Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/1P3PxTpub8TzcDJpehJ5veKID6U.roa
File: 1P3PxTpub8TzcDJpehJ5veKID6U.roa (raw, json)
Hash identifier: WsKdxQ2rVgGdMLcTirR5hgZnDDCFOgPI4K/ODDZGIzk=
Subject key identifier: D4:FD:CF:C5:3A:6E:6F:C4:F3:70:32:69:7A:12:79:BD:E2:88:0F:A5
Certificate issuer: /CN=a633725cd5dd91cf190ab3a99526e898357856ef
Certificate serial: 019D0580657A94596B70F5BAB8DF6A9A2AE4
Authority key identifier: A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/1P3PxTpub8TzcDJpehJ5veKID6U.roa
Signing time: Thu 19 Mar 2026 09:49:53 +0000
ROA not before: Thu 19 Mar 2026 09:49:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15495
IP address blocks: 91.213.221.0/24 maxlen: 24
141.6.0.0/16 maxlen: 24
193.23.152.0/22 maxlen: 24
195.234.178.0/24 maxlen: 24
2a03:5680::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:80:65:7a:94:59:6b:70:f5:ba:b8:df:6a:9a:2a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a633725cd5dd91cf190ab3a99526e898357856ef
Validity
Not Before: Mar 19 09:49:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4fdcfc53a6e6fc4f37032697a1279bde2880fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:97:84:e5:8b:30:6c:52:8b:b3:3a:77:db:43:
34:39:67:4b:5c:7b:65:c2:83:06:0e:68:9c:da:54:
9e:c0:45:64:50:0c:a8:ef:44:c9:5e:e6:c9:73:36:
85:2d:c6:37:e0:e2:ad:3e:34:1a:a1:6b:64:57:ac:
97:8c:8b:33:8c:31:4e:c2:96:5a:d3:ae:e7:bf:5f:
4d:18:6c:be:5c:0b:8f:23:3e:42:9f:f8:3f:38:f1:
9a:61:c8:28:c9:75:3e:45:01:27:49:73:08:dc:1b:
f6:90:4c:35:16:3e:49:bb:15:3c:ab:d9:5e:cc:93:
02:4f:68:97:1c:9a:32:d7:b5:c2:ad:c4:2b:4d:88:
37:57:5d:47:66:ac:21:57:8b:e3:e3:ea:12:8f:05:
7c:32:be:a1:8d:30:c7:63:97:2d:fb:f8:ca:b9:88:
9e:05:f9:27:4a:6e:04:ab:95:eb:de:d6:0d:11:43:
b6:38:18:c1:8e:fe:7c:b2:4a:db:6a:60:71:ca:54:
42:6e:0b:98:6c:d2:9a:a5:da:57:6a:52:e6:33:71:
35:dd:f2:8f:4c:37:ea:6a:3a:41:5b:3b:1b:17:8f:
d2:6b:0e:f1:3f:07:e9:26:d1:45:4a:eb:20:60:c8:
a4:cf:eb:be:49:31:48:3c:53:c5:21:10:e7:40:24:
4d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:FD:CF:C5:3A:6E:6F:C4:F3:70:32:69:7A:12:79:BD:E2:88:0F:A5
X509v3 Authority Key Identifier:
keyid:A6:33:72:5C:D5:DD:91:CF:19:0A:B3:A9:95:26:E8:98:35:78:56:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjNyXNXdkc8ZCrOplSbomDV4Vu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/1P3PxTpub8TzcDJpehJ5veKID6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5b856a-a90d-4791-9c10-c0b813b4ec7e/1/pjNyXNXdkc8ZCrOplSbomDV4Vu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.221.0/24
141.6.0.0/16
193.23.152.0/22
195.234.178.0/24
IPv6:
2a03:5680::/32
Signature Algorithm: sha256WithRSAEncryption
06:e9:09:12:e4:58:f6:14:1f:20:7a:88:0e:b7:d1:d1:c0:e0:
dc:51:bf:c7:56:5a:61:cf:1d:e9:a7:78:ab:fd:db:54:32:3b:
a9:66:78:51:f3:ef:78:2a:c9:98:a7:4a:ed:0a:a0:54:16:0e:
17:76:bf:8c:56:01:e5:3e:60:6c:0e:bf:24:f6:20:63:c8:82:
1f:dd:ca:6b:95:8f:64:b8:f8:6e:86:d0:d1:05:40:aa:33:19:
a4:47:83:0d:01:2c:34:24:b1:be:83:b4:e4:92:91:15:b2:17:
02:82:bc:54:c5:e2:84:3e:36:0f:e2:59:a1:e6:93:65:f9:9d:
04:94:f1:9d:22:8b:f3:5b:fb:15:82:ec:5b:74:7a:10:1b:58:
69:b6:de:2a:d1:6d:66:d7:2e:6a:d3:62:fe:89:de:25:0b:55:
e5:63:a3:4e:93:cd:e5:b5:4d:a9:05:9e:d5:b1:c1:a3:8e:e4:
77:64:21:57:ec:dc:9b:1e:fa:de:61:ed:30:08:54:7c:ea:38:
5d:0e:93:e1:d2:8b:89:bf:02:22:53:2d:19:31:85:85:c8:93:
46:fd:77:23:fe:37:ec:30:a6:ad:6e:0d:90:b0:12:06:ce:c5:
6d:3f:c3:04:92:f2:a9:41:d2:cf:0b:71:a3:bd:2d:50:74:be:
43:14:d4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:45:00 2026 by rpki-client