Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/HsXb6FNmfKhZAcp7q3_MyFU22yM.roa
File: HsXb6FNmfKhZAcp7q3_MyFU22yM.roa (raw, json)
Hash identifier: qKhTq1yuC7vmPiRPwJiMwv48MHVpQq6MdVx75Lq+FhY=
Subject key identifier: 1E:C5:DB:E8:53:66:7C:A8:59:01:CA:7B:AB:7F:CC:C8:55:36:DB:23
Certificate issuer: /CN=aef20efc0ae4013e6f4867c15f2377b235095b86
Certificate serial: 019B7DCA5DA7F021B2E8E64022C9DC3EF4AD
Authority key identifier: AE:F2:0E:FC:0A:E4:01:3E:6F:48:67:C1:5F:23:77:B2:35:09:5B:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/HsXb6FNmfKhZAcp7q3_MyFU22yM.roa
Signing time: Fri 02 Jan 2026 08:19:32 +0000
ROA not before: Fri 02 Jan 2026 08:19:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48102
IP address blocks: 91.210.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:ca:5d:a7:f0:21:b2:e8:e6:40:22:c9:dc:3e:f4:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aef20efc0ae4013e6f4867c15f2377b235095b86
Validity
Not Before: Jan 2 08:19:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ec5dbe853667ca85901ca7bab7fccc85536db23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b0:f4:5c:4a:a2:d6:05:0c:17:44:42:86:9f:
f9:ef:e2:78:7b:9b:56:cd:be:fa:2b:8d:e4:7c:ec:
c2:bb:a4:d2:48:0c:3b:11:d9:0e:59:96:39:de:9a:
dc:e3:2b:8f:fa:e9:1a:43:c3:22:75:82:a3:38:eb:
ab:81:5f:23:55:0e:6b:7b:4c:c5:70:54:43:50:17:
43:03:f6:8b:91:8a:35:e5:fd:7a:fa:9f:95:00:90:
6d:e2:60:a9:c4:c8:d9:d6:9d:58:18:a8:25:38:f9:
e2:68:9e:63:c7:9b:78:d3:e7:6e:91:7f:3d:cd:ac:
02:cc:14:77:b3:a7:97:14:f0:9b:ce:0d:72:68:1f:
02:03:b0:64:ec:81:7c:d9:ea:6c:08:2d:75:48:47:
8a:fb:e9:ab:36:ed:86:a8:1a:9e:a3:dc:33:69:f6:
4d:ec:9c:6f:0d:7a:a6:44:f6:65:82:9b:c4:e3:03:
36:f8:0f:1d:ca:41:86:b0:f9:d6:42:05:9f:e0:9c:
87:fa:9f:69:3f:1b:eb:b0:ba:00:4d:d7:8e:bf:28:
80:14:b9:53:84:64:40:b5:6f:b7:c5:e2:d2:e2:8c:
38:31:b4:0b:78:9e:36:f3:46:2e:03:bc:c5:4b:80:
cf:28:0b:ab:1f:04:36:4d:5a:f3:42:89:71:02:58:
69:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C5:DB:E8:53:66:7C:A8:59:01:CA:7B:AB:7F:CC:C8:55:36:DB:23
X509v3 Authority Key Identifier:
keyid:AE:F2:0E:FC:0A:E4:01:3E:6F:48:67:C1:5F:23:77:B2:35:09:5B:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/HsXb6FNmfKhZAcp7q3_MyFU22yM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/136faf-cf20-4265-98a3-d9b82d9ecc45/1/rvIO_ArkAT5vSGfBXyN3sjUJW4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.4.0/22
Signature Algorithm: sha256WithRSAEncryption
70:13:11:4b:3d:3f:79:ab:1b:9d:71:2c:b9:88:e0:45:cf:24:
e0:02:df:f3:b2:04:e8:34:6a:80:5e:ed:cf:6b:2a:dd:74:6a:
a9:1a:f7:cb:a5:85:6a:b6:51:52:77:f0:a2:4a:d1:16:5a:f4:
91:77:64:25:55:af:23:f7:e6:34:2e:dd:1b:0e:d7:04:2f:1b:
1b:17:31:12:3a:4c:b5:29:d1:4c:f3:28:72:72:8a:f2:bf:ab:
a7:2c:2f:f0:13:e0:e5:34:39:f9:49:b1:af:e8:79:6f:d2:86:
6f:11:f7:ad:ed:cb:93:cf:33:dc:b6:ca:8d:76:2e:28:29:ed:
df:06:99:27:3b:f5:f2:7a:af:08:1b:5a:c9:8b:7d:37:ae:7d:
cc:74:19:2b:01:bf:4b:18:8a:07:ad:26:df:fe:50:8e:a1:99:
14:b8:b0:a7:ec:08:42:d0:b6:20:76:b5:f3:ea:23:92:ae:b4:
a1:14:f1:fa:75:a3:77:d7:c7:3a:15:b4:c5:c0:38:81:88:ec:
76:3b:a5:ca:67:3d:6d:ab:b2:95:73:76:b3:f4:0e:f6:cc:b0:
2f:3c:a8:80:c6:ca:c9:20:c4:08:08:9a:e1:60:9f:e3:0e:ca:
18:0f:fb:c4:d8:0d:01:7b:bb:61:1d:a5:60:27:fc:37:c5:42:
32:71:23:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:35:35 2026 by rpki-client