Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/By-u2rKRmt7gEchpRigpU_HEpeU.roa
File: By-u2rKRmt7gEchpRigpU_HEpeU.roa (raw, json)
Hash identifier: PwTmgiljgdSXpUOnjew7qW3hadK2pKJ5WoDlzffASYE=
Subject key identifier: 07:2F:AE:DA:B2:91:9A:DE:E0:11:C8:69:46:28:29:53:F1:C4:A5:E5
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019DEF770C75CB8A96455BFB8F61EC2BF2CF
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/By-u2rKRmt7gEchpRigpU_HEpeU.roa
Signing time: Sun 03 May 2026 20:10:49 +0000
ROA not before: Sun 03 May 2026 20:10:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214941
IP address blocks: 91.208.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ef:77:0c:75:cb:8a:96:45:5b:fb:8f:61:ec:2b:f2:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: May 3 20:10:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=072faedab2919adee011c86946282953f1c4a5e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b7:90:ac:2b:3f:9c:09:3e:6c:97:39:56:aa:
0b:ae:8f:3b:71:fd:a0:e7:39:db:c5:b4:77:47:9e:
24:29:6d:0e:a4:64:3b:31:d1:d2:36:60:00:bc:51:
0c:3e:b8:eb:75:2c:27:1e:d0:bf:ea:8e:ef:f7:be:
e7:f9:11:b6:c4:50:68:c5:33:2e:84:95:0f:21:a0:
67:b0:4a:5f:86:d4:dc:59:a7:bd:59:bd:b4:0b:7a:
6b:5b:ee:28:07:b6:f0:23:e1:a9:95:ec:5d:c6:d3:
16:b2:92:fe:f3:da:19:d4:ad:89:6b:a0:e6:4f:eb:
3a:db:92:a2:b0:96:e7:37:88:2a:73:52:f6:97:ca:
1c:58:86:f2:7c:f0:2c:12:55:f5:3e:3a:a4:6c:c0:
60:4c:11:e1:d9:7e:37:74:5a:5c:20:72:73:89:f4:
b1:e3:cb:53:d2:80:7a:27:c2:04:1c:01:cc:88:71:
d7:16:3b:71:29:72:34:0f:c4:02:b2:5b:41:49:91:
63:73:d3:fc:6e:db:98:65:79:ef:a6:31:14:0f:5a:
40:9d:9d:6a:ed:7d:23:83:96:66:ea:e5:e7:bb:02:
0c:b2:85:e3:91:9b:ae:a5:d4:ad:91:28:e8:f9:46:
f9:fe:73:c4:fc:69:47:fb:4d:7d:f9:39:23:d9:64:
2c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2F:AE:DA:B2:91:9A:DE:E0:11:C8:69:46:28:29:53:F1:C4:A5:E5
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/By-u2rKRmt7gEchpRigpU_HEpeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.204.0/24
Signature Algorithm: sha256WithRSAEncryption
38:35:1d:fd:39:c2:50:b5:7b:46:0a:97:aa:66:71:16:8d:3c:
0d:bb:8d:7c:c5:6d:a8:4b:61:7d:38:f5:70:73:a6:2a:ad:50:
ee:d5:b5:48:e8:2b:e5:ae:33:85:0e:2e:a5:18:bb:f5:67:3f:
3e:83:42:eb:49:44:63:c8:00:5d:bc:6d:fa:05:5b:f2:b6:95:
61:9a:08:45:42:96:ad:47:f3:88:85:47:ac:7d:34:ad:20:7e:
44:60:30:f8:98:3b:df:c6:d3:11:f6:31:3f:fd:0e:44:89:43:
8e:e7:a3:4d:80:6f:b4:a6:6a:c2:72:cb:1f:56:f8:5e:c7:34:
fe:5a:0d:be:f7:b7:d5:9d:be:f6:d0:d1:8f:48:b8:02:4a:de:
d1:2d:e2:11:b7:f5:c3:d2:30:8e:14:b6:35:6d:ac:cb:71:f9:
8b:7f:aa:3f:90:a0:d3:08:37:f4:8b:de:88:d3:4b:24:28:db:
f4:4c:c0:3a:bd:6f:e5:f5:e9:71:01:9f:0f:67:78:5b:3f:c0:
6d:2a:20:54:15:e4:72:7a:37:d5:df:bc:58:f9:51:af:58:3b:
e0:0f:a4:0f:bb:03:ee:5b:41:9d:fe:af:51:c3:9c:fd:cb:2e:
fa:ac:12:6f:fb:86:54:8d:7f:63:41:32:bb:eb:1b:45:f2:71:
d0:3a:93:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:50:25 2026 by rpki-client