Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/xNrjnvBJh_wuI9K3bZSO-wuWUTU.roa
File: xNrjnvBJh_wuI9K3bZSO-wuWUTU.roa (raw, json)
Hash identifier: xawGQx0fM3PQVbGbqNxkiscfylaEsDI9X0uVsXFPexA=
Subject key identifier: C4:DA:E3:9E:F0:49:87:FC:2E:23:D2:B7:6D:94:8E:FB:0B:96:51:35
Certificate issuer: /CN=1afba38a8707fd231c3887e4a52bdcdedab20323
Certificate serial: 01A0B85E5DB965C25B523C075EC5646C29C2
Authority key identifier: 1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/xNrjnvBJh_wuI9K3bZSO-wuWUTU.roa
Signing time: Sat 19 Sep 2026 06:33:07 +0000
ROA not before: Sat 19 Sep 2026 06:33:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207369
IP address blocks: 91.205.48.0/22 maxlen: 22
91.205.48.0/23 maxlen: 23
91.205.50.0/23 maxlen: 23
95.215.244.0/22 maxlen: 22
178.216.208.0/21 maxlen: 21
185.39.79.0/24 maxlen: 24
185.138.184.0/22 maxlen: 22
185.138.184.0/23 maxlen: 23
185.138.184.0/24 maxlen: 24
185.138.186.0/23 maxlen: 23
185.138.187.0/24 maxlen: 24
2a10:680::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 03:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b8:5e:5d:b9:65:c2:5b:52:3c:07:5e:c5:64:6c:29:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1afba38a8707fd231c3887e4a52bdcdedab20323
Validity
Not Before: Sep 19 06:33:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4dae39ef04987fc2e23d2b76d948efb0b965135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bb:91:12:07:4d:68:1b:51:4d:e9:ea:14:b5:
9b:3e:2d:ac:b7:3a:b7:f8:9e:93:3f:ff:14:86:4b:
8c:16:dc:54:c1:37:37:90:0b:a6:84:f0:42:43:18:
72:af:4c:f7:c1:58:e2:68:50:e4:f5:83:3e:77:9d:
d5:de:c8:ef:2b:89:0d:d7:ea:0b:82:08:87:47:75:
5e:02:68:41:cf:a8:80:3e:6d:a8:08:84:d3:58:4a:
77:31:7d:53:f3:f0:6a:fd:77:de:c0:bd:16:77:59:
e3:4e:2a:e8:c1:8b:b8:22:30:6c:44:81:77:fe:4a:
59:bd:92:a1:5a:12:eb:27:da:a0:c9:81:05:8c:fd:
79:b1:08:34:9c:eb:04:40:f7:f9:9d:6a:f8:da:75:
33:5d:76:54:59:ec:32:f6:63:f3:ea:d5:c6:f2:ee:
80:69:84:4f:5d:30:6a:39:8b:d6:ab:71:62:a0:81:
20:f2:ad:c7:50:9d:b8:66:e9:78:3f:86:23:20:e1:
6c:27:d3:2b:5a:ae:0d:22:dc:66:89:36:91:5e:ed:
2d:81:c8:6d:df:06:9c:ba:c0:cc:83:b2:4b:60:38:
1b:47:8e:08:85:ee:fd:3e:e3:ac:fe:f4:b4:52:21:
6c:7f:9c:b7:c2:c8:52:d0:b9:ac:29:52:d3:c5:01:
45:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DA:E3:9E:F0:49:87:FC:2E:23:D2:B7:6D:94:8E:FB:0B:96:51:35
X509v3 Authority Key Identifier:
keyid:1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/xNrjnvBJh_wuI9K3bZSO-wuWUTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.48.0/22
95.215.244.0/22
178.216.208.0/21
185.39.79.0/24
185.138.184.0/22
IPv6:
2a10:680::/32
Signature Algorithm: sha256WithRSAEncryption
39:c5:78:d6:25:98:8a:7a:44:57:e1:49:40:98:4e:26:e7:86:
6b:10:f3:5f:dd:1d:47:e9:ed:99:a6:aa:36:7d:f4:cd:28:bc:
66:05:24:22:01:ee:ba:66:fc:47:86:d8:0e:ea:d0:7e:64:2e:
66:3b:21:12:86:a9:c6:bd:d2:ce:6e:01:a0:21:07:4e:7f:47:
7f:d7:c7:c6:69:94:b5:19:65:19:86:ea:4e:ea:4d:6a:76:df:
6f:b8:66:d2:52:10:1a:bb:a4:28:93:9c:24:18:5b:61:e0:5d:
e0:c7:cb:e0:68:3e:ae:a4:ae:eb:d9:90:b4:5f:c2:1a:6c:19:
b1:8b:2d:0c:30:7b:81:8a:f8:57:54:eb:7b:66:00:8a:a3:53:
a2:2c:59:37:53:92:26:c8:01:b2:e3:34:08:1e:04:1d:d3:d3:
29:f7:e9:9b:b7:f3:98:7f:90:f2:2e:ee:cc:64:e5:3f:4e:d3:
be:6d:33:9b:a7:49:3c:4c:8d:61:1c:54:26:aa:2c:9c:5a:06:
f9:9c:b3:48:34:01:aa:6a:ed:0e:68:1a:93:38:37:2b:af:37:
5e:5c:f1:04:a7:01:7d:31:c1:b2:ba:b9:72:86:96:aa:0f:83:
91:5b:a5:2a:3d:29:2f:3d:78:ee:0f:b1:34:68:a6:11:db:fe:
8e:5c:90:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:28:07 2026 by rpki-client