:5c:55:14:d6:9b:3e:a9:31:c9:19:
90:d2:1b:01:0d:cc:b9:c4:92:5f:9f:20:f6:bb:b6:6f:6a:59:
32:5c:44:c7:77:5c:0d:ee:a5:bf:f2:69:3c:e2:1e:fb:d7:a8:
99:6a:c4:11:45:0f:6c:59:34:6d:12:2d:fc:a0:f9:12:a5:e2:
88:0f:24:1d:c2:2c:7a:17:21:cc:59:ba:52:f8:6e:a6:ed:5c:
0a:9b:49:5a:90:ae:13:91:9a:54:f3:7c:18:23:45:1c:79:7c:
e7:17:6f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:02:14 2026 by rpki-client