Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/IXpJb_lWua8GRcgKMX3afEfyCBc.roa
File: IXpJb_lWua8GRcgKMX3afEfyCBc.roa (raw, json)
Hash identifier: N2pKb4Jqk0q1kheA3ZAWsc2ZJyAIVTRIfapxsw+/tIA=
Subject key identifier: 21:7A:49:6F:F9:56:B9:AF:06:45:C8:0A:31:7D:DA:7C:47:F2:08:17
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019D1B0194E5886DA7A1967B8FB6D4143811
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/IXpJb_lWua8GRcgKMX3afEfyCBc.roa
Signing time: Mon 23 Mar 2026 14:03:01 +0000
ROA not before: Mon 23 Mar 2026 14:03:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210006
IP address blocks: 91.227.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1b:01:94:e5:88:6d:a7:a1:96:7b:8f:b6:d4:14:38:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Mar 23 14:03:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=217a496ff956b9af0645c80a317dda7c47f20817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:33:25:88:21:bd:86:99:a4:b0:a3:df:75:e6:
dd:52:bb:a8:c7:00:7c:fa:82:9f:9a:b2:54:9f:63:
9a:73:5d:2b:49:b3:40:fd:e0:1d:d3:9b:e3:42:5c:
80:0c:2a:f6:0d:41:b7:90:2a:a2:b0:d0:cc:11:61:
42:1e:85:57:64:ef:31:25:32:8f:72:38:08:06:ed:
a7:ad:9f:fd:5f:98:c2:05:8b:e1:ae:82:41:fa:86:
ce:d4:76:bd:77:2a:c2:19:9b:ed:a9:65:14:36:8b:
59:19:c2:8d:87:a7:b3:89:d0:d2:e9:c8:1b:d6:c2:
91:07:28:f6:6d:44:a8:bf:4f:47:e7:17:03:f4:b9:
e3:f2:11:eb:54:78:14:e5:d9:05:12:ff:4f:6e:35:
ad:09:97:c2:cc:69:1d:31:67:7d:65:a1:05:04:50:
7e:66:43:19:1a:aa:9b:c0:3d:73:6c:70:06:91:c3:
96:31:f6:19:a7:0d:cb:2e:1b:63:19:a2:92:f3:44:
76:de:b7:ae:2b:88:72:25:61:5c:05:42:09:d7:b2:
8b:e6:11:09:dd:a1:70:48:65:79:c3:61:b8:99:e9:
ab:00:0f:c0:1a:ff:98:2a:98:37:09:99:fe:e0:48:
9f:34:fb:13:e4:ea:25:98:e9:4c:86:b4:6a:10:5e:
04:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7A:49:6F:F9:56:B9:AF:06:45:C8:0A:31:7D:DA:7C:47:F2:08:17
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/IXpJb_lWua8GRcgKMX3afEfyCBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.114.0/24
Signature Algorithm: sha256WithRSAEncryption
87:0b:01:56:42:d7:65:b9:9d:a3:50:3e:71:3a:d2:fe:32:dc:
bd:4a:07:25:03:de:0c:df:41:ee:45:90:3e:ce:38:43:0a:7d:
63:4b:7e:0b:5e:bd:3b:17:7b:47:90:30:82:9b:c7:45:c0:99:
9e:f9:2e:fb:21:85:36:0a:d9:8f:0c:b0:20:f3:1f:cc:b3:a3:
da:01:23:6d:45:34:e3:07:29:ff:ec:6b:c3:e1:6e:f6:3c:e4:
7f:e4:93:2d:c8:ba:b9:d0:2b:7a:be:13:9f:fe:b0:c3:6b:fb:
66:77:b1:8e:68:3b:00:d9:35:8f:cc:3a:10:0c:95:b9:12:93:
1b:d0:73:8f:f3:2f:4c:2b:d1:ef:fa:60:6f:e2:78:64:3a:32:
7d:04:5e:da:22:2c:39:c0:20:15:6d:45:79:30:9c:eb:cf:bf:
ee:6a:15:85:f3:ef:90:bc:bc:1e:ce:c2:82:02:4e:2f:fa:d9:
46:d2:6b:24:72:cb:13:c2:78:5f:3d:bd:98:a0:ac:09:6f:ed:
b1:6d:ec:c1:ee:52:e2:d8:b8:2f:e8:bf:ee:e0:47:5d:b6:2e:
04:e0:a4:cd:0a:95:7a:e5:b7:e9:fd:29:0e:c8:23:7b:5d:d7:
22:63:39:bd:08:ab:05:14:5b:23:94:fa:a2:4b:8e:db:05:d4:
66:a9:37:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:47:01 2026 by rpki-client