Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/09b95c-b290-4867-ade7-3e585d8e5a7c/1/A-DXg-M5jvEoV7mt-5nVIAB_Z0g.roa
File: A-DXg-M5jvEoV7mt-5nVIAB_Z0g.roa (raw, json)
Hash identifier: SrntviZ4+NLJCPuFucg/3YO9L4f5luqtxUvspbJaNHI=
Subject key identifier: 03:E0:D7:83:E3:39:8E:F1:28:57:B9:AD:FB:99:D5:20:00:7F:67:48
Certificate issuer: /CN=25467f2d5bb2355af75fb47f11606d81589f7638
Certificate serial: 019D0DBD67ACE5F50F84A5EE9A9264E8F729
Authority key identifier: 25:46:7F:2D:5B:B2:35:5A:F7:5F:B4:7F:11:60:6D:81:58:9F:76:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUZ_LVuyNVr3X7R_EWBtgVifdjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/09b95c-b290-4867-ade7-3e585d8e5a7c/1/A-DXg-M5jvEoV7mt-5nVIAB_Z0g.roa
Signing time: Sat 21 Mar 2026 00:13:29 +0000
ROA not before: Sat 21 Mar 2026 00:13:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 91.218.124.0/22 maxlen: 22
185.90.136.0/22 maxlen: 22
195.10.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/09b95c-b290-4867-ade7-3e585d8e5a7c/1/JUZ_LVuyNVr3X7R_EWBtgVifdjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/09b95c-b290-4867-ade7-3e585d8e5a7c/1/JUZ_LVuyNVr3X7R_EWBtgVifdjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUZ_LVuyNVr3X7R_EWBtgVifdjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0d:bd:67:ac:e5:f5:0f:84:a5:ee:9a:92:64:e8:f7:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25467f2d5bb2355af75fb47f11606d81589f7638
Validity
Not Before: Mar 21 00:13:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03e0d783e3398ef12857b9adfb99d520007f6748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8d:a5:fa:3e:a4:e3:3e:3b:3a:67:e4:d9:ec:
44:05:0f:ec:a4:a8:38:6d:47:ba:90:49:3a:fd:29:
49:5c:67:c4:ef:99:02:50:4c:16:25:27:1f:11:77:
10:77:46:77:cf:bd:7c:d6:f3:82:c7:9c:e6:38:25:
6f:8f:6a:4f:6b:13:c6:66:dc:17:69:38:c1:9d:02:
6a:44:9b:36:b4:4b:97:2a:5b:0f:0b:58:6f:2c:61:
9d:69:5f:bb:ad:5f:a5:21:e4:9b:b5:3f:48:aa:b2:
cc:91:19:85:4d:47:85:9d:3c:bb:f4:ab:91:87:64:
09:09:65:aa:2c:17:27:4b:ef:53:fd:07:3e:b6:62:
06:28:d5:bd:d8:fa:75:7c:06:85:74:9f:36:63:70:
df:87:83:69:d5:65:4b:aa:94:ef:24:af:bf:99:ec:
9a:c7:14:a7:47:43:d8:98:c5:9d:bf:af:23:b8:43:
ec:e0:f4:05:49:6e:c5:e1:71:1f:a5:9a:47:4f:78:
0d:3c:da:c9:9b:5f:28:43:23:e6:f5:e0:b4:d5:35:
27:cd:09:e1:d6:6d:91:35:55:d8:b0:c9:b5:6d:77:
a0:a5:cf:10:b8:a6:a9:f1:1b:69:0a:07:a5:c6:46:
e3:95:79:9f:7c:60:c8:e0:15:62:51:a0:48:10:f6:
bb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E0:D7:83:E3:39:8E:F1:28:57:B9:AD:FB:99:D5:20:00:7F:67:48
X509v3 Authority Key Identifier:
keyid:25:46:7F:2D:5B:B2:35:5A:F7:5F:B4:7F:11:60:6D:81:58:9F:76:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUZ_LVuyNVr3X7R_EWBtgVifdjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/09b95c-b290-4867-ade7-3e585d8e5a7c/1/A-DXg-M5jvEoV7mt-5nVIAB_Z0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/09b95c-b290-4867-ade7-3e585d8e5a7c/1/JUZ_LVuyNVr3X7R_EWBtgVifdjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.124.0/22
185.90.136.0/22
195.10.212.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:37:59:ed:ab:94:66:e4:2f:33:f4:a0:7a:33:02:e3:d7:f0:
f1:59:28:67:8a:9b:00:e6:64:92:63:ed:c6:44:55:81:8e:09:
fa:bb:49:d3:b0:a3:7b:47:ee:11:eb:d9:74:72:fa:ca:50:01:
a2:88:ac:c2:ff:5b:78:ba:dd:f3:bd:40:c5:65:1e:e6:2d:dd:
67:dd:52:ab:9d:0a:49:6f:0f:e2:71:6b:59:65:82:6a:71:67:
87:36:38:a7:87:d2:cb:9d:68:ac:a8:db:a9:57:82:ad:ea:44:
ce:90:ff:49:c5:c4:6b:8b:1d:a6:52:82:6c:b1:dd:bf:2e:8e:
a7:33:0e:d1:33:9a:39:6f:b1:aa:e8:16:f6:91:9f:94:cd:3e:
c0:55:91:d5:09:2d:fc:15:82:ad:16:f3:3f:3a:40:fb:45:56:
be:2d:99:0c:99:cd:98:87:a5:05:14:4c:e5:f4:5b:a0:d8:6e:
be:a9:95:00:3a:3f:a4:e3:18:36:8d:bd:34:0c:6a:ea:d0:68:
49:2a:e6:04:5b:8d:83:cd:ce:10:71:f1:07:d7:8e:b6:3c:02:
7f:e5:83:da:7d:9d:d1:3f:dc:95:97:f7:f3:f8:bc:fe:7f:e8:
7c:dc:98:e3:75:e9:41:3d:53:72:20:6e:92:b9:aa:c0:73:6a:
2a:9c:ea:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:56:33 2026 by rpki-client