Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/SudVkAFlp8-hG_iKZQs9aJll_Hc.roa
File: SudVkAFlp8-hG_iKZQs9aJll_Hc.roa (raw, json)
Hash identifier: kla2lqRrJihGumafhiDJOUyE1ZtF4ClNy+SQx6UHQd0=
Subject key identifier: 4A:E7:55:90:01:65:A7:CF:A1:1B:F8:8A:65:0B:3D:68:99:65:FC:77
Certificate issuer: /CN=53052009ba7898d2361ca2ee7d130124f9d25125
Certificate serial: 019D72352A07A4D7F68FB60D1D1732C84F23
Authority key identifier: 53:05:20:09:BA:78:98:D2:36:1C:A2:EE:7D:13:01:24:F9:D2:51:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UwUgCbp4mNI2HKLufRMBJPnSUSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/SudVkAFlp8-hG_iKZQs9aJll_Hc.roa
Signing time: Thu 09 Apr 2026 12:26:19 +0000
ROA not before: Thu 09 Apr 2026 12:26:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50881
IP address blocks: 91.228.164.0/24 maxlen: 24
91.228.165.0/24 maxlen: 24
91.228.166.0/24 maxlen: 24
91.228.167.0/24 maxlen: 24
185.94.157.0/24 maxlen: 24
185.94.158.0/24 maxlen: 24
185.94.159.0/24 maxlen: 24
2a05:e800:1::/48 maxlen: 48
2a05:e800:1001::/48 maxlen: 48
2a05:e800:1003::/48 maxlen: 48
2a05:e800:1007::/48 maxlen: 48
2a05:e802:1005::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/UwUgCbp4mNI2HKLufRMBJPnSUSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/UwUgCbp4mNI2HKLufRMBJPnSUSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UwUgCbp4mNI2HKLufRMBJPnSUSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:35:2a:07:a4:d7:f6:8f:b6:0d:1d:17:32:c8:4f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53052009ba7898d2361ca2ee7d130124f9d25125
Validity
Not Before: Apr 9 12:26:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ae755900165a7cfa11bf88a650b3d689965fc77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ac:03:4a:ac:8e:69:8c:78:fb:09:af:b7:e5:
bc:f2:f2:dd:67:da:fe:d7:21:80:44:2a:c7:3f:74:
77:fb:95:72:8b:2a:e6:4e:e0:8d:d6:39:74:0e:92:
41:4f:dd:a8:9d:ca:fd:cf:c2:48:0a:19:7a:6a:44:
d1:c2:1f:ff:4d:91:25:12:2c:c9:f6:a7:b0:03:1b:
fa:25:cd:cd:c7:35:8f:09:95:0c:14:00:46:cb:6a:
55:d8:d4:63:61:dc:ce:ab:6f:29:87:a1:c2:df:11:
b1:db:52:33:56:93:07:bd:6e:4b:0a:01:96:bb:63:
8b:09:56:97:f4:9d:6d:02:01:0f:fa:55:af:fe:b6:
ed:58:98:15:bb:45:d4:94:e7:22:47:29:e9:8c:c9:
9b:d6:8f:7f:f4:98:a7:3a:17:e7:3f:37:6f:23:d8:
5d:04:ec:0f:e7:01:72:64:b3:ac:14:60:17:60:ff:
51:cb:02:87:36:8b:2c:3e:85:b2:dc:49:bb:fa:46:
87:5f:41:ef:83:6d:b9:f5:9e:f9:a9:61:7f:8f:a5:
50:87:ab:f1:c8:f0:ce:46:48:7b:57:ac:da:54:e8:
46:48:31:e0:f3:1d:6f:8f:fa:97:59:8b:8e:40:0f:
fa:33:9d:d3:07:03:86:ff:ec:06:65:ad:46:2a:5e:
0e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E7:55:90:01:65:A7:CF:A1:1B:F8:8A:65:0B:3D:68:99:65:FC:77
X509v3 Authority Key Identifier:
keyid:53:05:20:09:BA:78:98:D2:36:1C:A2:EE:7D:13:01:24:F9:D2:51:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UwUgCbp4mNI2HKLufRMBJPnSUSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/SudVkAFlp8-hG_iKZQs9aJll_Hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/938722-d415-4027-a0b3-a2aa286dc448/1/UwUgCbp4mNI2HKLufRMBJPnSUSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.164.0/22
185.94.157.0-185.94.159.255
IPv6:
2a05:e800:1::/48
2a05:e800:1001::/48
2a05:e800:1003::/48
2a05:e800:1007::/48
2a05:e802:1005::/48
Signature Algorithm: sha256WithRSAEncryption
1c:04:cd:9f:1c:7f:49:1d:16:e8:92:08:d0:03:ff:b9:63:d3:
22:c9:9d:5b:57:1a:f4:ce:6c:cd:90:a9:77:a5:c3:2e:c7:95:
e3:ec:13:58:f9:94:3c:df:ae:d6:d3:67:4f:88:24:77:08:e9:
ba:14:e6:88:77:7e:6e:72:09:c7:74:6e:f7:cc:40:d1:20:67:
ac:aa:67:6c:d9:9f:02:3d:3d:32:7f:82:72:99:d7:ca:8d:87:
ed:5a:74:fc:6b:1b:cd:82:0a:fd:f1:24:78:61:70:74:f0:09:
87:80:9e:2e:a0:24:bc:e7:17:5f:bf:d2:63:bc:a0:d7:62:a7:
62:86:5a:dc:28:f3:c9:54:92:c4:94:f6:6c:6f:c6:0b:72:66:
1f:c3:ee:d6:68:f6:af:6e:38:8c:0d:2c:2d:e2:f4:21:a1:31:
79:ac:1c:ae:69:71:38:0f:fa:83:27:b4:ce:b1:bd:be:f4:13:
27:9f:b4:79:96:c5:de:88:90:69:34:41:04:e2:fa:c2:82:f0:
72:90:3b:d6:a9:ce:ab:4c:bc:94:9d:fe:6b:4f:ef:4d:5c:6e:
e0:f4:af:ff:6b:7a:3c:4d:28:e7:4e:f0:35:1b:e7:6b:bf:bf:
00:8e:a3:99:3b:32:fc:28:3c:c8:26:35:95:3a:fe:28:28:25:
9d:bb:14:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:59:39 2026 by rpki-client