Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/Sci8cSSHIwK8cAd-Z2NXFaGyt8A.roa
File: Sci8cSSHIwK8cAd-Z2NXFaGyt8A.roa (raw, json)
Hash identifier: RPjdlL4lf1ZtlD+1fltmcMb4oq51gUanC3qSsemgh8s=
Subject key identifier: 49:C8:BC:71:24:87:23:02:BC:70:07:7E:67:63:57:15:A1:B2:B7:C0
Certificate issuer: /CN=de7c82b2276cbdf130ccad046b65feab2c27ed49
Certificate serial: 019B77C756583F380AE840E6FB3E9C5F0640
Authority key identifier: DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/Sci8cSSHIwK8cAd-Z2NXFaGyt8A.roa
Signing time: Thu 01 Jan 2026 04:18:31 +0000
ROA not before: Thu 01 Jan 2026 04:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210060
IP address blocks: 91.223.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:56:58:3f:38:0a:e8:40:e6:fb:3e:9c:5f:06:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de7c82b2276cbdf130ccad046b65feab2c27ed49
Validity
Not Before: Jan 1 04:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49c8bc7124872302bc70077e67635715a1b2b7c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fa:c0:82:9c:26:4b:ff:63:c8:27:72:40:41:
b7:08:6c:fe:52:5d:cd:ff:e3:4b:63:02:9f:e9:61:
9b:eb:e0:8f:a4:fd:ac:84:1a:ba:ff:31:12:bd:2e:
4f:d7:88:d7:cc:33:4b:56:5c:16:35:3e:2c:64:c9:
9f:57:ac:42:06:95:84:18:30:55:46:e4:34:e2:7f:
f3:0f:1d:48:5d:a7:10:97:13:cd:ea:b4:8c:13:94:
c9:bd:38:02:c7:c8:ce:04:9a:65:e9:57:12:e6:3f:
1d:dc:d0:61:23:a7:79:61:01:fc:11:ff:f7:db:7f:
a6:7c:e5:ff:6f:f1:0f:51:31:19:43:73:46:0a:ce:
5f:9a:55:00:32:90:40:21:b5:be:5f:55:b0:6c:0e:
60:a6:c7:7f:99:48:cd:01:a9:3f:31:94:bc:e6:6f:
1c:70:b4:f0:79:08:3e:62:42:91:b3:c6:40:23:b3:
78:34:d6:d0:36:8e:d8:70:3c:c8:f0:1e:2e:f9:cf:
0d:e9:e7:9c:75:7f:06:89:bb:c6:e8:4a:70:68:92:
38:33:2e:d3:3d:53:74:c4:30:c8:d5:ad:18:4c:89:
14:c9:c0:c2:b2:ec:f8:07:ba:df:55:0a:5f:36:3d:
c6:1b:4c:ce:b9:a4:46:8b:da:91:b7:39:d5:e4:0b:
fe:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C8:BC:71:24:87:23:02:BC:70:07:7E:67:63:57:15:A1:B2:B7:C0
X509v3 Authority Key Identifier:
keyid:DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/Sci8cSSHIwK8cAd-Z2NXFaGyt8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.45.0/24
Signature Algorithm: sha256WithRSAEncryption
51:1b:5f:4e:e9:23:fa:c3:dd:92:71:6f:3a:22:10:5a:f7:ac:
e3:ef:01:9f:47:9d:eb:ed:3d:0a:46:aa:db:f4:30:4c:e4:ff:
4d:b8:67:e4:ee:07:4e:c9:58:c6:5d:fb:ad:ff:29:e2:ac:1c:
03:24:2d:46:7d:86:8f:f6:f1:9f:1d:80:c9:75:8c:4b:c2:e1:
05:0a:21:7a:7e:62:7c:33:15:d7:38:af:be:f6:d1:c9:e7:5e:
89:86:7c:d3:4c:0d:dc:28:a2:2c:29:87:9d:28:f7:42:1d:c5:
ea:b2:de:bc:37:93:5c:89:07:fe:3d:15:1d:56:94:1e:07:dd:
28:f8:f5:32:9d:9f:8c:bf:ba:0d:22:ef:c0:e0:a0:29:3b:e3:
9d:1b:77:01:f4:5a:fe:2b:ca:b3:0a:62:38:db:b1:df:29:b1:
79:15:e2:52:02:ee:3f:9b:aa:d7:d9:7e:fb:5e:70:3c:9d:68:
92:13:76:72:c9:33:e3:85:63:8b:34:64:23:f1:ea:e4:5d:9c:
54:81:5b:06:35:30:0c:fc:78:d5:7a:ba:5d:5e:63:e3:86:40:
75:53:1a:9a:1e:cb:55:08:10:4c:fb:9c:1a:a3:55:cd:72:ab:
5c:80:f8:fe:29:72:22:05:6e:2e:f3:96:49:b4:87:4f:eb:d4:
36:fe:f6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:24:41 2026 by rpki-client