Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/o9Ss8pZOMtCQFMYmaOI1iiVvKck.roa
File: o9Ss8pZOMtCQFMYmaOI1iiVvKck.roa (raw, json)
Hash identifier: yQ2lKEVWTGb2qSCYFb6mTOwCLiNtvAVdOqsP+3WUfe4=
Subject key identifier: A3:D4:AC:F2:96:4E:32:D0:90:14:C6:26:68:E2:35:8A:25:6F:29:C9
Certificate issuer: /CN=a2e3c4ec7b36112fce521f5bef2873c7b4cc88d1
Certificate serial: 01A08193299D9740B9D9F40923310CDE3DB8
Authority key identifier: A2:E3:C4:EC:7B:36:11:2F:CE:52:1F:5B:EF:28:73:C7:B4:CC:88:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/o9Ss8pZOMtCQFMYmaOI1iiVvKck.roa
Signing time: Tue 08 Sep 2026 15:11:40 +0000
ROA not before: Tue 08 Sep 2026 15:11:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200750
IP address blocks: 91.227.63.0/24 maxlen: 24
91.227.64.0/22 maxlen: 22
91.227.64.0/23 maxlen: 23
91.227.64.0/24 maxlen: 24
91.227.65.0/24 maxlen: 24
91.227.66.0/23 maxlen: 23
91.227.66.0/24 maxlen: 24
91.227.67.0/24 maxlen: 24
194.180.108.0/23 maxlen: 23
194.180.108.0/24 maxlen: 24
194.180.109.0/24 maxlen: 24
194.180.170.0/23 maxlen: 23
194.180.170.0/24 maxlen: 24
194.180.171.0/24 maxlen: 24
2a0f:4640::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:93:29:9d:97:40:b9:d9:f4:09:23:31:0c:de:3d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e3c4ec7b36112fce521f5bef2873c7b4cc88d1
Validity
Not Before: Sep 8 15:11:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3d4acf2964e32d09014c62668e2358a256f29c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:58:bd:ee:4d:97:c3:67:2a:79:6a:d5:66:9f:
2b:26:05:dd:48:f6:47:eb:7a:15:2e:8c:07:5e:38:
f2:a1:d3:f1:ce:d4:b8:7d:1b:83:13:cc:6d:51:4c:
56:42:61:62:12:8f:00:1f:2a:fc:1c:84:a6:8a:33:
95:ef:a2:b9:52:3f:25:95:43:dd:85:18:5f:aa:b7:
5b:84:d8:36:5a:38:a3:09:eb:ea:f3:ec:ad:03:bd:
04:ff:e4:5c:a6:ce:ca:bf:29:07:ee:2b:82:ac:eb:
79:93:1b:ff:ab:f2:21:fc:69:dd:95:cf:41:cd:08:
18:3b:c3:f9:cb:dc:70:7f:cb:d2:d9:18:f5:3a:fa:
87:94:09:c8:8f:94:a8:02:da:b2:a2:6b:a9:d1:12:
85:d0:70:48:4e:e6:ba:e4:dc:52:8e:5e:22:9c:8c:
8d:2f:a5:e2:93:ec:4d:22:b9:6e:4d:e8:de:2e:59:
9b:68:04:62:42:f3:45:8c:f4:54:51:57:5d:d0:b3:
d3:66:43:3a:15:5e:6c:ef:20:30:b7:06:8b:75:08:
39:7c:93:14:81:14:9b:47:ba:79:e2:4c:e2:ea:ce:
ee:0d:e3:fa:27:01:0d:aa:06:bb:bb:72:c6:b8:d9:
c9:7a:b1:01:41:23:e7:3f:10:55:28:1f:dd:e4:df:
3d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D4:AC:F2:96:4E:32:D0:90:14:C6:26:68:E2:35:8A:25:6F:29:C9
X509v3 Authority Key Identifier:
keyid:A2:E3:C4:EC:7B:36:11:2F:CE:52:1F:5B:EF:28:73:C7:B4:CC:88:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/o9Ss8pZOMtCQFMYmaOI1iiVvKck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f40387-2d84-4062-bec6-da513cc69839/1/ouPE7Hs2ES_OUh9b7yhzx7TMiNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.63.0-91.227.67.255
194.180.108.0/23
194.180.170.0/23
IPv6:
2a0f:4640::/29
Signature Algorithm: sha256WithRSAEncryption
74:f1:c8:e7:55:54:ce:ba:b5:31:d4:87:a5:fd:a9:24:94:e2:
71:f3:28:aa:46:d5:df:b4:8b:b1:64:d5:c9:1e:f6:fe:0f:eb:
9c:dd:06:28:22:70:84:5d:cc:4b:f8:4c:f1:b1:c8:be:d1:e2:
73:f2:99:ed:4b:8e:e6:ca:86:eb:6f:93:b1:b6:0d:ce:4d:d7:
94:3d:4b:38:64:05:ff:88:f8:99:9b:42:a4:d1:b3:c7:03:d0:
df:8f:e0:c1:6d:38:68:4d:c0:7e:07:a9:d6:53:3f:48:74:59:
d4:84:2d:36:af:cf:03:2f:49:bc:d7:a9:9b:73:ee:36:ed:9b:
b7:21:52:4a:31:25:1e:b4:46:1f:5c:d8:d0:fd:02:71:df:10:
ed:f7:1d:13:d1:f7:d4:c6:96:ed:2b:ef:0c:7d:8f:62:0f:25:
e2:1b:86:9e:17:ac:98:6b:90:35:72:7a:f9:02:62:0d:5e:76:
72:79:7f:43:96:a4:b9:d6:66:48:57:63:8d:f1:7a:53:7b:60:
32:f1:6f:79:f6:59:7b:ca:af:ea:36:dc:a8:37:32:ba:98:82:
49:d9:a5:64:97:ba:d2:e1:4b:8a:19:ea:9b:7c:15:5b:13:b3:
47:52:d6:2a:e1:fa:00:08:ff:b6:ac:de:6e:c2:32:45:fd:66:
40:24:7e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:03:42 2026 by rpki-client