Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/t0iIVofhtE6TdyzzgrpN-tSCMIQ.roa
File: t0iIVofhtE6TdyzzgrpN-tSCMIQ.roa (raw, json)
Hash identifier: WWFMewBWw2qSPW9cnpJJwUD4HilTFFfpXdAQVaL7YzM=
Subject key identifier: B7:48:88:56:87:E1:B4:4E:93:77:2C:F3:82:BA:4D:FA:D4:82:30:84
Certificate issuer: /CN=a7fe79e4e63bd16bc4237592b684d00433cbd0f6
Certificate serial: 01A04214B205F528A5F769949CA7805127E9
Authority key identifier: A7:FE:79:E4:E6:3B:D1:6B:C4:23:75:92:B6:84:D0:04:33:CB:D0:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/t0iIVofhtE6TdyzzgrpN-tSCMIQ.roa
Signing time: Thu 27 Aug 2026 07:17:27 +0000
ROA not before: Thu 27 Aug 2026 07:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44577
IP address blocks: 91.230.124.0/24 maxlen: 24
91.230.125.0/24 maxlen: 24
185.150.104.0/24 maxlen: 24
185.150.105.0/24 maxlen: 24
185.150.106.0/24 maxlen: 24
185.150.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:14:b2:05:f5:28:a5:f7:69:94:9c:a7:80:51:27:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fe79e4e63bd16bc4237592b684d00433cbd0f6
Validity
Not Before: Aug 27 07:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b748885687e1b44e93772cf382ba4dfad4823084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6f:4e:3a:87:af:f4:61:fd:98:96:7c:5a:c2:
af:e2:10:71:dd:d0:07:f9:4e:88:98:b9:af:75:8b:
fc:87:0a:01:21:f9:ee:74:c1:3d:13:20:62:82:9f:
6b:8c:7b:92:ef:eb:14:2f:17:55:e5:d9:24:6b:1f:
36:03:8c:71:aa:36:46:4b:4f:97:bd:6a:b2:a6:6d:
38:e4:92:56:45:70:42:ad:e0:ca:ce:ba:2c:53:be:
d8:a5:3e:bd:54:60:47:cf:62:45:a6:ae:63:3e:fc:
b4:1d:77:79:46:9f:1b:e5:33:d2:4a:12:22:9b:04:
93:04:fc:e8:e4:d0:40:05:55:b5:b7:ab:a1:3c:47:
ee:b2:b4:18:76:1a:46:dd:b8:6d:c4:ee:92:b8:e8:
f8:15:2a:97:27:5f:b1:55:6e:bb:a4:4d:6e:0e:22:
46:5c:30:e4:fb:9d:55:ce:51:65:c4:db:3d:0e:c5:
9a:0c:35:4c:fb:d7:59:15:ea:8a:69:ae:78:71:07:
9c:8c:2e:e2:3e:39:2c:14:aa:80:07:5e:e4:15:fe:
61:62:7c:83:3d:31:6d:c7:47:98:9b:d8:7e:df:84:
ce:c9:74:e9:fb:9a:a8:40:85:95:7e:d5:c5:6c:14:
79:11:2c:fc:06:05:ac:90:81:3b:62:bf:5c:60:36:
c6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:48:88:56:87:E1:B4:4E:93:77:2C:F3:82:BA:4D:FA:D4:82:30:84
X509v3 Authority Key Identifier:
keyid:A7:FE:79:E4:E6:3B:D1:6B:C4:23:75:92:B6:84:D0:04:33:CB:D0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/t0iIVofhtE6TdyzzgrpN-tSCMIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.124.0/23
185.150.104.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:bd:1f:d8:75:ac:48:06:3f:ce:c7:77:42:fe:8e:b0:2c:d0:
d3:19:25:47:83:78:fc:95:ae:8a:49:bd:1d:9f:3e:18:1e:1c:
ab:d3:6b:3a:cf:fd:c9:e0:70:2a:05:ec:f8:a8:7a:8f:63:dd:
c2:90:f8:4c:30:e7:06:73:f7:df:7b:48:96:b1:16:cb:58:95:
d4:56:e1:62:07:33:1c:cb:41:8a:94:85:41:e6:fe:4d:ba:3b:
8c:72:69:ca:b8:e8:77:e9:f3:c4:f4:f4:e6:22:bc:62:2a:f7:
a7:dc:7f:c8:5f:a6:7f:5a:0f:db:45:b4:43:e2:cb:8c:31:f7:
b4:34:5f:24:44:b5:20:e3:41:55:66:aa:45:5f:56:6b:aa:42:
29:92:a9:a6:d4:be:f6:bf:d6:d2:74:9f:2f:da:46:e2:8a:de:
3d:7b:0f:96:47:f1:46:61:04:25:8a:f9:92:fe:64:91:50:71:
5d:5a:42:f5:e1:70:9e:0c:44:5f:d1:01:4f:ab:66:f3:5c:cd:
ed:78:9a:35:51:97:0b:d0:b2:0e:71:cb:6e:8a:e5:5f:5e:6d:
d1:39:fe:4d:84:ad:27:dc:96:fc:38:c5:5d:b9:41:c1:fa:f5:
0c:d0:8b:8d:cd:4f:14:c7:b3:72:95:12:77:29:c9:87:0f:b9:
93:24:56:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:47:38 2026 by rpki-client