Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/SkJ4--J-lQ_HQc_UHvk85boF7pw.roa
File: SkJ4--J-lQ_HQc_UHvk85boF7pw.roa (raw, json)
Hash identifier: 34Osfkfzb5a8R/3QXC1/ENfvxsgvD10bmFPrd0ME7bQ=
Subject key identifier: 4A:42:78:FB:E2:7E:95:0F:C7:41:CF:D4:1E:F9:3C:E5:BA:05:EE:9C
Certificate issuer: /CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Certificate serial: 01A0D1E3824E48EB663E19923BC74A3CABCD
Authority key identifier: 96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/SkJ4--J-lQ_HQc_UHvk85boF7pw.roa
Signing time: Thu 24 Sep 2026 05:29:03 +0000
ROA not before: Thu 24 Sep 2026 05:29:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42337
IP address blocks: 91.108.137.0/24 maxlen: 24
91.108.149.0/24 maxlen: 24
91.108.153.0/24 maxlen: 24
185.42.213.0/24 maxlen: 24
185.42.214.0/24 maxlen: 24
185.42.215.0/24 maxlen: 24
185.83.184.0/24 maxlen: 24
185.83.185.0/24 maxlen: 24
185.83.186.0/24 maxlen: 24
185.83.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:e3:82:4e:48:eb:66:3e:19:92:3b:c7:4a:3c:ab:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Validity
Not Before: Sep 24 05:29:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a4278fbe27e950fc741cfd41ef93ce5ba05ee9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:21:de:ac:48:63:d3:a1:7c:9c:5d:20:46:21:
63:f6:96:66:73:a5:d7:89:15:c4:17:1c:9d:7f:5e:
b2:57:2b:ec:f2:98:32:ac:c7:fe:4e:4c:16:1c:e4:
89:e6:cf:c4:66:58:1c:85:82:e9:e3:43:0f:8a:f2:
0f:cb:89:f4:ab:e5:5c:9f:fd:15:91:3b:dc:b1:53:
d3:4d:b0:41:17:35:09:3f:91:bf:ab:7a:54:c3:93:
25:d2:d2:91:0b:b2:8d:f2:36:7e:e1:43:c9:d7:91:
89:cf:bf:a5:32:73:54:d3:77:e0:ed:b8:a9:a1:85:
68:0e:7e:3b:d4:71:a3:81:fe:f0:e4:aa:0d:f8:e8:
9d:df:e8:7f:38:a2:9a:b5:5f:4c:14:5d:22:94:f1:
f5:44:3f:c4:d7:d6:e9:8e:fb:04:4c:42:d5:0f:6a:
7e:74:b8:4d:c6:a2:b0:15:2d:ca:07:61:46:84:43:
a8:28:3c:d3:5f:7f:57:24:6e:78:36:a4:56:0e:da:
5b:a4:6c:ef:7f:f3:6b:2a:d2:ea:9f:6c:27:5b:f1:
5b:9a:40:ac:4e:94:b5:98:54:9f:d8:6f:80:5b:e9:
5f:68:a0:4d:98:7e:6b:4c:aa:7c:c7:66:75:13:57:
82:28:68:dd:b1:34:b7:93:7b:c7:29:86:e2:15:0e:
c7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:42:78:FB:E2:7E:95:0F:C7:41:CF:D4:1E:F9:3C:E5:BA:05:EE:9C
X509v3 Authority Key Identifier:
keyid:96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/SkJ4--J-lQ_HQc_UHvk85boF7pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.137.0/24
91.108.149.0/24
91.108.153.0/24
185.42.213.0-185.42.215.255
185.83.184.0/22
Signature Algorithm: sha256WithRSAEncryption
02:e4:f0:51:6e:d4:1f:a7:44:c6:24:2a:ab:18:77:e0:c8:86:
49:fc:2b:db:19:f7:fb:40:57:29:5d:4d:8d:3b:be:ed:7e:04:
db:7c:97:69:dd:b1:90:45:74:61:94:0c:bf:83:b7:1d:1b:f3:
5b:60:fb:be:5c:43:04:c1:31:3b:59:50:5a:6d:54:86:a1:46:
14:fb:77:61:72:ae:01:70:4d:75:d1:1f:a2:aa:fb:66:ca:8c:
cb:c8:c1:1f:35:3e:6b:99:94:ac:23:52:fe:a5:4a:78:b2:df:
d8:04:2e:c6:76:de:d2:e0:f2:13:38:94:b1:fb:49:bc:e8:f4:
e4:31:ac:cd:8f:4b:da:9f:a1:25:56:6d:02:f2:3f:1c:bd:82:
02:1c:95:5b:08:92:67:a2:47:21:f3:77:42:41:34:9f:3f:c3:
30:68:f3:54:65:f8:d6:b7:d2:c8:35:92:33:46:b2:b7:01:2d:
d6:3e:3f:e1:05:b3:bb:d7:85:26:d4:1a:b5:bb:09:f2:93:e6:
37:5d:f7:53:49:b2:87:2c:cd:82:e1:e4:4f:a8:d7:8c:ed:b8:
2a:ce:b1:fd:8e:02:85:0e:ae:a7:e4:ef:a2:20:71:fe:65:0f:
8b:bc:c0:35:ed:e0:dc:8b:0e:5e:5a:de:25:cf:da:be:ad:a8:
49:6d:ef:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:18:43 2026 by rpki-client