Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/ADM5z6EfT3aWecVckZ9ug4ndlFM.roa
File: ADM5z6EfT3aWecVckZ9ug4ndlFM.roa (raw, json)
Hash identifier: DIKoFYYPJwfVKkL4sbv2NF1MZFR1z2PkmKsW9iTkjvM=
Subject key identifier: 00:33:39:CF:A1:1F:4F:76:96:79:C5:5C:91:9F:6E:83:89:DD:94:53
Certificate issuer: /CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Certificate serial: 01A0A024C59D9E0D203309D300203D70D2E4
Authority key identifier: AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/ADM5z6EfT3aWecVckZ9ug4ndlFM.roa
Signing time: Mon 14 Sep 2026 13:39:19 +0000
ROA not before: Mon 14 Sep 2026 13:39:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48955
IP address blocks: 91.211.87.0/24 maxlen: 24
91.217.226.0/24 maxlen: 24
185.140.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a0:24:c5:9d:9e:0d:20:33:09:d3:00:20:3d:70:d2:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Validity
Not Before: Sep 14 13:39:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=003339cfa11f4f769679c55c919f6e8389dd9453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e6:87:81:85:2e:d6:f5:37:40:fa:62:98:c0:
a7:48:de:25:39:4d:ef:19:5a:2e:a7:27:d1:0a:2e:
36:56:7b:8f:03:c6:38:94:37:51:52:0d:64:9f:6c:
e1:8b:a1:05:92:0f:7d:1d:e6:33:e0:55:55:d2:11:
0a:ea:a5:cd:58:7b:fa:14:1d:68:96:16:7e:e9:31:
82:90:ca:5a:c2:85:1c:0c:3f:b4:23:c1:c4:14:6d:
1f:52:16:8f:10:a3:33:6f:13:3c:f2:d2:41:b1:fe:
0b:3c:fb:47:b3:a2:77:1a:92:58:28:96:10:97:ea:
4d:af:64:bf:0f:2f:32:a7:ac:43:f8:15:ef:e2:1b:
37:7d:50:d5:44:75:f2:74:f5:18:2a:84:92:9b:5d:
bb:da:82:25:2f:05:ee:92:f3:1a:e0:73:f8:28:27:
20:24:e0:7a:4e:3c:7d:81:a9:78:79:73:90:a2:99:
36:ec:09:87:03:aa:47:59:df:2c:b7:3e:bc:91:7f:
39:f8:d3:55:ad:c4:c5:b5:5f:2f:ff:92:69:24:f6:
15:b6:4d:68:be:f6:24:ec:9e:0e:59:15:3b:7a:76:
07:e4:88:e8:e2:43:05:d6:28:43:aa:37:c6:83:56:
52:21:a9:a3:ee:8c:2c:02:23:8d:e4:3b:fa:ee:6b:
81:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:33:39:CF:A1:1F:4F:76:96:79:C5:5C:91:9F:6E:83:89:DD:94:53
X509v3 Authority Key Identifier:
keyid:AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/ADM5z6EfT3aWecVckZ9ug4ndlFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.87.0/24
91.217.226.0/24
185.140.251.0/24
Signature Algorithm: sha256WithRSAEncryption
85:7a:51:39:cd:5f:61:8d:f2:64:42:71:17:e7:5f:c7:68:dd:
97:fd:0f:85:9b:2e:47:3c:0b:86:e0:45:4f:06:b5:12:b3:54:
e2:8b:ed:45:99:8a:cd:16:7f:9f:5f:5d:8c:40:7b:3c:85:c3:
78:6b:26:ed:2c:80:3e:a1:f3:99:d7:0a:80:0a:4c:76:b0:2a:
de:00:2c:6a:8f:5c:b4:28:32:f7:d3:c4:c1:69:02:97:ba:dd:
83:e8:bc:5c:11:9a:d9:4a:9e:5f:1b:e3:59:e5:90:c3:19:d1:
d9:ec:65:88:4d:cb:40:7a:c4:c5:42:d2:57:01:d3:84:b6:6a:
d2:06:41:d0:ae:24:f3:40:3f:ef:0b:4c:80:2a:a2:d0:b5:51:
52:54:9a:8f:bf:c0:27:9d:b9:17:4a:b4:c4:f0:b3:30:8e:26:
b9:a9:da:0e:51:5e:94:0e:2e:4d:4e:b8:bd:6f:02:4b:42:c3:
d2:ee:3b:6b:b0:65:78:2d:ed:8f:58:e2:00:b0:e7:73:94:d8:
b3:8e:2e:a5:75:c4:61:ac:35:05:bf:c9:1d:67:98:b3:9a:a9:
bf:22:da:b0:cf:dc:6e:be:2c:73:e1:86:4d:6d:65:57:86:fc:
6b:92:a8:31:a5:1c:58:ad:90:d9:05:62:7e:f2:b8:84:7a:f0:
b3:6b:67:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 08:14:26 2026 by rpki-client