Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/A4q_5E9jFy5Ar2Wg8v_2745bS6c.roa
File: A4q_5E9jFy5Ar2Wg8v_2745bS6c.roa (raw, json)
Hash identifier: IHENNPcSzn1yvUUV7LXB3IN3vMVZdPk+iq6MU9Z6PDg=
Subject key identifier: 03:8A:BF:E4:4F:63:17:2E:40:AF:65:A0:F2:FF:F6:EF:8E:5B:4B:A7
Certificate issuer: /CN=3691d2950145dceac00c0ca4eb536d92867b38d3
Certificate serial: 01A0B5BF4A35F846B9C9003ACCC709DB3291
Authority key identifier: 36:91:D2:95:01:45:DC:EA:C0:0C:0C:A4:EB:53:6D:92:86:7B:38:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/A4q_5E9jFy5Ar2Wg8v_2745bS6c.roa
Signing time: Fri 18 Sep 2026 18:20:07 +0000
ROA not before: Fri 18 Sep 2026 18:20:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206924
IP address blocks: 91.198.241.0/24 maxlen: 24
185.230.223.0/24 maxlen: 24
2a0c:2f00:29::/48 maxlen: 48
2a0c:2f00:4663::/48 maxlen: 48
2a0c:2f00:6853::/48 maxlen: 48
2a0c:2f05:3512::/48 maxlen: 48
2a0c:2f07:d::/48 maxlen: 48
2a0c:2f07:f::/48 maxlen: 48
2a0c:2f07:29::/48 maxlen: 48
2a0c:2f07:c1::/48 maxlen: 48
2a0c:2f07:4663::/48 maxlen: 48
2a0c:2f07:4896::/48 maxlen: 48
2a0c:2f07:9459::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:bf:4a:35:f8:46:b9:c9:00:3a:cc:c7:09:db:32:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3691d2950145dceac00c0ca4eb536d92867b38d3
Validity
Not Before: Sep 18 18:20:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=038abfe44f63172e40af65a0f2fff6ef8e5b4ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b8:9f:69:9f:4f:ce:05:13:56:7e:4f:f9:2d:
db:7f:78:29:24:18:ec:40:bf:99:69:c2:a2:1c:de:
4a:8f:c6:33:8c:79:fb:d8:03:6c:22:2a:80:f3:1a:
9b:e6:0f:05:a5:cc:40:51:0e:3b:79:f2:46:b4:82:
b7:ef:97:96:11:5e:3d:2f:e6:4f:10:29:a4:f5:10:
51:39:42:d3:34:32:4a:6f:9d:8d:18:8a:cd:df:de:
bf:e3:21:e8:40:7b:a0:15:bb:54:ac:af:a1:9f:0e:
15:9a:cb:58:f8:2b:98:c7:e6:6f:23:fe:68:c4:95:
9a:72:92:88:0e:6d:f6:9b:f7:98:d5:e4:61:95:35:
2c:e8:70:e4:ca:b9:0c:57:31:4a:d6:5f:19:60:08:
70:17:17:57:ac:c2:40:66:dc:eb:41:2a:13:d8:d1:
97:87:f1:27:06:66:01:b1:2c:e4:91:ad:12:23:ba:
da:8a:55:84:25:ee:b4:40:a9:c1:1d:50:ae:c5:78:
21:95:e9:8a:32:77:15:a6:33:b1:7f:d2:dd:7b:da:
36:e1:95:84:ce:9e:13:7f:3c:78:28:b7:28:7d:17:
8b:7d:50:b6:59:fb:95:64:8e:fd:cb:ab:79:64:6a:
fe:ac:5a:09:ce:7c:54:a5:86:ee:6c:3c:e8:f4:ca:
b4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8A:BF:E4:4F:63:17:2E:40:AF:65:A0:F2:FF:F6:EF:8E:5B:4B:A7
X509v3 Authority Key Identifier:
keyid:36:91:D2:95:01:45:DC:EA:C0:0C:0C:A4:EB:53:6D:92:86:7B:38:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/A4q_5E9jFy5Ar2Wg8v_2745bS6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.241.0/24
185.230.223.0/24
IPv6:
2a0c:2f00:29::/48
2a0c:2f00:4663::/48
2a0c:2f00:6853::/48
2a0c:2f05:3512::/48
2a0c:2f07:d::/48
2a0c:2f07:f::/48
2a0c:2f07:29::/48
2a0c:2f07:c1::/48
2a0c:2f07:4663::/48
2a0c:2f07:4896::/48
2a0c:2f07:9459::/48
Signature Algorithm: sha256WithRSAEncryption
c0:cf:bf:42:d9:e6:9c:15:f5:47:bd:d3:0e:3c:a3:48:f6:00:
03:2a:ec:c4:2c:54:f9:40:8e:ea:db:ea:17:f2:ed:fd:9e:f4:
f1:28:97:d6:20:27:2d:67:4e:35:31:dc:fc:36:6f:1d:1d:0b:
59:f7:93:c7:2f:9f:d4:79:fc:f2:8e:c8:0a:11:9f:8f:63:6d:
37:d2:a8:f2:34:bb:26:2c:0c:4a:69:8b:2e:47:80:54:c5:bc:
77:8d:5e:3b:f0:87:5b:ca:07:51:ce:b0:8b:2c:4e:f6:4e:40:
f9:ac:09:56:7f:3c:39:7b:30:fe:0b:93:d6:fd:51:f6:f3:65:
c0:46:d5:4d:5f:7a:8d:a8:8a:67:8c:a4:90:e1:82:19:8b:f5:
32:47:b2:6c:a3:3a:ae:74:7d:ba:a0:85:5f:03:2e:c0:55:7e:
22:f4:8a:a3:81:18:97:ad:4f:b9:02:a2:22:2c:05:7b:3c:87:
d3:b9:18:44:72:ae:f8:96:bd:09:24:a8:8a:38:37:93:bc:e8:
ba:1c:0f:f3:85:a0:5b:62:a3:81:5b:e8:6e:de:43:4a:cb:fb:
21:6a:dd:c1:95:06:e7:66:db:14:64:bc:e5:90:5b:79:c2:b0:
18:0b:a6:e1:f4:1d:de:e6:c8:6d:93:37:64:09:65:3f:83:84:
57:c2:4d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:27:20 2026 by rpki-client