Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/Cu5RcCDiT9wnSYDAXin97C5_ar4.roa
File: Cu5RcCDiT9wnSYDAXin97C5_ar4.roa (raw, json)
Hash identifier: mZ2GDzOYBdCLGqwEYWo/X2TbRkRCTGHd2uJn3YPq5Hs=
Subject key identifier: 0A:EE:51:70:20:E2:4F:DC:27:49:80:C0:5E:29:FD:EC:2E:7F:6A:BE
Certificate issuer: /CN=b4fb6b4c4791668911115c69e26964f3d5eca2f4
Certificate serial: 019C6644D4FE9717ABB731DE8F68CE4C4145
Authority key identifier: B4:FB:6B:4C:47:91:66:89:11:11:5C:69:E2:69:64:F3:D5:EC:A2:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPtrTEeRZokREVxp4mlk89XsovQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/Cu5RcCDiT9wnSYDAXin97C5_ar4.roa
Signing time: Mon 16 Feb 2026 11:45:12 +0000
ROA not before: Mon 16 Feb 2026 11:45:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214263
IP address blocks: 91.213.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPtrTEeRZokREVxp4mlk89XsovQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:66:44:d4:fe:97:17:ab:b7:31:de:8f:68:ce:4c:41:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4fb6b4c4791668911115c69e26964f3d5eca2f4
Validity
Not Before: Feb 16 11:45:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0aee517020e24fdc274980c05e29fdec2e7f6abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:86:ff:6f:ca:1e:71:35:b7:97:fc:31:9f:5e:
1c:d3:54:39:e1:db:18:88:86:00:3b:8b:1c:76:a5:
f6:ed:66:f0:b4:30:10:5d:30:8a:de:69:ab:77:e6:
b0:b2:fd:dc:0e:43:5c:d8:a4:2a:d6:d9:d1:eb:ed:
30:d7:ed:e1:3d:37:99:7f:bc:9d:73:22:1c:db:03:
56:5f:b1:ae:66:f0:55:21:a2:40:f6:c9:22:12:1e:
fc:d7:22:00:01:a0:23:2f:d7:35:b9:0a:8a:11:99:
e5:15:3f:c9:d1:e7:09:24:d1:d6:6d:2e:3e:b2:57:
6a:23:25:15:9f:5d:ac:bb:3f:32:f7:c5:56:82:d6:
36:0b:c3:f6:71:44:cf:5e:32:d7:66:ca:47:4f:c8:
11:cb:65:6e:36:11:3c:74:b9:d4:a9:4e:8e:54:a2:
f0:b4:e8:13:ad:d0:9a:dc:4e:6e:3e:e8:5c:aa:dc:
a8:ab:51:50:ba:9c:e7:29:68:22:e9:93:ae:35:e9:
44:ac:15:49:7f:10:20:d4:4c:f3:24:45:f8:af:d6:
99:d4:1c:dc:86:e9:ef:8a:ae:94:f0:eb:bb:65:1f:
74:8c:a1:b4:75:45:f7:55:00:f3:0c:c9:38:91:79:
73:4a:98:70:92:2e:2c:e0:e6:8b:3c:84:66:f2:25:
44:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:EE:51:70:20:E2:4F:DC:27:49:80:C0:5E:29:FD:EC:2E:7F:6A:BE
X509v3 Authority Key Identifier:
keyid:B4:FB:6B:4C:47:91:66:89:11:11:5C:69:E2:69:64:F3:D5:EC:A2:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPtrTEeRZokREVxp4mlk89XsovQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/Cu5RcCDiT9wnSYDAXin97C5_ar4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.164.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:2b:3a:87:21:f1:2c:b6:7a:76:e4:ca:48:77:b7:6a:f1:86:
f2:b2:d1:9a:28:ad:18:1f:74:dd:f3:ba:d8:c6:76:89:dd:fe:
94:07:8a:97:33:eb:6a:06:26:6d:f5:3e:a7:cd:53:ee:13:ad:
b9:27:42:f8:9d:e3:38:1a:56:6b:60:c2:68:4d:54:ee:a7:7a:
d9:3d:63:27:74:20:18:50:b1:a3:bf:24:53:55:11:e3:de:78:
0f:62:7c:c9:a1:54:22:d4:a1:e8:02:2c:ba:03:5c:9d:7d:76:
a4:1e:b1:46:ea:2c:e3:a3:73:99:67:4b:6e:48:c5:cb:25:04:
e8:3e:d8:87:42:e7:ff:93:40:71:ee:6d:d3:84:d6:14:ed:4b:
9b:ed:2f:44:85:71:0f:05:8e:99:f7:e1:e6:c5:fd:ea:6b:36:
4c:28:75:64:2d:d4:ab:16:4e:d0:28:bd:8d:1b:ae:67:e1:d4:
88:d8:27:0e:9c:25:b3:8d:e1:64:73:47:4b:de:d8:4d:a5:48:
28:b0:4f:65:5f:06:42:77:47:85:67:dc:3c:a3:4e:c3:08:f1:
ff:3b:25:95:a3:08:5f:8b:9d:92:8d:62:d6:6f:88:b5:76:62:
9c:08:fa:e2:f0:0c:50:8a:73:48:aa:8e:c4:25:b8:b2:65:54:
84:ac:50:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:03:48 2026 by rpki-client