Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/A_-h6j62GakTf8sVYSZUPDVBMR8.roa
File: A_-h6j62GakTf8sVYSZUPDVBMR8.roa (raw, json)
Hash identifier: csIAxW9bXtziqhqyhaEg7C2GF8tHOgSMTxW10V1Xvoc=
Subject key identifier: 03:FF:A1:EA:3E:B6:19:A9:13:7F:CB:15:61:26:54:3C:35:41:31:1F
Certificate issuer: /CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Certificate serial: 019E1A86B6C41D8FFB725D0D21DB812A7B85
Authority key identifier: B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/A_-h6j62GakTf8sVYSZUPDVBMR8.roa
Signing time: Tue 12 May 2026 04:51:36 +0000
ROA not before: Tue 12 May 2026 04:51:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198138
IP address blocks: 91.196.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1a:86:b6:c4:1d:8f:fb:72:5d:0d:21:db:81:2a:7b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Validity
Not Before: May 12 04:51:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03ffa1ea3eb619a9137fcb156126543c3541311f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:b5:1a:94:40:3f:b5:98:7a:5d:7f:f1:84:66:
11:c1:02:3f:88:dd:fd:db:06:00:d3:aa:be:e5:07:
b7:b7:cf:45:82:e7:d3:9b:e7:82:55:c5:9c:bc:b1:
e5:e1:e1:02:53:61:99:d1:db:33:ca:46:ee:87:cd:
5a:44:a9:70:85:2e:eb:99:b8:c2:a6:95:68:c8:ba:
78:9e:7e:f5:3a:22:6a:03:c0:63:cf:8c:43:3e:f6:
9f:ed:3f:ff:e2:20:04:4d:61:9d:17:50:24:a2:57:
5b:f1:99:cb:dd:80:e0:5d:d5:1c:c2:c3:8e:de:f5:
3d:67:7d:7d:ea:f7:65:f9:11:56:f9:30:d1:ec:2f:
59:85:c7:55:15:30:8b:50:89:ac:4c:06:e9:6a:38:
90:c7:6d:36:73:b6:97:34:46:d1:ca:5a:7a:1e:cd:
d1:c7:59:3d:18:bd:49:12:68:a9:63:88:72:85:a4:
e3:29:86:58:41:58:c7:23:bc:cc:a9:38:54:33:14:
fa:5c:78:3b:07:af:6b:85:9e:c2:31:5b:2a:37:1e:
c9:95:5a:22:35:b2:72:2b:d2:37:8d:8e:89:79:01:
11:cf:d1:db:fe:7f:d0:fa:77:30:90:46:87:f8:9a:
8f:47:33:72:d8:5f:07:ac:f4:16:49:5b:41:6f:86:
82:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FF:A1:EA:3E:B6:19:A9:13:7F:CB:15:61:26:54:3C:35:41:31:1F
X509v3 Authority Key Identifier:
keyid:B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/A_-h6j62GakTf8sVYSZUPDVBMR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.160.0/24
Signature Algorithm: sha256WithRSAEncryption
82:88:ec:d0:bc:ad:f1:69:dc:48:79:aa:db:c4:54:21:c8:5e:
48:80:8d:7e:5e:ae:09:d0:42:e6:ca:c4:0a:88:54:46:27:fd:
bf:38:fb:27:c0:de:7a:99:92:80:9f:dd:db:f9:a7:c2:14:ac:
39:94:2c:83:86:ae:9f:e8:03:40:2b:d2:6a:7d:da:e2:f9:56:
c9:06:9b:8d:75:97:57:be:63:27:d5:b1:19:4c:44:c9:1b:cb:
02:a2:77:92:2b:82:96:93:8b:46:85:0c:90:41:56:d7:39:c3:
0c:e8:34:be:67:96:fb:60:35:0f:80:e0:a9:a9:7e:9a:4c:6f:
a4:dd:2b:73:f9:b1:2f:66:54:c8:1e:dd:63:a5:63:ef:5f:9b:
57:b5:a0:b6:05:81:b5:2c:fa:d4:96:8e:77:45:bd:13:46:7d:
67:3e:ba:84:6b:7e:c8:d2:46:cd:8b:40:92:b2:2b:53:4c:38:
b2:99:eb:f9:0e:8c:44:d7:38:22:e2:22:d2:22:f5:1d:5c:a3:
dc:ac:21:c7:83:27:2b:76:2e:0c:4e:f8:f1:a5:de:8a:93:47:
67:8b:0d:fa:e6:27:d6:72:c9:c5:3d:40:e6:c4:c4:0e:ab:0b:
7f:b8:fc:51:66:8c:3f:a6:3c:0d:f4:d4:c7:79:f1:44:69:3a:
60:49:47:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:17:48 2026 by rpki-client