Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/41lIrSq2rtgRzIhHQ2XtfPg_knA.roa
File: 41lIrSq2rtgRzIhHQ2XtfPg_knA.roa (raw, json)
Hash identifier: bm4b2DvtMJCYf2Lx/TM2HmUFpxfisy7LFz41+IzHLbU=
Subject key identifier: E3:59:48:AD:2A:B6:AE:D8:11:CC:88:47:43:65:ED:7C:F8:3F:92:70
Certificate issuer: /CN=b5344218a4880b500c033321e76bd78b4f3c1658
Certificate serial: 01A0D3981513F7C279EC6C05F2D088DE7E04
Authority key identifier: B5:34:42:18:A4:88:0B:50:0C:03:33:21:E7:6B:D7:8B:4F:3C:16:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/41lIrSq2rtgRzIhHQ2XtfPg_knA.roa
Signing time: Thu 24 Sep 2026 13:25:54 +0000
ROA not before: Thu 24 Sep 2026 13:25:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61320
IP address blocks: 192.109.30.0/24 maxlen: 24
192.109.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 01:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:98:15:13:f7:c2:79:ec:6c:05:f2:d0:88:de:7e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5344218a4880b500c033321e76bd78b4f3c1658
Validity
Not Before: Sep 24 13:25:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e35948ad2ab6aed811cc88474365ed7cf83f9270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3e:00:cf:bc:a2:60:48:67:3e:da:1b:14:5a:
44:09:2f:26:78:55:ba:ac:e6:42:b7:3e:97:a8:37:
18:34:2c:5a:0d:1a:65:cb:ea:12:fc:98:50:d7:f5:
76:f7:64:bb:20:0b:c0:f0:6d:fd:0e:6e:13:b8:41:
88:2f:0f:e2:00:86:2a:d4:1c:46:c1:be:19:19:a1:
02:5b:91:b9:1a:b1:12:85:30:29:bc:e2:3f:6b:ee:
62:81:99:22:81:f8:90:59:8f:b2:14:63:96:d4:c1:
cd:78:14:13:79:3c:25:8a:b9:d6:d0:23:e2:5d:de:
35:a7:78:6f:f6:91:8f:59:7b:7d:b2:be:1d:74:67:
5d:7f:65:9c:e4:4a:04:c9:6b:7f:7b:9b:69:8b:c3:
31:de:f9:92:06:c5:c9:2b:39:57:ec:da:c0:6f:74:
5a:56:65:12:2d:cc:65:93:62:5a:94:08:67:ad:22:
2f:52:9a:96:13:63:65:44:c9:f3:38:56:1c:ee:02:
a5:6b:36:02:52:41:0a:81:62:9e:69:54:76:b0:6b:
d2:e5:b5:ab:bd:3d:25:ba:51:08:e3:23:10:f2:05:
d1:a0:f4:58:ec:fc:0b:4c:76:d8:2e:65:62:d3:69:
c3:da:86:28:75:5a:dc:a1:2a:3c:94:05:3b:1d:d8:
b7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:59:48:AD:2A:B6:AE:D8:11:CC:88:47:43:65:ED:7C:F8:3F:92:70
X509v3 Authority Key Identifier:
keyid:B5:34:42:18:A4:88:0B:50:0C:03:33:21:E7:6B:D7:8B:4F:3C:16:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/41lIrSq2rtgRzIhHQ2XtfPg_knA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.30.0/24
192.109.47.0/24
Signature Algorithm: sha256WithRSAEncryption
16:b1:90:62:75:e5:80:a1:be:87:9f:6d:b2:fc:41:7a:14:44:
60:1b:20:3d:68:30:31:27:d4:d1:da:e6:86:6a:d9:fc:85:03:
38:6b:d2:c1:8d:0a:6f:6e:f0:91:89:16:f2:ab:57:23:a8:2c:
2b:03:83:a8:75:30:d6:10:6c:4b:be:a2:9c:09:85:97:dd:9f:
f4:20:6c:be:29:2f:48:84:9c:95:d1:7d:56:72:32:e7:5d:5b:
4f:cd:17:91:8c:60:7d:da:e3:34:58:43:a3:36:70:74:a4:f5:
7b:0d:a3:88:1e:53:4f:b8:86:aa:db:07:3d:d5:14:f2:04:73:
67:5c:fa:ed:e5:65:30:c9:68:75:71:8f:67:09:64:57:0e:80:
92:ee:3f:46:b4:2d:ea:83:9c:eb:97:9a:2a:96:9f:a4:c2:d2:
9c:27:1f:fb:85:66:26:ba:99:77:5b:c5:af:df:94:31:6a:48:
a7:fa:98:72:a9:74:62:25:23:85:78:d8:07:4d:92:13:55:0c:
ce:a5:e7:a8:f5:4f:e4:8f:5d:d2:45:c3:a2:ae:92:b7:91:3b:
ce:86:93:b3:8d:6f:4c:42:e8:52:38:26:ce:f1:b2:45:76:1c:
43:3f:b8:96:11:05:60:f2:d3:8d:43:42:80:d6:94:43:81:1c:
e0:5f:74:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:19:23 2026 by rpki-client