Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/04GWQbwmgobD06Lv3pwY3XfurdQ.roa
File: 04GWQbwmgobD06Lv3pwY3XfurdQ.roa (raw, json)
Hash identifier: RWe8M5t08UcrE+4pD8aGK2oxIHVHI8ir5iUDM91fMiQ=
Subject key identifier: D3:81:96:41:BC:26:82:86:C3:D3:A2:EF:DE:9C:18:DD:77:EE:AD:D4
Certificate issuer: /CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51
Certificate serial: 01A106B3D312A7ADCB2731423AA8D60A21D8
Authority key identifier: F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/04GWQbwmgobD06Lv3pwY3XfurdQ.roa
Signing time: Sun 04 Oct 2026 11:36:50 +0000
ROA not before: Sun 04 Oct 2026 11:36:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213915
IP address blocks: 91.214.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:b3:d3:12:a7:ad:cb:27:31:42:3a:a8:d6:0a:21:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51
Validity
Not Before: Oct 4 11:36:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3819641bc268286c3d3a2efde9c18dd77eeadd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4d:63:d7:a8:ce:f2:1b:b2:04:33:ef:fb:4d:
cf:3b:1f:98:25:49:46:77:7b:54:a5:8f:f9:bd:2f:
2b:87:3a:a8:50:12:d4:4f:bc:a9:34:99:72:d2:58:
ec:74:32:fd:6c:37:fa:0e:83:09:18:c2:47:99:5b:
8b:9d:ff:07:22:e4:ad:73:12:c4:d3:c5:e2:9f:99:
ff:5d:65:b0:1d:64:08:97:79:50:42:88:8c:7d:06:
bf:b7:5c:32:16:1f:ce:0e:e6:cc:2e:06:3a:9d:8b:
62:b2:58:18:8e:2c:e7:02:73:1e:4d:10:85:a2:77:
32:21:d4:57:ab:6a:59:6e:52:e3:b8:c5:f6:a2:76:
77:38:de:84:67:5b:03:88:7b:bc:ff:96:51:00:fc:
26:71:bd:34:8d:de:10:20:f9:7e:dd:89:12:49:3e:
aa:3e:bb:0c:da:43:ad:92:d7:77:bb:64:5a:7e:95:
d7:71:af:82:4a:10:ca:79:69:7b:37:d2:f3:67:f0:
45:da:72:15:2b:76:07:86:fd:20:d5:1e:0e:c5:a4:
7c:b4:29:2b:41:ea:63:9f:15:36:a7:6e:d9:1c:56:
a6:0e:1c:ba:93:e2:5e:d5:2e:22:e3:85:d2:4f:c9:
6e:33:0a:16:48:37:b0:18:c5:ae:89:4e:1b:51:36:
16:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:81:96:41:BC:26:82:86:C3:D3:A2:EF:DE:9C:18:DD:77:EE:AD:D4
X509v3 Authority Key Identifier:
keyid:F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/04GWQbwmgobD06Lv3pwY3XfurdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.78.0/24
Signature Algorithm: sha256WithRSAEncryption
da:d0:e1:1d:0e:19:26:9b:c8:6c:41:ba:10:b1:01:87:d9:a8:
64:5b:5b:b6:8b:8d:7a:97:54:78:3b:2a:92:41:9c:4d:ff:ff:
32:9b:b3:67:da:5f:41:0a:e7:9f:66:d7:08:4a:75:5b:67:df:
12:e6:5a:b4:cc:d7:98:96:5c:fd:b7:af:24:7e:36:4a:29:0a:
fa:71:cf:9f:53:2a:d1:87:e7:1e:17:e1:01:24:83:c9:e8:98:
c1:8e:c0:1b:8d:e8:38:f6:4b:6d:b8:46:1a:ee:74:54:2d:28:
24:ea:48:80:1d:34:dd:07:d8:fe:8d:e1:5f:b2:29:b6:a7:0a:
31:2d:d7:10:3c:92:c4:14:e6:32:94:8d:47:b5:06:82:f9:87:
fc:42:f4:5c:8c:23:88:fd:82:e6:09:8c:6e:ce:fc:f1:8d:d0:
cc:5a:37:e6:1c:e9:55:d7:5a:db:37:25:64:9c:af:88:45:f6:
7b:e2:72:7c:45:81:91:29:eb:dc:f7:48:7e:5b:5f:a6:b0:c8:
c9:b2:7b:ba:32:8b:0f:44:a9:9d:3b:32:85:34:a3:ea:fc:2b:
10:1e:7f:f5:5d:36:20:29:5b:3f:8c:03:4c:91:a1:66:a3:46:
34:c3:f7:0c:c8:22:64:79:a0:cd:0d:b6:65:d1:34:08:ab:50:
5c:64:ce:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:01:55 2026 by rpki-client