Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/N2mIezuMwglH5z9Sw394yPABh_Y.roa
File: N2mIezuMwglH5z9Sw394yPABh_Y.roa (raw, json)
Hash identifier: yGQ16rD5VkDHl88O+y0XucdcYEVXoD+T2CoyV9LtCBE=
Subject key identifier: 37:69:88:7B:3B:8C:C2:09:47:E7:3F:52:C3:7F:78:C8:F0:01:87:F6
Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial: 019D0A08EA84F879D13C6444D9DA7FCE49F4
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/N2mIezuMwglH5z9Sw394yPABh_Y.roa
Signing time: Fri 20 Mar 2026 06:57:29 +0000
ROA not before: Fri 20 Mar 2026 06:57:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 91.200.253.0/24 maxlen: 24
110.172.189.0/24 maxlen: 24
114.69.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0a:08:ea:84:f8:79:d1:3c:64:44:d9:da:7f:ce:49:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Validity
Not Before: Mar 20 06:57:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3769887b3b8cc20947e73f52c37f78c8f00187f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ea:d2:13:f8:46:54:45:8b:5d:82:71:ee:93:
91:99:0e:d5:8c:4a:01:54:4c:99:4b:3b:18:d3:ad:
f3:78:ea:db:d9:a6:e1:55:9e:a8:53:07:9a:88:f1:
64:b0:f9:4b:2c:79:d1:82:35:f3:e6:10:d3:67:ab:
83:af:e0:24:a2:12:9b:28:e2:3f:1c:a6:99:2c:00:
6c:40:2b:6a:ef:12:d2:9b:19:4c:67:4b:fd:a2:d7:
4e:b7:e4:5e:63:ad:88:af:4d:ee:77:e3:7b:61:f9:
8b:0a:39:ed:2f:f1:ec:10:e9:e9:c6:b9:9b:c0:44:
35:36:08:5f:5a:29:9d:92:e9:32:e6:7c:28:a0:9d:
36:3f:91:ca:20:4d:69:db:d1:3a:dd:a4:3a:5f:dd:
fa:68:53:aa:c6:1c:64:72:b7:15:f2:c7:d5:a9:4b:
1b:c2:0c:ad:97:b2:e3:96:4b:2a:45:3d:4f:e3:cc:
1c:84:dc:5a:79:fb:61:62:8d:fe:0d:1b:75:b6:a8:
16:31:ff:27:3e:9b:30:9c:ac:d6:b6:38:12:c4:6c:
86:17:54:1d:c4:9e:87:5a:3c:70:ff:6d:55:bb:27:
42:c0:21:87:c8:a8:83:27:11:1a:48:77:5a:27:8f:
dc:86:36:15:51:fc:f5:69:b0:f9:4d:3d:6e:76:9f:
d4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:69:88:7B:3B:8C:C2:09:47:E7:3F:52:C3:7F:78:C8:F0:01:87:F6
X509v3 Authority Key Identifier:
keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/N2mIezuMwglH5z9Sw394yPABh_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.253.0/24
110.172.189.0/24
114.69.247.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:ea:ad:e4:57:9b:cf:81:17:b2:29:49:39:02:4d:dc:ad:7e:
f5:60:60:1e:d8:e5:bc:ff:ee:4b:db:f3:40:ff:53:0f:82:31:
ea:75:8d:27:97:4e:cf:1d:84:d7:2f:14:6b:88:16:97:17:51:
33:58:08:1a:d0:ee:39:47:15:e7:47:48:f7:47:a0:c8:9f:33:
53:86:a7:c7:bd:a6:41:4b:6b:11:8b:5d:5c:82:aa:88:33:28:
1f:cd:a1:bd:0f:de:0c:b7:08:f9:50:dd:84:f6:50:64:ae:cc:
b9:f0:10:56:c3:21:c9:7e:3e:96:0a:97:41:65:53:95:93:b3:
e4:e8:10:7d:da:75:d1:79:a8:95:bd:d0:bd:0c:0b:15:2f:f0:
7a:4d:4f:c2:94:34:c9:fa:1f:26:80:7e:6c:32:a6:08:b7:de:
8d:5d:57:5e:55:1b:43:05:c5:4c:f0:4e:64:20:6a:e7:a1:b3:
49:9d:96:8e:3b:e2:78:03:12:87:e8:15:42:2c:c4:4b:c4:e4:
bf:f3:24:44:42:58:e9:2f:af:a0:7c:e8:79:17:f2:a7:58:4e:
9e:b0:33:30:0e:cc:c6:a6:cd:b9:f7:a9:b3:e2:b3:d7:80:61:
d1:43:ce:d9:40:2b:9d:ff:65:c6:e7:12:5c:19:a9:04:fd:16:
19:ee:e9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:47:07 2026 by rpki-client