Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/_jPvGnfnEeu5vYF--koa9ogugHg.roa
File: _jPvGnfnEeu5vYF--koa9ogugHg.roa (raw, json)
Hash identifier: g7dMk4sRBP+A2Z+0NDZXMqIFCM5hazVnQm0EyZhDz3E=
Subject key identifier: FE:33:EF:1A:77:E7:11:EB:B9:BD:81:7E:FA:4A:1A:F6:88:2E:80:78
Certificate issuer: /CN=53052009ba7898d2361ca2ee7d130124f9d25125
Certificate serial: 019ECA4357B1459EB25BEE51FE6E35DE3FFB
Authority key identifier: 53:05:20:09:BA:78:98:D2:36:1C:A2:EE:7D:13:01:24:F9:D2:51:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UwUgCbp4mNI2HKLufRMBJPnSUSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/_jPvGnfnEeu5vYF--koa9ogugHg.roa
Signing time: Mon 15 Jun 2026 07:51:11 +0000
ROA not before: Mon 15 Jun 2026 07:51:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50881
IP address blocks: 91.228.164.0/24 maxlen: 24
91.228.165.0/24 maxlen: 24
91.228.166.0/24 maxlen: 24
91.228.167.0/24 maxlen: 24
185.94.157.0/24 maxlen: 24
185.94.158.0/24 maxlen: 24
185.94.159.0/24 maxlen: 24
2a05:e800:1::/48 maxlen: 48
2a05:e800:99::/48 maxlen: 48
2a05:e800:1001::/48 maxlen: 48
2a05:e800:1003::/48 maxlen: 48
2a05:e800:1007::/48 maxlen: 48
2a05:e802:1005::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/UwUgCbp4mNI2HKLufRMBJPnSUSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/UwUgCbp4mNI2HKLufRMBJPnSUSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UwUgCbp4mNI2HKLufRMBJPnSUSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ca:43:57:b1:45:9e:b2:5b:ee:51:fe:6e:35:de:3f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53052009ba7898d2361ca2ee7d130124f9d25125
Validity
Not Before: Jun 15 07:51:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe33ef1a77e711ebb9bd817efa4a1af6882e8078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:57:23:7d:6d:43:13:03:e8:c5:f8:78:0a:3c:
a2:9a:da:6d:f6:49:47:01:9e:a7:a7:62:06:f1:84:
71:0c:55:4c:d8:99:ca:2b:e8:a9:4d:b1:00:55:d1:
b2:55:02:b5:57:84:ab:2c:c9:6a:c8:ff:27:2a:59:
37:b0:09:37:55:2b:85:72:39:68:b7:8a:92:42:f2:
a5:49:09:b9:d3:de:88:a4:d3:06:69:f9:96:a7:31:
93:c8:e1:1c:a6:00:07:3f:df:9f:83:06:b7:d4:35:
00:e9:9e:61:92:99:12:34:9e:f6:f8:04:45:98:37:
dc:1d:8d:52:0b:a5:00:33:05:cc:a7:54:fb:8b:99:
b6:57:ea:f1:6a:d0:d4:8d:6b:9e:72:72:71:25:da:
ca:26:dd:6d:aa:f4:e6:c7:76:40:74:50:8b:82:f8:
9f:64:30:2d:b8:ac:99:c2:4d:22:82:76:bb:76:38:
93:19:d4:6b:cc:bb:d6:c7:94:33:8c:21:67:ea:5e:
f5:2d:99:82:fa:35:be:cf:f5:8f:5d:b7:89:7c:df:
61:7c:27:15:3d:7e:aa:df:bb:61:92:b3:0e:70:3e:
0a:32:b6:24:e9:d1:60:eb:ff:7c:f6:57:ad:13:0b:
de:2c:85:1d:d6:a0:72:ec:bf:f5:cd:d3:a4:22:c8:
28:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:33:EF:1A:77:E7:11:EB:B9:BD:81:7E:FA:4A:1A:F6:88:2E:80:78
X509v3 Authority Key Identifier:
keyid:53:05:20:09:BA:78:98:D2:36:1C:A2:EE:7D:13:01:24:F9:D2:51:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UwUgCbp4mNI2HKLufRMBJPnSUSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/_jPvGnfnEeu5vYF--koa9ogugHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/UwUgCbp4mNI2HKLufRMBJPnSUSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.164.0/22
185.94.157.0-185.94.159.255
IPv6:
2a05:e800:1::/48
2a05:e800:99::/48
2a05:e800:1001::/48
2a05:e800:1003::/48
2a05:e800:1007::/48
2a05:e802:1005::/48
Signature Algorithm: sha256WithRSAEncryption
cb:87:8b:90:55:3a:ee:bf:15:e6:19:ca:03:0b:b6:1d:80:45:
30:d3:67:62:68:78:6a:a2:4c:73:9c:bd:da:d4:61:3d:e4:4a:
ae:ed:f9:c5:ad:4a:8c:af:d3:bd:27:61:24:32:b7:48:4b:78:
eb:92:f7:06:3b:fd:91:a8:c0:5b:43:a2:75:51:f0:90:7d:27:
fe:25:2c:60:45:fc:d4:d1:16:53:07:6a:4c:f0:eb:39:e8:22:
cf:fc:5b:91:f0:04:bd:9d:23:54:7d:d0:b1:d1:23:aa:5d:2e:
d3:d4:d9:c1:d7:d3:cd:5c:81:64:19:c0:09:e2:ef:d8:c1:b0:
6e:6b:d8:d7:62:66:18:1b:40:3f:39:21:78:4d:29:fb:41:1c:
d2:3b:b3:24:b1:85:7e:21:25:93:26:71:d5:42:39:a8:e6:94:
83:4e:de:bd:07:c6:c4:af:9a:9b:e5:7c:2e:2b:52:83:bd:68:
1c:46:95:1c:a9:62:9d:01:ac:f0:d8:9e:00:a1:ee:4b:08:d3:
0a:8f:a7:be:f9:53:10:31:96:f7:5e:09:0e:d0:d0:df:8b:4d:
af:19:e4:17:4e:f4:cb:21:94:15:4f:42:a7:19:cf:69:5a:9f:
1d:8a:da:d4:d2:2c:fe:c6:bb:a1:eb:7d:fc:34:9e:f6:fe:a1:
0c:70:54:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:02 2026 by rpki-client