Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/sIfcqsxg3WW57k2COZeb4Iarq9c.roa
File: sIfcqsxg3WW57k2COZeb4Iarq9c.roa (raw, json)
Hash identifier: wIaOvcTZtG+qCBDexHsWNsZh+YEPmUdduOIOWtQaX0Q=
Subject key identifier: B0:87:DC:AA:CC:60:DD:65:B9:EE:4D:82:39:97:9B:E0:86:AB:AB:D7
Certificate issuer: /CN=1c0a6f6f3a9ae1da5e5be8752fab18deb28ba614
Certificate serial: 019D71ACC185304E52B8A2407247BFF65E6D
Authority key identifier: 1C:0A:6F:6F:3A:9A:E1:DA:5E:5B:E8:75:2F:AB:18:DE:B2:8B:A6:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/sIfcqsxg3WW57k2COZeb4Iarq9c.roa
Signing time: Thu 09 Apr 2026 09:57:20 +0000
ROA not before: Thu 09 Apr 2026 09:57:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58291
IP address blocks: 91.205.192.0/24 maxlen: 24
91.205.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:71:ac:c1:85:30:4e:52:b8:a2:40:72:47:bf:f6:5e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0a6f6f3a9ae1da5e5be8752fab18deb28ba614
Validity
Not Before: Apr 9 09:57:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b087dcaacc60dd65b9ee4d8239979be086ababd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:15:a8:06:94:44:0d:46:d1:4b:86:2d:8c:ef:
92:f9:48:eb:25:00:fb:30:e3:0b:a9:1d:39:45:8c:
5f:01:8b:e1:0f:c6:ba:94:08:31:b5:cb:0e:f0:1a:
28:43:36:34:63:f2:dc:fc:9d:5d:d5:b1:81:50:59:
1f:9a:3f:27:0d:58:aa:4e:29:65:aa:3a:1a:cd:a2:
fa:ed:95:dc:42:ee:a4:b0:87:15:af:80:7f:9f:28:
63:69:ea:0e:f0:9d:1c:0f:65:58:fd:65:21:ec:55:
41:eb:64:a8:3a:40:38:57:1b:63:99:3b:a8:4c:1d:
62:dd:90:42:a1:07:e9:d6:f6:e9:8e:51:79:4a:7d:
2d:89:d4:4e:36:63:9b:d5:38:94:7a:6f:ba:a5:63:
dd:83:00:b0:b6:cd:5b:18:2a:02:a2:38:7e:0b:28:
4d:22:fc:4a:d0:d1:4e:b7:5c:18:07:ca:e0:f2:53:
7b:bd:69:9a:cd:47:df:01:5a:97:49:25:cd:16:7b:
ad:5a:6b:b8:dd:5e:ef:da:4d:de:bf:d3:e5:cd:c4:
63:be:16:cf:a8:eb:e7:c5:a7:90:63:7d:56:ec:b4:
eb:0e:f0:13:97:17:2f:66:73:19:e0:ca:bb:d8:60:
0c:bc:22:43:c8:b9:4e:2e:2c:85:8f:05:d4:0d:fe:
5e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:87:DC:AA:CC:60:DD:65:B9:EE:4D:82:39:97:9B:E0:86:AB:AB:D7
X509v3 Authority Key Identifier:
keyid:1C:0A:6F:6F:3A:9A:E1:DA:5E:5B:E8:75:2F:AB:18:DE:B2:8B:A6:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/sIfcqsxg3WW57k2COZeb4Iarq9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.192.0/23
Signature Algorithm: sha256WithRSAEncryption
59:3a:c4:25:4d:7d:99:a1:6e:1a:03:25:8b:62:2e:dc:24:d2:
57:0f:05:b1:a4:47:0c:93:43:98:f2:0a:17:e4:45:08:ef:d0:
3e:b4:22:81:ac:d3:8e:19:27:fa:6b:77:74:4a:fd:a1:14:a4:
1a:f7:46:1f:97:dd:27:57:73:6e:31:e9:b0:39:12:bc:bc:85:
51:2e:30:78:af:33:63:5e:b5:69:1a:6f:65:61:d4:6e:f1:1f:
f9:fa:54:b9:2e:ab:9e:46:dc:09:bb:a5:9c:d7:22:5e:f0:7e:
f3:49:e2:5f:c9:a1:3b:44:5b:7a:0a:88:74:97:1f:ed:f8:fc:
0c:5d:56:8d:a2:9c:95:81:f6:ef:dd:b1:dc:9e:e0:33:89:4e:
87:85:fb:61:6c:c1:0e:4a:8a:a3:eb:d1:c0:b8:50:86:0c:bb:
4d:0e:8f:8a:34:49:b8:ba:4d:b6:7c:8d:31:c2:19:a0:4e:6c:
3a:e7:68:0a:d5:cd:70:1d:3d:0f:65:c4:ce:8e:f7:81:45:62:
de:f0:4f:f0:35:f9:28:aa:b7:ba:0c:e1:ca:6c:aa:1a:9c:58:
30:64:ff:2d:d8:f5:db:6b:2b:39:14:5e:98:38:c5:71:02:e8:
09:6e:51:50:e7:7b:80:6e:4d:ef:06:8f:de:dd:45:04:bb:db:
18:60:a8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:52:50 2026 by rpki-client