Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/b_rbJD0ZQG4ZvUjkt34Qlu8-Ccc.roa
File: b_rbJD0ZQG4ZvUjkt34Qlu8-Ccc.roa (raw, json)
Hash identifier: PVGQ7PuJO29dq4nCPNz/ExdypC2r9RCf0bTTn6uhOlw=
Subject key identifier: 6F:FA:DB:24:3D:19:40:6E:19:BD:48:E4:B7:7E:10:96:EF:3E:09:C7
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 019D8180E04BEA2B90FA377A5851F55A58C6
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/b_rbJD0ZQG4ZvUjkt34Qlu8-Ccc.roa
Signing time: Sun 12 Apr 2026 11:43:20 +0000
ROA not before: Sun 12 Apr 2026 11:43:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7018
IP address blocks: 91.225.225.0/24 maxlen: 24
91.225.227.0/24 maxlen: 24
188.191.98.0/24 maxlen: 24
188.191.101.0/24 maxlen: 24
188.191.103.0/24 maxlen: 24
188.191.106.0/24 maxlen: 24
188.191.109.0/24 maxlen: 24
188.191.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:81:80:e0:4b:ea:2b:90:fa:37:7a:58:51:f5:5a:58:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Apr 12 11:43:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ffadb243d19406e19bd48e4b77e1096ef3e09c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c7:d6:95:5e:58:aa:c4:ed:c9:a4:1c:8f:bc:
d3:3c:a3:96:5f:f6:1f:a5:f0:84:98:37:76:b9:01:
43:94:e4:67:a1:64:30:3f:1b:23:a5:90:fa:c7:f0:
1e:d0:30:ae:3a:bd:8b:8e:d5:99:8b:61:9e:83:b9:
08:73:76:bb:b3:29:75:35:3e:a1:0d:e6:45:05:97:
e8:e9:7f:d9:79:48:11:21:d7:2d:d0:ca:a1:29:ec:
e9:33:57:ea:c7:81:15:63:c1:88:99:9e:d6:ac:75:
7b:fb:75:06:66:26:60:a8:96:a9:18:4a:47:f3:62:
e4:0e:25:39:f0:7b:37:d8:53:f8:45:23:fe:75:66:
44:c8:56:3e:44:ec:75:b1:bb:d2:d9:48:42:72:de:
27:c7:15:43:71:bb:29:22:d9:59:80:4c:9b:89:81:
b2:77:d2:33:5b:13:5b:e2:89:32:0b:f6:6b:a1:2d:
1d:65:1c:f1:d0:3c:19:8e:63:d0:4a:5d:79:42:ca:
f0:2b:16:55:ce:92:3d:0c:7b:ab:d4:64:70:f1:89:
f6:da:5c:95:6f:1a:99:24:38:80:f2:b8:81:d8:e7:
55:f8:cb:24:bb:2c:da:36:b4:59:71:53:0a:aa:fc:
9a:bd:2a:34:4e:25:4a:71:05:df:dc:8c:d2:ce:18:
28:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FA:DB:24:3D:19:40:6E:19:BD:48:E4:B7:7E:10:96:EF:3E:09:C7
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/b_rbJD0ZQG4ZvUjkt34Qlu8-Ccc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.225.0/24
91.225.227.0/24
188.191.98.0/24
188.191.101.0/24
188.191.103.0/24
188.191.106.0/24
188.191.109.0-188.191.110.255
Signature Algorithm: sha256WithRSAEncryption
61:27:5b:9d:7b:1a:25:ef:3e:34:75:0d:58:59:f1:03:e3:a4:
98:db:ba:30:2a:34:43:ab:ff:1d:b4:8d:ca:94:06:b7:57:6f:
ba:3b:dc:71:d0:78:ba:e6:95:1c:34:b3:ed:e0:06:40:cf:9d:
61:5b:a0:f9:bb:9a:d1:94:e5:a5:fb:c1:21:e8:de:39:40:b0:
89:c5:12:ab:d8:39:74:08:6a:49:f5:ad:14:2b:d5:a7:00:39:
74:ff:d7:fa:c3:ee:53:cf:0f:e5:9b:cb:49:48:fd:b4:28:fa:
84:c4:15:ac:ab:f1:8e:5f:18:0f:a9:7d:fa:02:42:bb:12:37:
5e:48:ee:5a:85:43:eb:91:59:74:a2:bf:98:66:a1:49:15:b2:
d2:e1:cf:5d:ed:7d:26:2b:a4:66:a5:94:8b:5b:00:c9:09:5b:
48:e1:d1:8f:a0:37:25:25:30:86:a3:d7:9e:64:fb:01:fc:4e:
02:ec:df:72:60:1c:e7:23:5d:85:74:49:86:b3:0d:9a:06:31:
dc:77:84:46:c1:f2:9e:a3:14:27:08:f5:e2:80:a4:f8:a0:86:
7f:00:a5:87:67:76:01:ab:a4:f2:9c:2f:d6:93:bd:33:9e:6a:
9b:be:e3:3f:44:87:7c:a1:11:4a:a5:34:52:c0:02:3e:01:7a:
c1:2f:83:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:20:05 2026 by rpki-client