Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/1Rx1jTy82XQdNBp0LiwhK0s8MsM.roa
File: 1Rx1jTy82XQdNBp0LiwhK0s8MsM.roa (raw, json)
Hash identifier: 1NqEtay4yYir+K8khEO4bt3L4GFVfTipfj69y3KWZc4=
Subject key identifier: D5:1C:75:8D:3C:BC:D9:74:1D:34:1A:74:2E:2C:21:2B:4B:3C:32:C3
Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Certificate serial: 019D716E7F6FEAAF79DC5459D255A6399BBD
Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/1Rx1jTy82XQdNBp0LiwhK0s8MsM.roa
Signing time: Thu 09 Apr 2026 08:49:20 +0000
ROA not before: Thu 09 Apr 2026 08:49:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 91.149.192.0/24 maxlen: 24
91.149.200.0/24 maxlen: 24
91.149.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:71:6e:7f:6f:ea:af:79:dc:54:59:d2:55:a6:39:9b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Validity
Not Before: Apr 9 08:49:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d51c758d3cbcd9741d341a742e2c212b4b3c32c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5f:ae:ee:a4:ba:ff:04:7b:07:98:89:dd:2a:
d4:6f:2e:e0:58:ae:7d:f8:6d:c0:ac:dd:5f:dd:a6:
71:4d:40:c0:c9:55:07:fe:da:36:b7:b6:7c:d5:5e:
63:95:8e:35:6e:77:3d:ee:a8:f6:63:03:e8:14:73:
a4:1d:47:3e:31:fd:a9:24:c0:8c:3a:5d:72:b4:6d:
6f:db:65:29:e4:45:16:5b:dd:67:8a:ab:fb:62:bf:
38:9f:95:8c:c8:8c:12:f3:22:28:1f:f1:4c:8d:f8:
4d:f9:13:a8:67:92:a7:2e:8c:a8:82:49:0f:fc:ec:
4a:8b:0f:86:5a:30:34:dc:56:b1:26:ae:c7:94:71:
7b:37:a4:b4:7f:15:7c:ff:dc:3b:02:bc:a2:e0:63:
69:8a:f7:bd:ef:d5:06:11:1c:ba:78:6d:be:7a:0d:
9c:a6:7c:62:a1:2c:79:53:d8:06:85:4c:d4:42:8e:
4f:23:09:b1:9e:98:78:a7:c6:e7:cc:06:91:e0:ca:
41:63:10:2c:66:cf:af:87:c4:69:a1:ba:84:14:74:
66:f1:dc:86:84:f8:f6:d1:fa:ae:a6:8c:18:2d:81:
63:72:fd:e1:8e:a8:36:e0:97:59:4f:d2:f5:6d:3e:
73:75:29:84:1a:29:95:66:37:b9:47:15:f9:90:f0:
bd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1C:75:8D:3C:BC:D9:74:1D:34:1A:74:2E:2C:21:2B:4B:3C:32:C3
X509v3 Authority Key Identifier:
keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/1Rx1jTy82XQdNBp0LiwhK0s8MsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.149.192.0/24
91.149.200.0/24
91.149.231.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:fd:3e:58:b4:8d:35:1e:41:f2:53:fa:55:12:f5:b3:05:06:
dc:14:51:f2:ef:69:20:74:a9:65:38:3c:d8:75:f8:c5:87:0c:
10:92:9c:92:80:c1:ac:a9:bc:fa:80:75:3c:34:28:9a:3d:f0:
45:dc:6a:b8:2a:9c:23:51:a8:bf:51:4a:ae:0e:26:1e:c9:54:
9b:f9:d6:4a:ed:1e:a1:33:1a:f0:fd:1d:c9:d5:bd:0b:e2:02:
7c:1e:ad:3f:cf:e0:42:c9:f9:9e:86:06:18:0d:6a:fa:5c:b6:
ec:fb:ae:be:d2:9f:3e:fa:be:47:fe:1e:77:c2:e4:eb:a5:27:
ce:bd:35:70:0e:b2:c0:80:67:c6:67:88:17:6d:33:0f:2d:b6:
0f:47:b4:39:0d:0f:30:b9:bb:79:32:a0:8d:31:e0:ee:bd:de:
b5:96:ca:fb:cd:36:ad:5e:c2:2f:b6:b5:ab:a0:b5:45:72:19:
50:4d:84:2e:dc:c0:f2:d4:f3:e8:5d:e3:8b:a6:07:2a:d6:f9:
58:cc:0e:b9:64:13:ca:fe:da:3a:4d:ce:ac:4b:81:9b:30:a0:
cc:1e:1e:90:84:9e:71:77:90:78:27:0b:c5:a5:20:9b:67:6d:
bc:e2:64:74:b7:93:c6:aa:97:27:c1:96:79:ca:f3:60:1d:71:
ff:a0:22:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:36:44 2026 by rpki-client