Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/P4ilQBuKUlgTootCdOEF0HPO4IM.roa
File: P4ilQBuKUlgTootCdOEF0HPO4IM.roa (raw, json)
Hash identifier: 3FfJFJ0SwP30eIW/tk79v1+okqhDhDPyY7bK/Y4Nft8=
Subject key identifier: 3F:88:A5:40:1B:8A:52:58:13:A2:8B:42:74:E1:05:D0:73:CE:E0:83
Certificate issuer: /CN=817cb14ce4014ac3269d70eeea89c87055b176f1
Certificate serial: 01A0D45EC0DB41EE7DF9E86688A049D62EBE
Authority key identifier: 81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/P4ilQBuKUlgTootCdOEF0HPO4IM.roa
Signing time: Thu 24 Sep 2026 17:02:54 +0000
ROA not before: Thu 24 Sep 2026 17:02:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42244
IP address blocks: 91.189.80.0/23 maxlen: 23
91.189.82.0/24 maxlen: 24
91.189.83.0/24 maxlen: 24
91.189.84.0/23 maxlen: 23
91.189.86.0/23 maxlen: 23
178.218.208.0/23 maxlen: 23
178.218.210.0/23 maxlen: 23
178.218.212.0/22 maxlen: 22
178.218.216.0/23 maxlen: 23
178.218.218.0/24 maxlen: 24
178.218.220.0/23 maxlen: 23
178.218.222.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 17:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5e:c0:db:41:ee:7d:f9:e8:66:88:a0:49:d6:2e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=817cb14ce4014ac3269d70eeea89c87055b176f1
Validity
Not Before: Sep 24 17:02:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f88a5401b8a525813a28b4274e105d073cee083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:87:dd:b7:ea:8e:d5:f4:45:c3:20:15:99:f3:
97:fd:42:8b:07:47:08:36:0a:bc:86:be:23:b7:f0:
87:90:ca:32:ff:01:29:8a:ba:fd:57:ef:79:43:23:
64:d8:4a:a8:c2:c5:cf:a4:91:86:c0:7b:36:8d:d9:
ec:58:5d:c4:83:3e:62:f6:8c:7b:97:7b:5b:cb:df:
97:a0:29:f6:8f:bb:6d:a2:e5:52:94:e3:4d:8c:95:
22:ad:a6:9e:cf:91:a7:2c:00:f0:7b:31:ed:dc:51:
d3:ce:d4:5f:51:fe:81:0d:bc:5c:3a:6f:d5:c2:6f:
a3:26:49:2a:e9:be:ed:e3:ea:6b:7a:a2:b8:3e:c9:
e7:63:41:88:b9:c9:e0:77:00:11:e9:9c:a9:c7:65:
6d:bc:ec:16:f5:74:de:0d:d0:e7:d9:2d:42:80:cd:
a9:f9:79:f5:42:a0:08:5a:fd:a1:f0:48:41:fb:ad:
e9:a4:82:87:3d:dc:ee:58:af:b8:33:21:95:3d:07:
73:a1:64:1a:c8:e9:29:eb:47:44:af:e6:07:76:1b:
8f:cf:57:b8:1e:a4:8a:6b:b0:7c:a7:2b:9d:b5:5f:
6c:5e:4d:f0:02:1b:fb:d0:61:5c:95:99:eb:b1:ad:
a1:a5:c4:ca:ec:07:f4:f0:1b:3b:e5:60:34:5d:03:
2d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:88:A5:40:1B:8A:52:58:13:A2:8B:42:74:E1:05:D0:73:CE:E0:83
X509v3 Authority Key Identifier:
keyid:81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/P4ilQBuKUlgTootCdOEF0HPO4IM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.189.80.0/21
178.218.208.0-178.218.218.255
178.218.220.0/22
Signature Algorithm: sha256WithRSAEncryption
22:70:11:a6:8f:b4:61:86:89:f2:23:9f:fe:5e:cb:bf:ff:0b:
6a:3e:99:d9:9b:64:19:c1:65:e2:ed:2a:72:8a:eb:91:8e:5d:
d2:71:db:3a:88:e8:3e:6b:97:44:24:f0:75:57:e1:9e:2d:d2:
87:46:02:1d:32:70:5e:a4:1f:ef:47:b1:cb:92:d3:f1:44:8c:
a7:fd:96:97:95:e1:69:39:88:cf:a8:b6:df:0f:12:a8:e4:0f:
90:b0:f5:d9:ac:11:ad:6c:18:82:2c:7d:91:e9:6e:cf:b0:cf:
fb:d4:6f:46:1f:33:0b:b6:6d:1f:48:b8:7f:0f:e8:f6:6e:09:
85:7a:20:9f:2c:30:c3:17:b8:8c:ab:fc:4a:b0:86:26:15:13:
3a:4f:2d:a1:09:4c:6f:f0:b6:24:c3:1f:17:f2:66:de:94:c7:
9f:76:2c:17:d9:30:73:57:4a:81:be:d0:be:86:31:c3:58:86:
b4:5d:20:8a:26:62:fa:25:09:13:a1:41:e3:49:ce:f4:b7:cc:
8e:37:95:40:b8:96:38:dd:50:81:22:44:3f:22:ad:67:a0:ed:
b9:32:08:8e:95:7b:89:7f:d1:58:96:c7:25:1f:61:99:19:26:
de:ff:e4:98:53:af:9a:a5:50:b9:16:87:3e:2d:a9:54:cd:68:
f0:9c:48:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:18:00 2026 by rpki-client