Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/O5hsMdJTfPAzmaKfTpZiqj_CLKU.roa
File: O5hsMdJTfPAzmaKfTpZiqj_CLKU.roa (raw, json)
Hash identifier: A55AVgMICSKylOppE+N1sSsiijjF/irpmh+Efa773iM=
Subject key identifier: 3B:98:6C:31:D2:53:7C:F0:33:99:A2:9F:4E:96:62:AA:3F:C2:2C:A5
Certificate issuer: /CN=438fe290df6b6aeced85e0a2c9383815c39962be
Certificate serial: 019F236902AD0AC7E62C246931694BF4494E
Authority key identifier: 43:8F:E2:90:DF:6B:6A:EC:ED:85:E0:A2:C9:38:38:15:C3:99:62:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4_ikN9rauztheCiyTg4FcOZYr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/O5hsMdJTfPAzmaKfTpZiqj_CLKU.roa
Signing time: Thu 02 Jul 2026 15:18:32 +0000
ROA not before: Thu 02 Jul 2026 15:18:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56835
IP address blocks: 91.227.180.0/22 maxlen: 22
176.113.164.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/Q4_ikN9rauztheCiyTg4FcOZYr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/Q4_ikN9rauztheCiyTg4FcOZYr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q4_ikN9rauztheCiyTg4FcOZYr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:02:ad:0a:c7:e6:2c:24:69:31:69:4b:f4:49:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=438fe290df6b6aeced85e0a2c9383815c39962be
Validity
Not Before: Jul 2 15:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3b986c31d2537cf03399a29f4e9662aa3fc22ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8f:0a:65:cb:22:9b:1a:0f:0f:b4:2c:c6:8f:
08:2e:9e:81:ac:34:98:1e:6e:92:fc:e9:72:ea:79:
c7:d8:20:29:0a:aa:32:e8:6e:13:2b:54:2c:a9:8c:
0a:65:11:0e:b0:e6:14:d1:cb:b9:65:4e:7d:f7:cc:
a2:4a:73:9d:b5:b8:70:87:9e:92:7a:cb:9f:98:51:
2d:3c:39:bf:69:6b:60:72:83:80:61:e6:95:0d:b8:
8d:11:ad:02:64:bc:b2:0c:66:53:7a:b4:df:6e:c5:
74:18:12:6f:d6:c1:6f:58:d7:82:e0:e6:14:97:b1:
13:d3:39:4f:87:57:4a:a6:ce:f1:65:92:d6:48:8d:
38:b5:38:ff:7f:ac:bd:82:64:bc:2a:bc:2c:52:21:
34:94:b7:96:27:27:81:a2:34:8e:36:08:0a:55:4e:
c7:d2:40:15:1d:32:f7:fb:97:f7:2e:7a:1f:57:1d:
b8:1d:5d:d3:74:3f:0e:57:9c:3b:5d:51:ae:99:ef:
eb:5c:26:0b:11:bc:0c:1d:17:59:90:86:d2:cd:8b:
dd:8f:83:c8:34:56:30:11:96:6d:fb:b2:8a:5f:eb:
53:71:be:83:af:19:b3:84:0d:45:90:fe:86:e6:ab:
ef:dd:bf:d0:d1:35:ff:3d:0e:f6:42:d1:dd:7a:e6:
b2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:98:6C:31:D2:53:7C:F0:33:99:A2:9F:4E:96:62:AA:3F:C2:2C:A5
X509v3 Authority Key Identifier:
keyid:43:8F:E2:90:DF:6B:6A:EC:ED:85:E0:A2:C9:38:38:15:C3:99:62:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4_ikN9rauztheCiyTg4FcOZYr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/O5hsMdJTfPAzmaKfTpZiqj_CLKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4ce933-488f-46b9-ac2c-7c93cae227bd/1/Q4_ikN9rauztheCiyTg4FcOZYr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.180.0/22
176.113.164.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:0f:1c:75:81:f9:77:7f:03:6c:3d:70:20:bd:a1:af:f5:1b:
ab:d6:c7:bb:4a:a1:12:2c:00:c3:7c:11:97:13:63:37:40:80:
28:5d:31:4a:19:f6:9e:27:e4:35:12:50:d6:3e:d6:36:ae:53:
15:84:91:5e:aa:db:ce:d4:cb:a8:f1:25:f1:86:7a:cf:39:4e:
bb:76:2c:cc:32:c3:e8:36:18:b4:b0:5d:71:e8:df:be:b4:7e:
5b:d1:e2:67:fb:b0:41:23:87:e9:e1:2b:4a:a7:e1:8e:4b:d9:
d0:02:ef:ae:6c:83:57:d0:c6:4d:96:20:f4:91:07:5a:c6:8c:
7f:b7:6a:12:4c:84:30:08:ef:4f:ee:4e:c3:a0:40:59:32:43:
50:07:ac:2c:76:40:75:4d:b2:8f:50:dd:f4:35:e9:a0:87:34:
1c:cd:74:8d:3a:de:11:af:a1:79:1f:d7:11:fd:4f:d9:20:9b:
d6:58:3d:7b:4a:89:2c:6b:0a:7b:0c:8c:5a:0f:3e:88:35:f8:
5e:56:5c:bf:30:23:8e:9e:81:54:10:a0:69:58:59:f7:c7:1e:
1b:6e:0d:54:b0:76:6c:9a:58:39:ce:14:a8:03:41:41:b4:05:
55:11:df:4f:65:88:92:9e:d9:c7:66:97:3c:05:ac:fa:ee:d9:
d3:4c:cf:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:24:24 2026 by rpki-client