Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/1-xhLo3rBqSzMfxZ6-dFpNc1K-1s.roa
File: 1-xhLo3rBqSzMfxZ6-dFpNc1K-1s.roa (raw, json)
Hash identifier: LihR1HIwAQbrQbXQbPoW+Yyclv5FEy13WokvKT/AAR0=
Subject key identifier: FB:18:4B:A3:7A:C1:A9:2C:CC:7F:16:7A:F9:D1:69:35:CD:4A:FB:5B
Certificate issuer: /CN=0968dacb344b4d8df54aa378653f71b0bf20da5e
Certificate serial: 019F23683626D5F2FA921E80E5ACB914933F
Authority key identifier: 09:68:DA:CB:34:4B:4D:8D:F5:4A:A3:78:65:3F:71:B0:BF:20:DA:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWjayzRLTY31SqN4ZT9xsL8g2l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/1-xhLo3rBqSzMfxZ6-dFpNc1K-1s.roa
Signing time: Thu 02 Jul 2026 15:17:39 +0000
ROA not before: Thu 02 Jul 2026 15:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41152
IP address blocks: 91.227.246.0/23 maxlen: 23
91.228.22.0/23 maxlen: 23
193.148.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/CWjayzRLTY31SqN4ZT9xsL8g2l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/CWjayzRLTY31SqN4ZT9xsL8g2l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWjayzRLTY31SqN4ZT9xsL8g2l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:36:26:d5:f2:fa:92:1e:80:e5:ac:b9:14:93:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0968dacb344b4d8df54aa378653f71b0bf20da5e
Validity
Not Before: Jul 2 15:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb184ba37ac1a92ccc7f167af9d16935cd4afb5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3e:cc:ce:da:e6:42:76:74:6a:6f:3f:0b:f0:
ae:f6:2b:24:53:25:25:a1:44:e3:fd:0c:62:fb:94:
51:72:48:ed:75:54:90:17:e9:d2:4c:96:f7:58:f7:
85:02:e0:01:9b:e7:2a:e0:f3:99:07:d3:01:44:c9:
63:7c:2c:29:8a:c0:9b:ff:c0:f4:db:f9:b3:45:d2:
7a:60:6a:01:99:ea:c8:ce:7a:8a:b0:c4:90:f5:3c:
44:07:f7:4b:a8:1a:03:e1:dd:8a:86:fe:43:53:5a:
43:c5:13:c5:f4:44:2d:33:0f:69:a5:e9:41:6b:81:
e1:12:c4:31:98:cc:d4:2b:3f:2b:e6:92:e4:5a:5e:
15:d9:88:6e:ea:4e:52:0f:fb:17:8d:0b:f3:ae:42:
ca:e1:5c:c9:9b:4e:7a:52:9c:90:12:17:4b:5e:57:
29:61:0f:83:d9:f8:72:ca:52:4c:48:f1:cc:f1:d7:
12:51:6e:90:8d:1a:43:05:41:28:e8:2d:01:67:90:
64:4c:d1:2f:28:36:6e:17:a1:87:59:96:95:a8:47:
27:5f:f3:9a:a1:0d:46:b6:4b:c0:dd:91:b5:d2:12:
f6:8f:23:e5:fd:56:63:7b:63:77:22:83:d9:54:ef:
c6:71:35:31:14:b1:7c:71:6d:87:09:9b:00:77:9f:
8a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:18:4B:A3:7A:C1:A9:2C:CC:7F:16:7A:F9:D1:69:35:CD:4A:FB:5B
X509v3 Authority Key Identifier:
keyid:09:68:DA:CB:34:4B:4D:8D:F5:4A:A3:78:65:3F:71:B0:BF:20:DA:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWjayzRLTY31SqN4ZT9xsL8g2l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/1-xhLo3rBqSzMfxZ6-dFpNc1K-1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/CWjayzRLTY31SqN4ZT9xsL8g2l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.246.0/23
91.228.22.0/23
193.148.64.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:1c:04:32:8f:f6:19:12:a3:59:c3:2d:26:93:fe:4b:c5:78:
fa:7b:0f:90:5b:f8:30:d8:1e:02:c9:e6:b2:e1:0c:e9:05:0e:
a8:ae:7b:e6:4d:7e:23:0e:f7:a0:07:67:74:10:a1:5f:fd:63:
5e:77:3d:31:f1:c1:6f:db:46:d9:8d:32:92:3d:60:2f:96:a4:
40:3b:04:84:13:f2:56:48:26:46:c1:25:62:a5:57:83:0b:69:
43:b5:85:4d:40:5b:ab:42:97:63:5e:7b:c8:50:72:4b:4a:d6:
58:ae:4e:02:45:1b:14:03:c6:d1:55:2f:cd:31:e5:16:d8:62:
d5:92:44:a8:c1:54:b7:fd:28:12:3e:78:c2:cd:be:c2:fb:1d:
9a:d3:f1:44:44:19:51:fb:b9:4a:e8:15:14:a1:e7:2f:b2:71:
f8:7e:cd:5b:c9:67:c9:64:2d:3a:c3:22:5d:93:9a:29:a1:42:
24:fa:e2:e0:29:13:37:66:77:82:6e:e8:ab:a7:c7:ab:6f:06:
e9:17:ae:9b:32:92:42:1f:16:06:fe:b7:63:b7:bc:f3:aa:10:
a9:c8:1f:69:db:6f:d5:2a:33:91:f6:50:b3:2e:44:27:8f:de:
1e:65:b6:38:aa:d0:26:88:b2:a3:08:59:e2:c9:0e:45:04:1b:
ab:4c:82:d3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:26 2026 by rpki-client