Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/4Z1I1mr8VGf6nL_WvnxWyJ0Dp_M.roa
File: 4Z1I1mr8VGf6nL_WvnxWyJ0Dp_M.roa (raw, json)
Hash identifier: BIxTJbAdTSk3RkQmfEkQ9FBrNikv/7JE8hvp1Z+hKRA=
Subject key identifier: E1:9D:48:D6:6A:FC:54:67:FA:9C:BF:D6:BE:7C:56:C8:9D:03:A7:F3
Certificate issuer: /CN=e8b62bbe9eeb5a3d66e1cc223adedc53b177c4ee
Certificate serial: 01A067D272FFEBE91E92EDBAFDB816DD7636
Authority key identifier: E8:B6:2B:BE:9E:EB:5A:3D:66:E1:CC:22:3A:DE:DC:53:B1:77:C4:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LYrvp7rWj1m4cwiOt7cU7F3xO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/4Z1I1mr8VGf6nL_WvnxWyJ0Dp_M.roa
Signing time: Thu 03 Sep 2026 15:10:40 +0000
ROA not before: Thu 03 Sep 2026 15:10:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213168
IP address blocks: 91.211.145.0/24 maxlen: 24
141.226.121.0/24 maxlen: 24
141.226.122.0/24 maxlen: 24
147.236.107.0/24 maxlen: 24
147.236.144.0/22 maxlen: 24
147.236.156.0/22 maxlen: 24
212.104.212.0/24 maxlen: 24
212.104.213.0/24 maxlen: 24
2a13:8140::/48 maxlen: 48
2a13:8140:1::/48 maxlen: 48
2a13:8140:2::/48 maxlen: 48
2a13:8140:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/6LYrvp7rWj1m4cwiOt7cU7F3xO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/6LYrvp7rWj1m4cwiOt7cU7F3xO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LYrvp7rWj1m4cwiOt7cU7F3xO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:d2:72:ff:eb:e9:1e:92:ed:ba:fd:b8:16:dd:76:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b62bbe9eeb5a3d66e1cc223adedc53b177c4ee
Validity
Not Before: Sep 3 15:10:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e19d48d66afc5467fa9cbfd6be7c56c89d03a7f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:92:b4:aa:fd:96:c0:54:27:4c:13:7b:38:48:
23:f9:b5:c6:e1:c6:76:34:79:42:e7:72:cb:35:cd:
c9:16:ce:11:97:d2:66:40:71:1d:2c:7b:d1:c2:ab:
0d:89:30:b2:8e:6f:63:20:f4:bf:5e:16:bb:6e:35:
2d:68:42:1c:a5:fd:16:5e:e1:1b:e8:fd:d1:1d:b5:
39:3c:c2:fc:36:89:74:3c:c5:25:91:ca:36:19:96:
51:0d:4f:95:40:d7:34:5a:75:23:73:f9:3d:38:06:
46:dd:c5:76:e7:68:8d:95:46:37:35:21:5f:af:5c:
9d:73:41:b2:a3:db:27:92:f5:1f:e6:6c:8d:f4:32:
b6:4e:db:f8:e3:17:7e:c1:42:21:45:e0:b3:ab:8c:
0e:a4:ab:ce:08:ca:79:45:cf:df:53:7f:c6:72:6f:
8e:ae:46:c8:53:8d:ad:13:d6:1a:4b:5d:48:39:b4:
fb:de:8b:41:39:06:b3:c1:d5:84:42:4d:0b:b6:ad:
33:b7:99:8d:e6:86:4e:e0:80:25:80:d7:bb:dd:95:
75:c6:ee:0c:90:14:f1:b1:d1:d9:78:5d:b8:0f:bc:
a4:1c:3c:1c:45:5b:fc:22:1a:68:dc:c8:27:79:9d:
e5:6a:ff:72:1f:fb:03:8a:43:1c:29:83:be:d2:20:
3e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9D:48:D6:6A:FC:54:67:FA:9C:BF:D6:BE:7C:56:C8:9D:03:A7:F3
X509v3 Authority Key Identifier:
keyid:E8:B6:2B:BE:9E:EB:5A:3D:66:E1:CC:22:3A:DE:DC:53:B1:77:C4:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LYrvp7rWj1m4cwiOt7cU7F3xO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/4Z1I1mr8VGf6nL_WvnxWyJ0Dp_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/6LYrvp7rWj1m4cwiOt7cU7F3xO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.145.0/24
141.226.121.0-141.226.122.255
147.236.107.0/24
147.236.144.0/22
147.236.156.0/22
212.104.212.0/23
IPv6:
2a13:8140::/46
Signature Algorithm: sha256WithRSAEncryption
4c:29:54:44:49:f9:59:4d:53:9b:18:d2:f0:c5:a4:3a:20:32:
58:ba:c3:54:99:4a:85:b8:10:2b:5d:83:bd:13:f6:f0:5c:0c:
63:45:c6:60:18:49:d9:bd:75:20:8b:30:7a:ea:2b:6e:2b:8e:
4b:95:28:4c:10:cd:1e:a3:f7:01:87:ac:63:1c:76:04:e2:d0:
e1:69:cb:b6:29:98:2d:12:0e:38:b3:a9:ef:80:8e:d3:78:65:
a7:bc:08:23:e3:9f:43:b8:f0:51:4f:e8:7b:c8:0b:05:ef:e2:
93:27:cb:b1:ec:5d:6f:a4:90:e6:d8:77:3d:ab:c9:d9:06:ac:
1b:08:40:fd:b7:d9:7f:91:04:42:38:42:ea:6c:9a:8e:93:f7:
af:ca:da:bf:b8:2e:e2:59:ce:30:16:fa:6c:17:62:3d:9d:e0:
f1:e3:a2:c2:2a:fb:ac:ab:ba:87:88:91:37:10:94:34:26:46:
82:ea:7b:33:5d:0e:e9:85:e2:70:e4:8f:46:2e:16:99:7e:28:
4a:f5:04:77:b8:37:2c:f3:09:37:38:d3:ac:e5:86:51:45:9a:
87:ea:b5:0b:51:4a:3f:9b:c0:f1:df:cc:1a:ad:01:b2:4c:82:
eb:b0:05:1a:a0:e7:9a:56:33:9a:0d:b6:9e:aa:54:30:c6:43:
08:fe:ad:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:28:49 2026 by rpki-client