Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/j5SNiWDExW4Fzdr91OyzIh3q2cA.roa
File: j5SNiWDExW4Fzdr91OyzIh3q2cA.roa (raw, json)
Hash identifier: f3l9/B3pjG4wxZ77vCWHe+oV14ybxAso+7Z2L/8x8tk=
Subject key identifier: 8F:94:8D:89:60:C4:C5:6E:05:CD:DA:FD:D4:EC:B3:22:1D:EA:D9:C0
Certificate issuer: /CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Certificate serial: 019C73DAEBF69929DEBFCEFAEED1585C81B1
Authority key identifier: 8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/j5SNiWDExW4Fzdr91OyzIh3q2cA.roa
Signing time: Thu 19 Feb 2026 03:04:12 +0000
ROA not before: Thu 19 Feb 2026 03:04:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34939
IP address blocks: 45.90.28.0/23 maxlen: 24
45.90.30.0/23 maxlen: 24
146.19.14.0/24 maxlen: 24
185.253.5.0/24 maxlen: 24
193.110.81.0/24 maxlen: 24
2a07:a8c0::/32 maxlen: 33
2a07:a8c1::/32 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:73:da:eb:f6:99:29:de:bf:ce:fa:ee:d1:58:5c:81:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Validity
Not Before: Feb 19 03:04:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f948d8960c4c56e05cddafdd4ecb3221dead9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:75:4f:6d:be:62:c8:a6:dd:41:5a:37:91:c9:
bd:90:2f:53:d7:3a:d7:1e:1e:0b:ab:56:28:8b:06:
0f:c0:35:47:01:c7:da:54:21:3a:66:c4:9b:b5:7d:
1d:77:68:ba:b0:71:9a:af:39:da:ce:67:4a:91:6e:
97:ed:4f:3d:e7:86:0a:46:74:14:41:05:38:00:b4:
4a:56:c0:4f:ae:1a:ce:89:6e:54:d9:bb:31:b8:7e:
6a:3c:4d:5a:83:63:e1:9e:c3:ab:5c:ab:0b:58:ba:
de:e6:bc:c6:d4:1a:35:5b:88:75:0c:f3:97:5d:bb:
4f:92:9e:59:60:45:c4:67:98:31:c3:8a:20:b5:8a:
e4:92:b5:4d:21:ec:be:e3:c3:92:72:b0:d2:19:01:
2f:34:41:89:72:f1:f5:8d:01:27:a2:7b:07:5b:99:
9f:f2:55:26:ab:9c:26:70:a1:b5:f5:da:6a:7d:7b:
e8:76:a6:f0:63:32:bd:5e:19:b6:68:48:9e:fc:8b:
22:b0:13:e8:d8:bf:a5:c9:1e:be:2c:cb:30:eb:c2:
23:95:46:0d:d6:11:c8:33:8d:a3:a3:a0:b4:90:55:
ad:63:75:34:37:43:4e:f6:b2:34:02:1f:98:0b:80:
e0:c3:83:bb:63:00:60:56:f1:7e:c9:8a:54:9c:5a:
43:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:94:8D:89:60:C4:C5:6E:05:CD:DA:FD:D4:EC:B3:22:1D:EA:D9:C0
X509v3 Authority Key Identifier:
keyid:8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/j5SNiWDExW4Fzdr91OyzIh3q2cA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.28.0/22
146.19.14.0/24
185.253.5.0/24
193.110.81.0/24
IPv6:
2a07:a8c0::/31
Signature Algorithm: sha256WithRSAEncryption
27:3b:5b:59:4d:43:a3:b6:b8:84:7f:92:7b:97:58:e1:d7:b0:
70:21:46:61:a8:8e:b0:d1:dd:f8:8e:37:3d:8a:ec:be:5b:ec:
29:84:06:06:e4:de:cc:0e:a9:c1:9f:57:c4:df:0c:d8:e5:38:
c1:c0:59:dc:15:1e:2f:85:fb:e9:e8:8a:af:0e:99:c0:b4:bb:
0c:21:f4:ce:4e:e9:2c:89:46:7c:fe:30:2f:18:3a:a2:23:7c:
75:41:cb:72:03:b6:97:d9:21:fe:30:21:7d:cd:64:37:5f:26:
04:99:4e:c7:f5:0c:a7:dc:12:06:6e:67:eb:09:7e:ee:22:61:
77:04:5e:84:da:ba:49:21:6e:da:39:ed:67:71:5b:5d:13:46:
17:6c:8c:fa:93:c1:e9:97:1e:6f:48:3f:9e:d7:55:cb:77:61:
46:90:7d:7a:f3:bb:db:0c:f5:4d:0b:3f:b2:9f:87:f1:c2:d6:
67:03:e7:70:7b:42:11:7a:79:49:52:d7:7c:bd:1e:96:7a:59:
98:c6:94:5e:33:0a:d8:96:1e:14:31:c9:1b:0e:16:9c:45:c4:
e1:e8:f7:88:de:70:ef:80:32:f4:46:76:59:fd:40:c4:ef:d7:
26:7e:41:0b:a6:9f:3a:22:1e:73:8d:f0:95:84:45:91:12:6f:
f4:48:21:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:36:46 2026 by rpki-client