Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/4XiXh8_wXxHMXryb21gQu-Vo2ak.roa
File: 4XiXh8_wXxHMXryb21gQu-Vo2ak.roa (raw, json)
Hash identifier: ZhzTAMyy8UUREXRxteZi8kS1/dlvGAHQtBtzgyRuz1Y=
Subject key identifier: E1:78:97:87:CF:F0:5F:11:CC:5E:BC:9B:DB:58:10:BB:E5:68:D9:A9
Certificate issuer: /CN=46dc9b828aacec97114ddba6819e3024652c1867
Certificate serial: 019F23693042B21BBA3571E243274FD3B84B
Authority key identifier: 46:DC:9B:82:8A:AC:EC:97:11:4D:DB:A6:81:9E:30:24:65:2C:18:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rtybgoqs7JcRTdumgZ4wJGUsGGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/4XiXh8_wXxHMXryb21gQu-Vo2ak.roa
Signing time: Thu 02 Jul 2026 15:18:43 +0000
ROA not before: Thu 02 Jul 2026 15:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48219
IP address blocks: 91.216.49.0/24 maxlen: 24
91.223.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/Rtybgoqs7JcRTdumgZ4wJGUsGGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/Rtybgoqs7JcRTdumgZ4wJGUsGGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rtybgoqs7JcRTdumgZ4wJGUsGGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:30:42:b2:1b:ba:35:71:e2:43:27:4f:d3:b8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46dc9b828aacec97114ddba6819e3024652c1867
Validity
Not Before: Jul 2 15:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1789787cff05f11cc5ebc9bdb5810bbe568d9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:60:2e:78:bd:6a:e5:c0:d8:52:41:24:73:ef:
80:da:f6:9b:ca:43:b5:b0:fc:47:63:c8:3b:44:56:
1e:0e:f9:58:02:bf:b4:33:f6:c9:f9:64:40:95:16:
2b:8f:40:64:a0:63:a5:e1:57:b0:cc:3a:49:41:7b:
bd:98:bf:3c:7b:21:2c:3f:61:d6:af:a0:36:55:f7:
7a:8e:6c:38:24:ce:af:4a:65:56:d1:3a:4e:e5:4b:
30:38:c3:ac:dd:b4:9f:4e:0c:f5:b1:5b:5b:bd:03:
b4:b8:81:0d:42:f3:c2:2d:e0:fd:66:74:f0:a2:cf:
a9:b2:6d:49:e3:c0:a4:6c:8e:0e:6f:a8:76:c7:5d:
96:7b:28:62:72:b4:5c:b8:ff:33:2c:20:e6:74:57:
62:0a:dc:2f:a3:60:54:d4:0d:bf:11:a4:b7:ef:50:
b2:e3:e5:fe:7f:2d:21:ab:ba:4a:09:04:2a:bf:c0:
91:91:95:aa:0d:9b:3e:35:8a:78:93:00:39:68:54:
d3:0b:a0:29:2f:5a:20:66:b2:7d:9a:a3:4d:10:0e:
3c:da:bc:35:3f:58:7d:ce:bf:d6:77:5f:9f:db:d2:
b3:fe:a8:ca:c2:e1:42:fd:b1:74:e9:8b:a3:81:0d:
14:7e:fd:06:de:2f:11:70:0a:0b:53:d3:cf:98:9b:
1d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:78:97:87:CF:F0:5F:11:CC:5E:BC:9B:DB:58:10:BB:E5:68:D9:A9
X509v3 Authority Key Identifier:
keyid:46:DC:9B:82:8A:AC:EC:97:11:4D:DB:A6:81:9E:30:24:65:2C:18:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rtybgoqs7JcRTdumgZ4wJGUsGGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/4XiXh8_wXxHMXryb21gQu-Vo2ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/Rtybgoqs7JcRTdumgZ4wJGUsGGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.49.0/24
91.223.137.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:6d:13:b9:0f:d1:e8:44:f9:f7:7b:e3:7f:d9:00:c8:af:d2:
05:6e:1a:eb:f6:07:d3:3f:a1:42:57:84:ac:a0:24:85:74:77:
ff:d2:e5:f8:8e:1a:92:0e:d9:f0:cb:a8:dd:0b:fe:96:e6:e3:
5e:16:0b:0d:4f:52:e2:3e:f7:7a:f4:36:cc:04:6b:2e:c8:44:
7f:59:fa:c0:85:ed:71:cb:ca:ad:b6:31:5e:07:6c:88:49:df:
4d:af:c4:0b:07:90:96:fc:00:87:c7:d2:21:67:da:d1:97:7e:
fe:6c:c3:bc:6e:13:54:00:4c:82:3f:18:c4:60:a2:c0:4a:b1:
c6:60:52:18:38:da:c2:e9:8f:0e:ff:49:98:20:78:17:0b:a2:
91:ed:b8:13:be:15:16:40:de:bd:b2:3f:85:db:19:09:36:4a:
5f:21:95:ee:76:fd:75:d0:6d:cf:cb:43:04:75:bd:87:49:e3:
75:90:5b:c2:57:05:fb:db:50:af:0e:af:78:76:f4:92:e0:aa:
b5:0e:f7:93:f3:d3:20:a6:cf:35:c1:d7:db:53:2a:11:a9:0b:
65:59:74:2c:cb:13:98:9e:ec:82:dc:cb:4c:fa:3b:8a:77:41:
b3:04:21:5f:d5:96:91:84:a8:c0:8d:61:be:44:0c:87:98:b5:
d3:a2:11:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:24:17 2026 by rpki-client