Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/Rho95ZWPheaVQQ9rPl1_APX-IdU.roa
File: Rho95ZWPheaVQQ9rPl1_APX-IdU.roa (raw, json)
Hash identifier: C+usd2BKZ4KTjGvMtB8Sy6rObSrr4wOsZ9I+pM/IkIQ=
Subject key identifier: 46:1A:3D:E5:95:8F:85:E6:95:41:0F:6B:3E:5D:7F:00:F5:FE:21:D5
Certificate issuer: /CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56
Certificate serial: 019D7031B8E75EFEBDA52A17767A40A0097C
Authority key identifier: FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/Rho95ZWPheaVQQ9rPl1_APX-IdU.roa
Signing time: Thu 09 Apr 2026 03:03:19 +0000
ROA not before: Thu 09 Apr 2026 03:03:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57494
IP address blocks: 91.199.149.0/24 maxlen: 24
91.227.68.0/24 maxlen: 24
185.133.43.0/24 maxlen: 24
185.135.80.0/22 maxlen: 22
185.175.157.0/24 maxlen: 24
185.177.216.0/24 maxlen: 24
185.177.217.0/24 maxlen: 24
185.177.218.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:70:31:b8:e7:5e:fe:bd:a5:2a:17:76:7a:40:a0:09:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56
Validity
Not Before: Apr 9 03:03:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=461a3de5958f85e695410f6b3e5d7f00f5fe21d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:14:e9:bd:23:08:4b:b0:8c:8e:ef:72:ab:30:
66:bb:e0:e4:fd:77:68:78:28:64:33:86:ba:82:b0:
e8:bf:2a:44:8c:a1:f7:71:d3:36:7a:62:03:0b:36:
30:0f:b5:b4:3a:8f:3c:00:61:10:b4:7b:5c:6b:73:
a8:a7:36:7f:33:81:e0:88:80:ed:a1:7d:62:80:3b:
1c:88:ee:72:f3:68:d5:2e:da:dd:4e:88:b0:3b:e0:
0a:df:d5:84:ca:0f:6e:73:20:95:e8:1e:15:04:35:
68:6a:1e:c5:3b:4c:1f:30:6d:a2:f9:a5:8e:a7:01:
f8:c8:a3:32:f3:d5:9c:17:67:2a:f9:ba:16:d9:ea:
71:01:74:1d:f9:5b:65:6d:d8:ec:c3:cc:9e:f1:c1:
3b:48:05:ef:c9:0d:3d:68:d8:a3:18:63:bc:6d:b0:
bd:0b:08:ca:80:e7:9d:b4:88:91:83:a1:f5:e1:dd:
65:25:bf:72:0e:cd:aa:fe:bc:70:5b:cd:c9:21:9c:
85:33:45:e3:36:f4:cc:9c:cd:cd:99:9e:7c:31:88:
9e:7b:3b:3e:62:67:e5:47:bc:8e:47:1e:d1:9e:f6:
ea:36:24:10:1e:d2:dc:eb:3a:1a:bd:00:e5:d0:28:
d4:b6:6b:00:32:24:f3:4d:33:86:c3:4d:75:d2:f5:
2d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1A:3D:E5:95:8F:85:E6:95:41:0F:6B:3E:5D:7F:00:F5:FE:21:D5
X509v3 Authority Key Identifier:
keyid:FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/Rho95ZWPheaVQQ9rPl1_APX-IdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.149.0/24
91.227.68.0/24
185.133.43.0/24
185.135.80.0/22
185.175.157.0/24
185.177.216.0/22
Signature Algorithm: sha256WithRSAEncryption
81:ba:dc:0c:a4:51:49:4a:6f:f5:90:be:97:8a:a2:ba:ea:35:
80:4c:a9:c5:30:e5:ec:a7:d9:d6:75:cc:e5:5d:0d:68:93:e1:
66:78:58:42:23:95:e7:3f:4b:30:b7:a3:e0:b6:3a:1a:71:88:
9e:4f:6c:95:14:53:eb:e9:b9:7b:67:19:a7:97:6b:a7:e0:d8:
1a:09:9d:07:24:45:70:d4:4c:d8:c5:51:4e:8c:d0:e5:46:d7:
d2:d4:aa:da:47:2e:5b:f6:88:ec:0c:37:1d:7a:60:43:d6:88:
18:dc:6f:c3:d2:67:6d:96:e1:84:92:08:09:5c:dd:fb:48:b1:
a8:d5:83:16:53:36:9b:4a:93:73:73:d8:ea:b9:5b:10:3b:27:
f9:2f:aa:56:2c:ea:9e:e9:23:22:4b:4f:e5:05:38:8b:e8:31:
e9:45:ef:94:f7:3c:2f:9c:50:dc:c3:09:5e:27:31:a4:8c:17:
02:3e:e2:0b:fc:c2:76:4c:07:7c:0e:1f:ad:1c:ad:7b:a6:91:
c2:d0:dc:83:d2:ce:94:c3:26:ca:87:ec:df:cf:53:9d:d4:ce:
3f:11:73:af:7d:6a:a4:7c:74:43:55:0a:9a:8e:56:7d:28:50:
2d:52:23:6a:2a:ff:67:ff:4a:2a:80:03:69:0d:2f:2f:99:f4:
97:24:bc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:58:21 2026 by rpki-client