Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/2751EE97ZUX46PuQKd5VXZi8NQ4.roa
File: 2751EE97ZUX46PuQKd5VXZi8NQ4.roa (raw, json)
Hash identifier: ttrLfXYMhhaOogoOW1E72PyGhahP9uiFnKhfYUnBtRs=
Subject key identifier: DB:BE:75:10:4F:7B:65:45:F8:E8:FB:90:29:DE:55:5D:98:BC:35:0E
Certificate issuer: /CN=a5541609cd947bedfc99125840030108a3f141c1
Certificate serial: 019D9B13D263DDA1E53B1D9EC5793DA87223
Authority key identifier: A5:54:16:09:CD:94:7B:ED:FC:99:12:58:40:03:01:08:A3:F1:41:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/2751EE97ZUX46PuQKd5VXZi8NQ4.roa
Signing time: Fri 17 Apr 2026 10:54:20 +0000
ROA not before: Fri 17 Apr 2026 10:54:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16167
IP address blocks: 176.102.191.0/24 maxlen: 24
185.243.0.0/24 maxlen: 24
193.41.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:13:d2:63:dd:a1:e5:3b:1d:9e:c5:79:3d:a8:72:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5541609cd947bedfc99125840030108a3f141c1
Validity
Not Before: Apr 17 10:54:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dbbe75104f7b6545f8e8fb9029de555d98bc350e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:eb:8f:f2:0b:54:4f:e8:b9:58:72:7f:58:42:
76:6c:86:4c:9c:dd:1a:f9:86:10:a0:c9:ca:16:3f:
ba:35:a4:55:07:d5:c7:43:3b:98:ac:bb:f4:85:1d:
17:4c:f9:c7:71:a3:fc:fa:e0:a2:f8:06:23:7e:12:
9d:38:ab:b1:30:dc:b9:01:5b:e5:1f:d5:86:76:76:
cc:e1:10:60:b2:43:c9:9e:e3:d0:98:f1:a6:c3:80:
cf:6b:09:28:f3:e2:8e:09:59:49:1d:14:7a:a3:03:
e6:6d:fb:5f:e2:bd:6c:71:b8:f1:d4:43:22:c1:28:
4f:9a:21:eb:bb:ec:a6:7f:30:b7:c9:10:06:78:80:
14:72:ee:3e:db:af:e8:81:a3:08:74:6a:2f:be:da:
58:9b:1d:cf:07:1d:34:c8:e5:05:af:4f:30:5d:4f:
68:78:5f:fc:5b:5f:9c:99:ac:5e:3d:f7:9d:95:83:
af:2c:a6:bd:6a:56:9c:1a:5a:42:c3:45:70:8b:42:
36:c3:98:9d:e4:6c:e8:f2:1d:4d:eb:34:6b:a6:d3:
0a:89:12:ce:c2:d0:c9:09:15:55:55:81:7f:2e:a7:
cc:47:25:23:9a:7b:3d:3a:4b:c9:21:7e:b9:04:29:
9f:76:ca:83:d7:3e:03:3f:b6:43:4b:77:0b:81:eb:
d5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BE:75:10:4F:7B:65:45:F8:E8:FB:90:29:DE:55:5D:98:BC:35:0E
X509v3 Authority Key Identifier:
keyid:A5:54:16:09:CD:94:7B:ED:FC:99:12:58:40:03:01:08:A3:F1:41:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVQWCc2Ue-38mRJYQAMBCKPxQcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/2751EE97ZUX46PuQKd5VXZi8NQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/04a3c4-0d88-48e7-84de-54c2c0cab7c3/1/pVQWCc2Ue-38mRJYQAMBCKPxQcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.102.191.0/24
185.243.0.0/24
193.41.230.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:c1:ad:5e:0f:e5:d9:d2:20:54:d1:93:0f:07:ac:b1:54:0f:
b0:c7:df:6f:a7:fc:0c:51:b1:b5:22:d6:e8:8b:fe:ef:38:63:
51:ee:8f:23:86:86:c6:4c:b0:52:5a:64:87:d8:0a:d2:4b:85:
e5:fe:86:b4:e6:76:f9:6f:26:66:d4:9a:c9:15:4a:71:0b:d6:
98:ff:75:d7:63:63:d7:c5:cb:65:ab:69:12:e0:d5:48:ff:6d:
b2:68:50:cb:d2:3a:71:43:2c:e5:14:85:85:64:7e:88:de:f2:
6c:bf:26:db:7a:39:08:71:36:6f:91:08:8a:4d:3e:34:47:06:
8f:42:14:f4:52:bb:0e:35:dd:0b:5d:c1:d0:ea:7e:55:a0:78:
d9:13:91:97:0a:b6:44:3f:94:9a:f4:02:11:48:d8:c7:d8:dc:
63:8f:83:d5:58:aa:79:50:b1:92:d5:42:b9:2f:ff:6a:37:e0:
54:49:a1:e9:69:44:41:46:98:30:a3:e3:5a:0c:fa:0a:5f:6c:
52:51:57:a3:a5:a1:21:ff:39:35:cc:40:45:85:8a:b3:53:bb:
a0:38:93:fb:07:93:5c:f4:a0:dc:7e:4d:8f:05:f2:0b:8f:ef:
75:01:5a:04:5a:2f:db:9e:13:d6:cf:03:97:5f:e3:f9:10:59:
7c:3b:1c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:24:02 2026 by rpki-client