Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/SATda0Q9JgLf7FNzUfrTDL5vnEQ.roa
File: SATda0Q9JgLf7FNzUfrTDL5vnEQ.roa (raw, json)
Hash identifier: XGliMsZWtirHhZX2xfYpxBaxkmF1dTUTYWoC+BYAPKw=
Subject key identifier: 48:04:DD:6B:44:3D:26:02:DF:EC:53:73:51:FA:D3:0C:BE:6F:9C:44
Certificate issuer: /CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Certificate serial: 019D4E5A2D023BBC1790B371AC16D7E6F676
Authority key identifier: AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/SATda0Q9JgLf7FNzUfrTDL5vnEQ.roa
Signing time: Thu 02 Apr 2026 13:20:25 +0000
ROA not before: Thu 02 Apr 2026 13:20:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198704
IP address blocks: 91.229.22.0/24 maxlen: 24
91.238.145.0/24 maxlen: 24
185.184.124.0/22 maxlen: 22
185.184.124.0/24 maxlen: 24
185.184.125.0/24 maxlen: 24
185.184.126.0/24 maxlen: 24
2a0b:4c80::/32 maxlen: 32
2a0b:4c84::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4e:5a:2d:02:3b:bc:17:90:b3:71:ac:16:d7:e6:f6:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Validity
Not Before: Apr 2 13:20:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4804dd6b443d2602dfec537351fad30cbe6f9c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6d:91:e5:89:42:f0:5c:72:d1:bc:41:67:bc:
6d:9e:d5:99:e4:4e:91:23:18:a3:f3:ef:80:0d:aa:
ca:cc:4f:8f:c5:4e:8e:5b:13:ef:8a:31:90:66:5d:
88:c0:04:cc:43:90:8e:80:5b:ef:e7:85:11:bf:7c:
58:0b:db:31:b1:f7:6d:fa:b9:99:8e:05:cb:ed:5d:
71:13:4b:2d:42:f7:a0:cc:6d:8b:cf:d2:09:fe:ee:
80:5b:10:d4:cd:ac:7f:50:db:2c:09:85:e7:bd:56:
dc:ec:cc:85:66:46:b3:84:d7:b6:f8:78:fc:d5:8f:
2c:02:03:57:5b:3d:f9:43:47:92:98:c0:22:90:cb:
72:ec:3b:f6:d8:94:fa:3a:82:5a:0c:29:ae:1a:e6:
eb:0f:6e:bb:b7:d6:5b:fa:94:94:fa:40:e6:19:34:
ca:76:2a:99:c0:c1:9d:77:d4:be:82:b9:d6:28:ac:
9d:92:7d:df:a9:14:35:8a:3c:c7:62:4a:e0:07:33:
4a:15:66:62:4e:70:e7:57:6a:fc:e7:37:03:b8:1e:
5f:32:40:9d:fa:a7:cc:98:00:19:55:07:09:71:08:
5c:6c:51:48:88:bd:52:68:b3:dd:1d:61:f9:42:01:
8a:f3:42:81:bc:54:6a:c8:1f:11:f5:a4:2e:f0:57:
a2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:04:DD:6B:44:3D:26:02:DF:EC:53:73:51:FA:D3:0C:BE:6F:9C:44
X509v3 Authority Key Identifier:
keyid:AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/SATda0Q9JgLf7FNzUfrTDL5vnEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.22.0/24
91.238.145.0/24
185.184.124.0/22
IPv6:
2a0b:4c80::/32
2a0b:4c84::/32
Signature Algorithm: sha256WithRSAEncryption
2a:c1:ba:9a:9e:e3:2d:9c:b6:c0:26:f7:a1:9a:21:80:77:95:
30:72:b0:a1:73:14:dd:5b:9b:bd:13:fe:95:d1:c9:29:97:a4:
b2:d9:38:d4:b6:b6:33:02:7f:56:b2:6a:b7:14:21:60:bd:a2:
7b:e1:e8:91:05:a4:e5:2b:64:2a:79:c3:c7:24:19:95:f4:bb:
34:9d:87:7a:6c:d8:a8:3a:bc:75:84:51:8b:3e:22:92:83:cf:
88:7b:73:97:c9:c7:9b:7b:ae:7d:24:05:06:93:fc:53:4e:c8:
28:3b:d5:b6:9b:7b:4c:54:29:f8:d6:31:6b:a5:91:f4:bd:1e:
e8:74:16:80:a7:37:03:61:14:51:f1:67:31:b2:ed:74:5a:39:
47:2c:9d:c3:1b:c6:0b:33:9f:f9:46:a7:36:27:df:06:09:5d:
b4:c7:c1:d3:d1:9a:91:bf:a7:de:cc:e7:d3:aa:9f:a3:ac:c1:
48:78:ae:fc:67:09:24:d2:1a:6e:7b:0d:ec:78:bd:c9:b8:e4:
f1:79:e0:f3:00:26:82:e6:8e:10:9c:a0:05:98:20:6d:60:53:
7b:3a:eb:54:15:4c:9d:63:1c:1a:4b:4f:52:02:3a:96:7d:e9:
39:eb:33:21:64:36:20:78:53:80:a2:6c:c1:79:5d:0d:a1:1c:
6d:63:2e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:58:48 2026 by rpki-client