Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/4zPyCmOCOHn0UmU25C34lBLrfsc.roa
File: 4zPyCmOCOHn0UmU25C34lBLrfsc.roa (raw, json)
Hash identifier: mYeF9TieLkXAP7pTIPCY5kfzmWlfrZulfwAKyol+I8w=
Subject key identifier: E3:33:F2:0A:63:82:38:79:F4:52:65:36:E4:2D:F8:94:12:EB:7E:C7
Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9
Certificate serial: 019C465E5435AC1B6BDDE0F10007BDEE8065
Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/4zPyCmOCOHn0UmU25C34lBLrfsc.roa
Signing time: Tue 10 Feb 2026 07:05:12 +0000
ROA not before: Tue 10 Feb 2026 07:05:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205960
IP address blocks: 91.218.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:46:5e:54:35:ac:1b:6b:dd:e0:f1:00:07:bd:ee:80:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9
Validity
Not Before: Feb 10 07:05:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e333f20a63823879f4526536e42df89412eb7ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:02:93:fd:23:a8:58:93:f9:96:5d:83:e0:05:
c5:77:a1:05:d0:78:cf:5a:2e:a9:6e:e9:73:ba:d7:
d9:e5:77:e8:d1:51:f0:51:f9:3d:3e:bd:a4:4f:74:
77:ae:28:35:41:18:5d:82:f7:9b:26:d7:27:a2:8f:
4a:e2:3e:65:f8:7b:20:1d:3e:d8:b6:e6:5b:4c:f7:
5d:50:d3:d0:93:43:18:2e:6a:34:eb:3a:ad:51:b4:
2d:01:e8:d1:f0:d4:b4:9f:70:b5:eb:97:2c:41:59:
df:cd:f3:f4:ef:00:3c:2d:f3:be:c6:0c:d9:8f:e0:
a8:d3:66:bb:20:f7:7a:22:dd:4f:59:5a:18:51:fa:
eb:6c:4d:b4:83:2f:e2:e0:63:70:38:b5:97:c9:b6:
f2:5c:51:59:48:e3:1c:12:6c:60:be:68:66:7b:e6:
1c:86:8e:6e:ea:0a:b0:b2:5e:c6:ee:18:21:42:03:
e8:1f:b6:ba:f3:1a:08:a5:6b:40:71:69:d0:64:56:
bf:78:e7:89:33:c9:1f:aa:ad:be:18:e6:2b:4f:53:
9d:6c:a7:5d:c1:b6:06:41:f9:f0:62:f9:0d:90:49:
67:80:f4:b6:52:3b:c8:8c:82:88:33:18:41:75:52:
57:bf:6b:bd:47:89:35:5e:92:d1:0f:de:ee:2c:f8:
b6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:33:F2:0A:63:82:38:79:F4:52:65:36:E4:2D:F8:94:12:EB:7E:C7
X509v3 Authority Key Identifier:
keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/4zPyCmOCOHn0UmU25C34lBLrfsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.179.0/24
Signature Algorithm: sha256WithRSAEncryption
65:06:e3:7a:b0:4a:42:89:82:08:2b:f5:be:4b:a6:70:1a:7f:
63:af:b3:a5:75:15:47:f9:e8:4a:c7:e6:bb:28:d1:d6:b2:13:
c9:d1:f3:23:df:27:a3:e6:8d:64:37:0a:64:5a:0b:19:74:85:
23:9c:e6:3f:2b:71:49:9c:d8:c3:ee:91:1c:6c:bf:4b:29:2e:
c2:b9:4a:12:55:81:f6:94:69:62:b7:e1:ff:bd:07:a5:51:4e:
07:5d:fc:28:77:66:5f:dc:b4:06:dc:0e:95:1f:50:4b:fd:a8:
84:57:0c:b4:8b:76:c2:dd:b6:6f:c9:94:70:07:c3:c6:ab:78:
fc:84:7c:03:1c:10:41:bc:7a:b9:57:c8:b5:16:95:46:a3:ca:
f6:31:7b:71:b6:c0:c6:eb:34:69:d1:dd:34:93:b6:b2:41:97:
ef:bf:bb:1a:c6:65:d5:8d:93:09:a5:0f:79:71:d8:66:57:65:
e8:41:f4:b7:fc:f3:68:dc:7e:ce:8f:07:69:a6:10:c1:f1:72:
04:52:4f:6d:d0:53:55:27:0f:dc:61:9f:45:2f:bc:c2:be:bd:
ca:62:0d:ba:c4:44:35:61:3a:3e:22:ef:7b:30:ad:d9:76:9e:
68:04:a2:7c:b6:21:d7:0d:52:f7:2a:35:e0:70:a7:bd:49:a7:
85:3c:f2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:16:09 2026 by rpki-client