Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/1-5SN3I-IsoUjfo8g5-hBdsRRZ9o.roa
File: 1-5SN3I-IsoUjfo8g5-hBdsRRZ9o.roa (raw, json)
Hash identifier: s09l3XLrS1nG2HYt50hW4zF2T2VLAEk4Mtf1043eyYs=
Subject key identifier: FB:94:8D:DC:8F:88:B2:85:23:7E:8F:20:E7:E8:41:76:C4:51:67:DA
Certificate issuer: /CN=0e64f81b9e36b849917787678d014db4bfcef311
Certificate serial: 019F228F4BA90DACAF656D03103AA6801F14
Authority key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/1-5SN3I-IsoUjfo8g5-hBdsRRZ9o.roa
Signing time: Thu 02 Jul 2026 11:20:44 +0000
ROA not before: Thu 02 Jul 2026 11:20:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3258
IP address blocks: 91.243.68.0/24 maxlen: 24
146.19.19.0/24 maxlen: 32
146.19.163.0/24 maxlen: 32
194.50.154.0/24 maxlen: 32
2a12:a300::/29 maxlen: 48
2a14:1f80::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:8f:4b:a9:0d:ac:af:65:6d:03:10:3a:a6:80:1f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e64f81b9e36b849917787678d014db4bfcef311
Validity
Not Before: Jul 2 11:20:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb948ddc8f88b285237e8f20e7e84176c45167da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ec:84:1c:f5:a3:33:c7:4b:e1:d6:4d:3a:e0:
da:30:89:60:ba:f3:51:bc:9d:1f:f9:ed:8a:64:47:
ef:e6:aa:f7:b6:e2:8f:c0:13:bd:72:ae:83:46:71:
c9:d7:3c:b1:56:e8:bf:0e:b6:61:13:32:86:a8:9f:
f7:2b:34:11:3c:16:39:a3:20:6e:2f:5d:b0:ac:be:
77:1c:25:c1:a8:72:8d:cb:42:49:b5:07:22:8a:e5:
c3:79:10:f8:1e:3a:3c:d2:f5:a6:98:a1:ac:99:40:
23:f8:6f:80:7d:5e:02:fd:c3:f9:16:ea:cf:53:39:
7a:32:20:c3:44:25:9d:f9:03:89:b9:3c:30:6d:50:
db:84:69:a4:e3:dd:9b:91:36:ea:62:e9:25:f6:6d:
55:af:b6:79:81:71:8e:ac:2f:e7:94:5c:fb:f0:70:
62:71:f1:aa:31:96:6a:e3:41:c9:cb:f4:0a:8f:6b:
72:81:06:4d:c0:73:b4:f4:13:70:1e:fb:b2:9f:ae:
79:6c:82:16:f6:53:b0:4b:5a:1b:c9:cf:e0:b7:f9:
0c:bd:a2:aa:af:32:b0:0c:81:cf:e9:b1:c7:03:b5:
24:01:75:55:fc:1b:b1:69:d3:85:0b:a0:f5:3d:03:
9e:f3:9c:5d:61:44:92:2f:27:cb:93:46:48:91:b1:
fd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:94:8D:DC:8F:88:B2:85:23:7E:8F:20:E7:E8:41:76:C4:51:67:DA
X509v3 Authority Key Identifier:
keyid:0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/1-5SN3I-IsoUjfo8g5-hBdsRRZ9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.68.0/24
146.19.19.0/24
146.19.163.0/24
194.50.154.0/24
IPv6:
2a12:a300::/29
2a14:1f80::/29
Signature Algorithm: sha256WithRSAEncryption
6b:60:09:5b:e0:d9:4b:df:cc:e8:73:bf:8d:9f:b0:f7:93:3b:
bb:ea:d1:5e:75:d4:1c:5f:c8:c6:55:0a:fe:b4:46:d2:de:32:
1a:f3:d5:b1:8c:5b:fc:01:51:d6:3c:e7:f8:76:90:82:b1:67:
55:07:47:57:3d:26:4f:ce:11:05:ff:5b:b9:5c:02:ba:61:ed:
6c:69:eb:f5:af:d7:b7:c5:b5:9b:66:32:74:a7:87:07:70:c8:
4b:d0:44:72:27:05:e5:4c:af:86:6b:18:0e:76:43:e5:63:82:
09:ea:5f:8a:62:be:3d:bf:e8:cb:0d:e6:7f:fc:6b:34:f1:34:
eb:cb:4b:26:8e:7f:94:39:5e:65:72:59:ca:3c:7e:ab:fc:83:
63:f3:7a:90:12:a8:91:f1:5f:63:eb:32:4e:16:b1:7b:a5:8a:
1d:f3:e6:91:e0:e7:a8:73:91:a8:12:c8:9d:2c:63:78:1d:9b:
d2:d0:1b:1f:c1:43:2a:5d:f1:fe:99:4a:d1:9f:e5:82:98:5e:
f9:42:e8:e9:36:f4:62:07:a6:ad:bb:eb:e6:49:2b:32:1b:dc:
ae:00:7f:dc:20:ab:d8:81:3e:73:0f:a8:ec:5f:a3:f1:1b:96:
70:7e:23:5b:10:5b:57:80:8b:cc:5b:f6:7b:c4:ee:3e:05:13:
a7:b2:1f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:00:05 2026 by rpki-client