Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/v9u6c1G3uDUBNBW72AIeQsbMSkU.roa
File: v9u6c1G3uDUBNBW72AIeQsbMSkU.roa (raw, json)
Hash identifier: cSw29uaRCfhlXcjTUk/oJ6tL7PSBGFC6VZcRPpBUoGo=
Subject key identifier: BF:DB:BA:73:51:B7:B8:35:01:34:15:BB:D8:02:1E:42:C6:CC:4A:45
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 019C4D3965FDE3B59C415E1B132E7FAA9CE3
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/v9u6c1G3uDUBNBW72AIeQsbMSkU.roa
Signing time: Wed 11 Feb 2026 15:02:13 +0000
ROA not before: Wed 11 Feb 2026 15:02:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46844
IP address blocks: 91.227.155.0/24 maxlen: 24
176.119.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4d:39:65:fd:e3:b5:9c:41:5e:1b:13:2e:7f:aa:9c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: Feb 11 15:02:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bfdbba7351b7b835013415bbd8021e42c6cc4a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c5:33:58:53:07:3f:7d:f1:69:02:e2:54:8b:
7f:54:86:ca:43:da:7e:a8:0f:1e:e0:43:88:73:ff:
6f:21:01:48:26:9a:5f:d2:79:6b:f5:9e:e0:94:78:
5d:0b:00:fc:6b:8b:60:93:40:5f:43:7a:5d:23:cd:
fc:d0:d3:4e:25:65:14:b8:d1:27:10:6d:94:c5:33:
c6:14:a2:b6:bf:12:f3:3d:65:53:71:1c:83:cc:b5:
8b:7d:70:b1:73:3b:8a:cf:46:fd:4c:69:c5:3f:22:
a4:18:3b:33:6b:76:cd:3f:38:0d:66:db:b8:56:d6:
33:ce:a2:95:75:1e:1e:73:ac:44:34:59:9a:a0:95:
5e:86:70:8e:02:51:1c:32:17:29:8f:74:30:de:3a:
66:d8:23:77:de:7e:8e:86:d2:cf:35:1c:72:42:46:
17:c9:9b:af:cf:3b:ed:52:28:21:85:97:5a:7c:0a:
fe:25:7b:82:f4:6d:ba:a1:49:75:92:da:2e:af:3f:
b1:17:fe:55:9e:03:5b:06:1a:a3:b9:3f:52:d4:82:
35:b8:17:a6:02:74:f2:7f:fb:a5:76:55:f6:2e:0b:
cd:e3:60:7d:d5:c2:7a:5e:e7:01:b6:31:c5:85:01:
00:83:48:87:d4:b2:1f:27:a6:e7:25:06:3e:42:64:
2c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DB:BA:73:51:B7:B8:35:01:34:15:BB:D8:02:1E:42:C6:CC:4A:45
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/v9u6c1G3uDUBNBW72AIeQsbMSkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.155.0/24
176.119.140.0/24
Signature Algorithm: sha256WithRSAEncryption
94:2f:24:19:5b:ed:36:23:41:86:99:a1:32:1a:26:d5:9d:92:
23:50:5d:4f:6d:ca:12:be:ee:2a:8a:7d:b6:32:0a:f6:66:a8:
dd:e2:93:14:a5:cd:8e:35:69:eb:1c:cf:cb:66:d8:8b:fa:ad:
09:86:07:44:ed:b4:8e:b6:a7:26:28:92:4e:c3:bd:c9:1d:3b:
fa:15:d7:f3:ab:3c:43:4b:c0:40:3e:84:4f:a5:86:88:82:d5:
f3:98:f3:39:2b:1c:bd:75:90:d7:42:25:4a:61:4d:71:f8:24:
ef:51:51:87:4b:1c:16:28:da:1b:60:05:80:70:1f:09:cd:85:
0b:8d:0a:b7:3c:00:b0:f1:eb:20:ed:fd:a5:74:e8:f3:b2:5b:
6f:01:e8:7a:50:e9:b0:35:6b:a3:6a:34:fb:ad:f5:58:4a:a8:
4a:60:9e:31:75:66:b8:c8:d6:fa:3a:9c:5a:b7:53:b9:46:0d:
1d:e6:1b:fc:1d:aa:2a:a5:d0:fd:95:e9:4e:62:36:0a:a1:9a:
6d:97:e3:40:dc:13:a0:f3:b7:16:1f:09:58:12:e1:9d:b1:73:
d3:5a:96:1e:ae:aa:be:b7:ec:07:f8:3b:e6:cf:25:45:8d:02:
de:25:1e:8c:ef:38:37:40:79:b1:67:40:2f:bb:85:fa:9f:df:
65:ca:c8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:46:04 2026 by rpki-client