Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/Asdq0CBEIsgp9XnIZOINz9u9Cp8.roa
File: Asdq0CBEIsgp9XnIZOINz9u9Cp8.roa (raw, json)
Hash identifier: nOKPYxisoFhulj9H3B7lMkY5LfDFsGYXQ3OYtNKl888=
Subject key identifier: 02:C7:6A:D0:20:44:22:C8:29:F5:79:C8:64:E2:0D:CF:DB:BD:0A:9F
Certificate issuer: /CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Certificate serial: 019D0A7407E466BBC7E41094148769F77A29
Authority key identifier: B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/Asdq0CBEIsgp9XnIZOINz9u9Cp8.roa
Signing time: Fri 20 Mar 2026 08:54:29 +0000
ROA not before: Fri 20 Mar 2026 08:54:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48023
IP address blocks: 91.208.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0a:74:07:e4:66:bb:c7:e4:10:94:14:87:69:f7:7a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Validity
Not Before: Mar 20 08:54:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02c76ad0204422c829f579c864e20dcfdbbd0a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:66:c9:10:4d:fe:b6:db:cb:e0:42:50:39:05:
d2:63:b8:2c:93:d6:dc:29:bc:ec:3e:8a:65:90:17:
5f:a0:75:a7:86:20:2f:66:a1:92:90:19:2d:a0:b6:
da:f5:a7:a4:eb:ca:86:82:b7:69:48:d9:18:40:c4:
53:59:6f:20:71:58:c6:84:15:b8:ae:4e:ed:5f:d6:
5f:13:32:43:84:e0:fc:b4:ec:88:d1:70:f1:96:2e:
0d:84:61:c8:79:c7:aa:64:45:c1:85:46:c5:50:94:
ae:36:b0:1c:ed:35:4f:8f:0c:ef:74:8c:09:94:c1:
dd:91:75:d8:15:1a:cb:55:45:30:dd:b1:72:3d:f0:
0e:aa:f7:02:2d:e0:05:65:21:88:d4:2b:bb:52:7c:
26:8f:b2:6a:08:92:d0:81:4f:31:ff:47:72:4f:b1:
e9:4c:85:1f:89:13:a2:5f:66:f1:99:38:ad:0f:a0:
e9:51:f8:31:82:10:07:52:8f:35:af:84:b7:57:4d:
27:fe:4d:d4:7c:2d:0e:d5:37:6e:6e:9f:2e:7a:5b:
e8:78:0d:17:16:e6:fb:97:ef:90:05:89:3b:78:7d:
3e:89:fc:69:9a:84:45:ed:50:5b:62:73:15:63:ec:
ca:b1:8f:90:e1:92:75:19:71:13:5b:57:7d:c7:1c:
b4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C7:6A:D0:20:44:22:C8:29:F5:79:C8:64:E2:0D:CF:DB:BD:0A:9F
X509v3 Authority Key Identifier:
keyid:B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/Asdq0CBEIsgp9XnIZOINz9u9Cp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.250.0/24
Signature Algorithm: sha256WithRSAEncryption
52:93:c1:19:b9:8b:74:84:2b:2f:6e:61:71:42:17:18:d0:9c:
20:b8:9a:1c:85:e7:01:d3:dd:2a:31:6b:ad:d3:6b:70:43:c2:
eb:89:37:a0:b8:6a:06:18:dc:6c:96:d7:62:fa:51:6b:d4:02:
94:d6:48:26:b7:dd:71:37:7d:30:75:51:f9:05:b6:2e:92:90:
4b:62:0e:cc:e7:c5:e1:b5:c5:95:6c:05:83:e0:95:ce:31:3c:
99:5f:c0:44:53:48:81:eb:1c:11:c7:b7:97:77:a5:50:78:7b:
3d:24:54:f7:b6:79:09:ec:27:b5:fd:a7:fd:41:53:0b:e6:8e:
e0:49:92:b1:20:41:2f:b6:10:8f:c6:a2:61:44:0c:9c:74:29:
3e:59:12:32:41:d1:47:b8:6f:77:65:10:7b:0b:ed:5f:7f:35:
98:19:26:e7:4c:c7:5e:48:fa:3b:5b:74:61:9b:1b:9b:ac:f1:
9a:58:1a:62:16:b3:5e:89:d4:d1:9a:aa:9f:d9:34:43:67:34:
5f:28:20:a3:74:fe:1f:36:6f:c6:42:bc:54:13:72:12:c8:d9:
e4:8c:39:90:69:2d:c2:e7:e8:4e:1a:2b:c6:f3:33:e0:0f:56:
b0:bb:3b:94:67:29:26:94:e5:fa:e8:b1:37:a2:51:01:6d:45:
b8:12:8f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:22:00 2026 by rpki-client