Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/0f1b8f-1d47-42f0-a050-5a114ef9b2aa/1/4XAM9liM1Y7hRRkcksNiW_aru-A.roa
File: 4XAM9liM1Y7hRRkcksNiW_aru-A.roa (raw, json)
Hash identifier: P0kySiJIZ6zOBwufqTsAfZ+d9KAiQxaN8Hb6kdFbtyE=
Subject key identifier: E1:70:0C:F6:58:8C:D5:8E:E1:45:19:1C:92:C3:62:5B:F6:AB:BB:E0
Certificate issuer: /CN=512e27be891b19eca9bceb53e4dc237c5a355697
Certificate serial: 019B7E389487524643AC3EC3D79A92C6BF8E
Authority key identifier: 51:2E:27:BE:89:1B:19:EC:A9:BC:EB:53:E4:DC:23:7C:5A:35:56:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/US4nvokbGeypvOtT5NwjfFo1Vpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/0f1b8f-1d47-42f0-a050-5a114ef9b2aa/1/4XAM9liM1Y7hRRkcksNiW_aru-A.roa
Signing time: Fri 02 Jan 2026 10:19:55 +0000
ROA not before: Fri 02 Jan 2026 10:19:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48772
IP address blocks: 91.223.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/0f1b8f-1d47-42f0-a050-5a114ef9b2aa/1/US4nvokbGeypvOtT5NwjfFo1Vpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/0f1b8f-1d47-42f0-a050-5a114ef9b2aa/1/US4nvokbGeypvOtT5NwjfFo1Vpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/US4nvokbGeypvOtT5NwjfFo1Vpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:38:94:87:52:46:43:ac:3e:c3:d7:9a:92:c6:bf:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=512e27be891b19eca9bceb53e4dc237c5a355697
Validity
Not Before: Jan 2 10:19:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1700cf6588cd58ee145191c92c3625bf6abbbe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e4:e6:7c:d4:34:01:79:7d:1b:1c:ff:4c:b4:
6e:5e:3c:84:1c:bd:53:82:b0:80:68:a6:20:09:a0:
ab:08:46:b7:46:9a:d7:9f:cc:90:6d:f9:54:1d:e9:
ac:dc:f2:0e:9f:2b:8f:90:47:6a:b2:8d:90:a4:70:
17:e8:23:84:65:19:4e:bb:ac:4d:c0:c1:a3:7f:89:
de:bb:e2:a9:e4:ef:1f:cb:ef:5c:8b:79:ef:7b:3b:
37:13:34:95:78:ee:84:60:86:56:42:39:c2:88:bc:
cc:7f:f7:91:7d:c6:b9:7c:c5:ba:c4:f9:d4:78:94:
bb:89:30:a0:95:66:ad:76:84:78:86:f4:6a:99:5f:
e4:e0:e9:da:bc:18:a9:d3:a9:e0:cd:09:22:e4:8d:
a8:10:6c:43:23:60:e1:6e:c0:fc:6a:a1:31:37:02:
b4:ab:f4:f6:4e:46:80:d3:ff:c3:80:65:44:4b:d3:
5b:45:fe:eb:7b:ca:78:8f:06:da:db:3a:8b:bb:f9:
a2:f4:be:22:9b:77:6f:58:fc:1a:c0:00:14:3c:ec:
94:ba:27:da:bd:82:35:ea:5a:3b:01:31:fa:18:3b:
70:59:d1:fb:a7:c2:2f:c2:8b:21:8f:66:bd:05:65:
df:de:8a:dc:f6:7a:17:42:1b:f5:15:42:8c:f0:42:
68:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:70:0C:F6:58:8C:D5:8E:E1:45:19:1C:92:C3:62:5B:F6:AB:BB:E0
X509v3 Authority Key Identifier:
keyid:51:2E:27:BE:89:1B:19:EC:A9:BC:EB:53:E4:DC:23:7C:5A:35:56:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/US4nvokbGeypvOtT5NwjfFo1Vpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/0f1b8f-1d47-42f0-a050-5a114ef9b2aa/1/4XAM9liM1Y7hRRkcksNiW_aru-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/0f1b8f-1d47-42f0-a050-5a114ef9b2aa/1/US4nvokbGeypvOtT5NwjfFo1Vpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.49.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:5e:7a:fa:0b:1f:f5:a1:e8:b8:e5:4a:d3:61:7d:a4:9c:b2:
db:e8:b2:3d:a8:49:9e:3f:1c:88:83:a0:4f:d5:20:25:fe:3a:
c3:73:a9:d4:2a:b4:68:0b:4f:e9:7b:8f:e6:06:67:79:83:8c:
60:62:13:bd:28:23:94:84:aa:76:01:eb:5f:1b:9e:ea:38:95:
87:6c:7e:10:e5:0c:6d:78:8c:11:60:b8:d0:26:06:ff:c6:df:
61:52:d9:e6:0c:da:cc:e5:93:9b:dc:89:14:3f:18:f1:d3:36:
7b:aa:1d:10:e6:07:49:7e:1f:ba:7f:65:50:95:14:0d:90:61:
d3:07:fe:44:99:db:ab:28:19:4f:4e:9f:f0:70:98:82:08:2c:
d0:2c:91:5a:43:da:34:0d:24:31:c9:d1:0d:6f:b7:26:1c:1c:
e5:f7:c0:fa:11:f5:49:55:11:fb:ef:a8:e8:a3:13:c2:c5:55:
7d:45:3e:2b:be:6f:d9:9a:6f:c2:61:d0:9b:c8:b9:eb:70:23:
60:99:40:94:7c:e3:7d:df:62:e7:55:a3:88:25:21:19:e0:cb:
c5:eb:b4:64:3a:32:81:41:a9:39:6d:09:93:ef:4a:4a:dc:0a:
03:3c:f1:a2:20:70:e0:99:2a:a2:81:c1:0b:58:6d:a4:ce:bd:
da:a3:45:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:19:16 2026 by rpki-client