Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/83i8inPN8cioUOUV0odmLvsgRjA.roa
File: 83i8inPN8cioUOUV0odmLvsgRjA.roa (raw, json)
Hash identifier: /ygI+B5yyCZ19+mmbGd9eyqCRVHl3RDiVcE9AZL8+EA=
Subject key identifier: F3:78:BC:8A:73:CD:F1:C8:A8:50:E5:15:D2:87:66:2E:FB:20:46:30
Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial: 019CD7B1AB1515B1AC40861DA39C4F73A1AC
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/83i8inPN8cioUOUV0odmLvsgRjA.roa
Signing time: Tue 10 Mar 2026 12:21:10 +0000
ROA not before: Tue 10 Mar 2026 12:21:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62005
IP address blocks: 91.210.108.0/23 maxlen: 24
91.221.190.0/23 maxlen: 24
132.243.168.0/22 maxlen: 24
146.19.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d7:b1:ab:15:15:b1:ac:40:86:1d:a3:9c:4f:73:a1:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Validity
Not Before: Mar 10 12:21:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f378bc8a73cdf1c8a850e515d287662efb204630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:76:6a:04:42:86:a2:e2:b5:d9:48:0a:14:09:
ce:c8:7e:24:d3:a5:fe:0d:41:9b:fb:f0:cb:e0:55:
ce:84:e8:3d:be:a7:ea:f5:18:df:87:9b:9f:8d:31:
43:c9:98:ef:13:30:a5:3a:ff:0d:ca:48:e4:35:9a:
be:2e:70:20:45:2c:2f:47:7f:39:bc:54:60:51:90:
4b:10:27:89:1b:ac:ad:2d:2d:1a:10:52:f7:36:ec:
b9:bc:48:68:b6:3b:1b:ab:dc:42:a7:c0:cf:f6:ba:
c1:ed:7b:2a:b0:d1:a0:bd:5f:84:81:a8:63:ad:18:
48:76:df:68:62:75:48:7a:f1:ed:84:a0:34:37:85:
68:57:be:eb:c4:f6:d3:c0:1b:ca:d4:20:56:10:32:
7c:62:a8:9e:ae:70:4f:a9:98:e7:a3:f3:09:fd:f2:
29:06:7a:74:a7:98:42:f3:b4:a4:27:cd:69:77:c2:
e6:8e:6e:a4:9d:d5:ca:c9:e1:db:0b:bb:7b:47:e2:
64:df:b9:c3:0d:a4:ac:dd:1e:53:3f:06:c4:c6:e7:
d3:ed:40:1e:06:41:a8:b3:da:91:fe:98:8d:dd:e7:
36:78:48:fc:52:04:d9:60:ce:81:2d:e8:bb:fa:7b:
43:93:85:77:b0:ff:fe:fe:cb:f8:2b:3a:cc:f5:de:
5c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:78:BC:8A:73:CD:F1:C8:A8:50:E5:15:D2:87:66:2E:FB:20:46:30
X509v3 Authority Key Identifier:
keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/83i8inPN8cioUOUV0odmLvsgRjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.108.0/23
91.221.190.0/23
132.243.168.0/22
146.19.49.0/24
Signature Algorithm: sha256WithRSAEncryption
95:18:2e:f9:de:eb:e1:3d:21:67:55:af:6c:4d:ea:b4:fa:0a:
8f:c6:e2:a5:57:15:3f:94:b6:dd:76:16:37:14:b1:52:26:37:
2b:b2:1e:14:b4:83:fe:8c:72:ec:aa:70:d0:a8:f6:ba:8a:24:
95:e6:5c:ef:2d:f1:37:3a:61:ee:74:0c:84:12:58:23:88:5d:
1b:24:30:5e:1c:d7:37:ae:a0:13:06:e3:da:6f:97:72:6d:ee:
f2:82:f7:a6:8f:88:a5:e7:81:25:10:6b:1f:b0:60:d0:9b:91:
1b:3a:54:e6:21:74:4f:25:e0:16:c6:51:8b:ac:65:fa:dc:1d:
13:0f:68:01:cd:b9:64:83:aa:d1:9e:a9:a6:19:f7:c7:1e:4e:
90:62:ea:82:9f:a3:f2:a0:d9:3c:ea:3d:1f:0f:d5:3b:8a:e4:
39:51:1d:0f:75:40:60:58:1c:17:f1:9e:e4:ec:21:a5:34:c5:
1c:2c:23:2e:e7:74:73:2e:db:55:ab:ca:df:41:6d:84:fb:a5:
3f:bf:31:a3:82:9d:ba:d3:18:1d:08:f7:5b:1c:0a:4d:83:44:
b3:f2:09:91:f4:39:8e:15:f8:a4:64:4e:1b:61:c7:b5:0c:ec:
b4:c6:7c:da:8f:48:7a:63:cc:e3:ac:b8:43:d0:e5:f8:1b:b0:
53:1d:d9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:06:47 2026 by rpki-client