Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/p-lIpXsmPoQertGg9bQtPqbri4I.roa
File: p-lIpXsmPoQertGg9bQtPqbri4I.roa (raw, json)
Hash identifier: +pBtjOXElfoNNS7bSuz70mkJA+YE5+231SNuLb17X3Y=
Subject key identifier: A7:E9:48:A5:7B:26:3E:84:1E:AE:D1:A0:F5:B4:2D:3E:A6:EB:8B:82
Certificate issuer: /CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Certificate serial: 01A03D1A483602838415A89D3C1E85A8A02B
Authority key identifier: D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/p-lIpXsmPoQertGg9bQtPqbri4I.roa
Signing time: Wed 26 Aug 2026 08:05:27 +0000
ROA not before: Wed 26 Aug 2026 08:05:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213466
IP address blocks: 91.135.176.0/20 maxlen: 20
91.135.176.0/23 maxlen: 23
91.135.176.0/24 maxlen: 24
91.135.177.0/24 maxlen: 24
91.135.178.0/24 maxlen: 24
91.135.179.0/24 maxlen: 24
91.135.180.0/24 maxlen: 24
91.135.181.0/24 maxlen: 24
91.135.182.0/23 maxlen: 23
91.135.182.0/24 maxlen: 24
91.135.183.0/24 maxlen: 24
91.135.184.0/24 maxlen: 24
91.135.185.0/24 maxlen: 24
91.135.186.0/24 maxlen: 24
91.135.187.0/24 maxlen: 24
91.135.188.0/23 maxlen: 23
91.135.188.0/24 maxlen: 24
91.135.189.0/24 maxlen: 24
91.135.190.0/24 maxlen: 24
91.135.191.0/24 maxlen: 24
171.22.156.0/23 maxlen: 23
171.22.156.0/24 maxlen: 24
171.22.157.0/24 maxlen: 24
171.22.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:1a:48:36:02:83:84:15:a8:9d:3c:1e:85:a8:a0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Validity
Not Before: Aug 26 08:05:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7e948a57b263e841eaed1a0f5b42d3ea6eb8b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b2:9d:95:b9:ac:ef:50:c5:67:d5:7c:51:2c:
63:d7:40:a2:18:9e:aa:0a:ac:42:c0:d3:a2:b0:5e:
49:ad:85:a6:1d:ea:a3:45:08:aa:95:aa:86:16:03:
17:a6:5b:39:bf:10:95:4a:93:c7:7a:40:08:f3:ae:
83:71:5e:94:ea:17:be:4e:d7:95:db:76:54:a4:a9:
44:57:75:5c:60:5f:1c:35:5f:34:08:a6:d3:bf:d0:
90:14:42:a5:c8:b4:fa:c1:a6:ae:b8:f2:7f:f0:bb:
7e:7c:56:1e:e8:00:0e:46:c1:da:6b:41:0e:e1:87:
cb:97:a3:0a:b0:f0:89:a1:40:72:78:4e:15:5e:77:
59:25:bf:24:f3:c4:dd:43:d9:b2:1f:eb:9b:94:67:
66:b6:55:e2:04:cd:77:38:20:ac:9a:57:1c:aa:d6:
b6:6b:b0:17:1c:4f:56:9f:7e:a0:9d:0b:94:37:27:
ff:02:96:f0:a8:45:c6:57:60:14:6f:ad:5a:e3:3e:
e1:53:40:e7:08:6c:57:b1:bb:be:f2:de:44:21:26:
4b:24:21:6d:40:87:69:04:c0:93:1e:27:01:34:14:
62:29:3b:01:6c:21:9f:e5:43:ff:80:71:d8:a0:a7:
90:64:44:e7:ff:e0:f7:12:a3:b9:2e:b6:aa:e5:a8:
61:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E9:48:A5:7B:26:3E:84:1E:AE:D1:A0:F5:B4:2D:3E:A6:EB:8B:82
X509v3 Authority Key Identifier:
keyid:D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/p-lIpXsmPoQertGg9bQtPqbri4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.135.176.0/20
171.22.156.0/23
171.22.159.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:63:0c:c1:d6:2a:f7:0d:03:21:9f:bd:f2:36:b8:8e:20:ab:
9c:a9:b8:fd:22:db:23:16:ec:f9:ba:dd:9c:80:c8:08:17:f2:
a4:73:4f:09:7d:3a:3d:f9:76:ad:c1:f3:cb:45:db:4f:d4:bf:
fb:27:a7:63:2b:33:ce:77:81:4a:7d:10:71:05:e3:8e:b2:bb:
f8:33:7a:1a:b2:7e:5a:e5:02:26:65:87:f2:30:8b:d4:06:98:
60:2c:d7:11:af:09:70:1d:07:f4:15:e7:fe:5c:c1:02:e2:b3:
e4:c5:c8:78:48:c6:52:d5:c6:c5:72:7a:aa:1c:91:f6:2e:de:
d8:79:3f:a7:e6:a1:52:0c:24:4d:3f:e8:f2:20:8e:f8:4d:35:
98:97:11:12:e7:d4:b2:c6:49:96:11:4f:4d:44:9b:ed:f9:93:
ab:f3:62:10:bd:2d:3a:11:b0:e6:24:ec:09:c0:24:97:e1:91:
77:09:54:b9:c9:fd:77:9d:10:21:e4:96:3c:98:31:23:f3:16:
46:06:8f:88:b0:68:e0:98:74:28:e0:c6:cc:17:2c:09:b9:46:
94:cf:f3:2b:48:40:3e:af:6e:17:84:b9:fe:95:39:ed:fc:a7:
8a:ca:84:0d:86:63:20:3d:0f:44:f4:cc:e2:a1:1d:0b:25:ec:
68:50:98:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:30:32 2026 by rpki-client