Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/T42ISOzOZCjRJULwv95Ki_1s9aQ.roa
File: T42ISOzOZCjRJULwv95Ki_1s9aQ.roa (raw, json)
Hash identifier: Mey912qaR+jcZwTBP3JL+1sjx7k32kwZ3D6pir+lHUc=
Subject key identifier: 4F:8D:88:48:EC:CE:64:28:D1:25:42:F0:BF:DE:4A:8B:FD:6C:F5:A4
Certificate issuer: /CN=4345d0773c7ade08d44819e3b611bd297a3989d3
Certificate serial: 019B77592960672DFFAB018CF28235881175
Authority key identifier: 43:45:D0:77:3C:7A:DE:08:D4:48:19:E3:B6:11:BD:29:7A:39:89:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/T42ISOzOZCjRJULwv95Ki_1s9aQ.roa
Signing time: Thu 01 Jan 2026 02:18:10 +0000
ROA not before: Thu 01 Jan 2026 02:18:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61430
IP address blocks: 91.213.252.0/24 maxlen: 24
91.228.190.0/23 maxlen: 23
91.228.190.0/24 maxlen: 24
91.228.191.0/24 maxlen: 24
185.126.100.0/22 maxlen: 22
185.126.100.0/24 maxlen: 24
185.126.101.0/24 maxlen: 24
185.126.102.0/24 maxlen: 24
185.126.103.0/24 maxlen: 24
185.237.208.0/23 maxlen: 23
185.237.210.0/24 maxlen: 24
185.237.211.0/24 maxlen: 24
2001:67c:1944::/48 maxlen: 48
2001:67c:2ad4::/48 maxlen: 49
2a06:c040::/32 maxlen: 33
2a06:c041::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:29:60:67:2d:ff:ab:01:8c:f2:82:35:88:11:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4345d0773c7ade08d44819e3b611bd297a3989d3
Validity
Not Before: Jan 1 02:18:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f8d8848ecce6428d12542f0bfde4a8bfd6cf5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7d:ab:9d:e0:f2:54:9e:e6:f0:19:9f:8e:97:
a8:7f:17:24:e7:79:f5:4b:95:a5:e7:44:d0:f5:8b:
04:84:f1:1a:f1:a5:9c:e5:0e:ba:7c:5c:5a:ca:5b:
4b:10:b8:aa:e0:d2:3c:21:d1:6c:76:98:5f:07:5e:
98:e5:3e:6f:d5:63:18:4a:f7:0b:98:6b:7e:0f:00:
e0:15:75:b5:b0:22:bf:43:4f:b4:a6:a6:91:2b:12:
08:b2:b6:c6:0a:03:27:ba:36:be:66:04:6c:9b:b6:
80:47:9a:4f:fa:b9:d6:fc:2e:44:02:dc:c7:91:49:
cf:59:f1:c1:1d:55:d9:94:f5:21:10:e0:d1:48:20:
b0:67:d8:b0:86:8a:df:dc:4c:a5:ff:05:af:87:0b:
e8:70:70:5b:a6:58:51:ea:be:15:e6:29:fb:36:89:
a8:b2:c4:80:65:de:0b:7f:4a:e8:66:c0:1c:1d:97:
a5:28:db:d4:fc:3e:66:33:56:eb:1d:2e:33:fa:46:
6f:8c:11:a3:2b:20:41:49:be:8d:61:a7:e6:0d:f6:
7d:8d:13:ba:15:c9:5e:41:0e:4f:38:43:0e:a0:e7:
01:96:dd:e9:22:fa:5d:b0:5b:2a:17:f1:c5:f6:1f:
e2:d0:ac:32:e1:7b:60:7e:fb:51:38:c0:93:19:62:
81:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8D:88:48:EC:CE:64:28:D1:25:42:F0:BF:DE:4A:8B:FD:6C:F5:A4
X509v3 Authority Key Identifier:
keyid:43:45:D0:77:3C:7A:DE:08:D4:48:19:E3:B6:11:BD:29:7A:39:89:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/T42ISOzOZCjRJULwv95Ki_1s9aQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.252.0/24
91.228.190.0/23
185.126.100.0/22
185.237.208.0/22
IPv6:
2001:67c:1944::/48
2001:67c:2ad4::/48
2a06:c040::/31
Signature Algorithm: sha256WithRSAEncryption
4c:b9:2e:93:c9:66:07:44:86:86:5b:1a:00:55:88:da:5a:87:
80:ef:bf:74:49:e6:96:71:0f:39:b9:55:2e:e2:f8:18:0d:a8:
0c:dd:8b:3a:9b:1b:a0:c9:c3:c6:80:84:c2:e7:08:50:07:30:
25:bf:1f:54:84:df:75:10:60:11:7e:ad:48:63:5e:cd:3b:b9:
a3:4a:04:d6:4c:31:d9:29:7e:2d:c1:f5:d6:3a:ef:7a:5e:d8:
70:b8:25:64:63:46:ed:ce:4d:30:fa:26:d3:e9:11:4c:bb:54:
bb:34:3f:09:98:df:a8:af:4f:19:0e:10:cf:58:f4:f0:a0:dc:
50:c0:38:d4:68:0c:e7:6f:a1:81:c4:b4:80:dc:c4:1f:78:86:
eb:c5:1b:30:c1:bb:5b:40:c9:c8:33:c4:aa:5e:93:07:df:23:
73:40:0b:26:84:6b:8e:20:d7:eb:27:60:e2:52:d9:4d:8f:8d:
97:47:7f:4a:ad:86:68:b0:d8:dc:2a:09:18:92:70:4f:7b:c5:
22:f8:fd:1c:ca:cd:19:66:1d:b5:66:70:7c:36:b2:ea:30:be:
5d:8b:e4:44:b9:9a:79:c2:97:8b:61:0d:ea:37:f3:75:35:e8:
a5:e8:a1:42:4e:b2:42:3d:ef:af:cf:9e:6f:a3:8d:5f:6e:fe:
09:78:28:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:08:28 2026 by rpki-client