Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/950a20-599a-4e78-998c-a769db907bf4/1/x4cPD1EJXBWEbFTeeGp8lHvzP6s.roa
File: x4cPD1EJXBWEbFTeeGp8lHvzP6s.roa (raw, json)
Hash identifier: 1c7bHKSm2FryEiD26IsKwnBSp5MMVBFvGXNakIgfTYk=
Subject key identifier: C7:87:0F:0F:51:09:5C:15:84:6C:54:DE:78:6A:7C:94:7B:F3:3F:AB
Certificate issuer: /CN=b2e5cc6f71553977600cc411bbeb988d16631e75
Certificate serial: 01A05D75BD2FB005A6ADC6BEC48D0352E7E1
Authority key identifier: B2:E5:CC:6F:71:55:39:77:60:0C:C4:11:BB:EB:98:8D:16:63:1E:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suXMb3FVOXdgDMQRu-uYjRZjHnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/950a20-599a-4e78-998c-a769db907bf4/1/x4cPD1EJXBWEbFTeeGp8lHvzP6s.roa
Signing time: Tue 01 Sep 2026 14:53:12 +0000
ROA not before: Tue 01 Sep 2026 14:53:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33965
IP address blocks: 91.213.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/950a20-599a-4e78-998c-a769db907bf4/1/suXMb3FVOXdgDMQRu-uYjRZjHnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/950a20-599a-4e78-998c-a769db907bf4/1/suXMb3FVOXdgDMQRu-uYjRZjHnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/suXMb3FVOXdgDMQRu-uYjRZjHnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:75:bd:2f:b0:05:a6:ad:c6:be:c4:8d:03:52:e7:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e5cc6f71553977600cc411bbeb988d16631e75
Validity
Not Before: Sep 1 14:53:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7870f0f51095c15846c54de786a7c947bf33fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c8:52:ad:3e:86:ff:2e:6e:d4:78:ea:37:04:
db:95:9d:84:4f:fb:4f:4f:87:78:57:f5:f4:94:ce:
e1:83:b1:e1:b1:94:d6:de:fe:d2:b2:55:26:a9:f6:
40:68:9e:3b:4f:c7:85:5f:56:96:1f:7d:af:23:aa:
5f:f8:54:e4:e3:2e:cf:ec:7d:b4:8d:29:c2:72:e7:
66:d1:bb:74:f0:96:18:80:15:0e:37:c2:88:66:c0:
ec:aa:ef:bf:35:5b:db:88:da:46:34:ea:1e:13:9f:
3c:44:de:d7:aa:54:f3:61:65:7e:7e:5e:41:14:0f:
49:07:36:47:53:0b:90:32:6a:58:47:fb:a1:3b:af:
23:8c:f6:58:52:80:97:cf:95:c8:7c:48:ce:10:a2:
ba:8b:50:7b:4b:a3:7e:8a:ec:7c:bb:75:3f:c0:00:
26:16:5a:61:e0:14:d2:57:9b:39:3c:b1:cb:59:17:
12:db:d7:5e:bd:b2:1f:c3:89:2a:3c:21:ef:82:13:
1b:eb:1b:80:30:5e:e6:e0:28:7e:48:f7:b8:69:e6:
37:2b:98:52:49:c7:8a:56:ea:70:85:8c:11:5a:41:
3e:55:80:6c:4f:1e:e9:aa:94:39:64:d5:d1:67:09:
a3:8d:7c:8f:64:6e:23:42:bd:f1:a0:8e:90:01:1a:
64:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:87:0F:0F:51:09:5C:15:84:6C:54:DE:78:6A:7C:94:7B:F3:3F:AB
X509v3 Authority Key Identifier:
keyid:B2:E5:CC:6F:71:55:39:77:60:0C:C4:11:BB:EB:98:8D:16:63:1E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suXMb3FVOXdgDMQRu-uYjRZjHnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/950a20-599a-4e78-998c-a769db907bf4/1/x4cPD1EJXBWEbFTeeGp8lHvzP6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/950a20-599a-4e78-998c-a769db907bf4/1/suXMb3FVOXdgDMQRu-uYjRZjHnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.194.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:f9:e5:60:1b:a6:a5:c0:29:ea:df:d1:87:52:9c:02:c4:83:
a9:7d:6f:16:d8:05:e2:d4:46:f2:1f:52:e5:50:50:3c:6a:c5:
02:f5:be:48:5d:f9:04:b9:ac:93:16:66:df:bb:e5:f3:62:92:
61:3a:d2:31:a1:cb:6f:39:2a:bb:2f:33:91:8a:8f:df:46:7c:
af:26:31:d1:09:ec:d1:9d:dc:14:d5:5a:86:d0:7f:8c:95:0f:
a2:3c:93:02:51:f7:3d:8f:d1:7f:05:6c:c1:80:27:7d:a8:fe:
e3:59:9f:4d:7c:99:55:13:b9:ed:df:a4:60:48:cc:ee:58:22:
35:c0:39:1e:67:ba:22:c6:4a:2a:d0:93:eb:c1:f4:ee:f1:ab:
20:38:8a:72:7a:1c:4d:1d:3a:23:a0:30:e8:cf:fd:6a:17:52:
87:45:b3:06:27:c6:f4:f8:19:98:c0:cf:d9:7f:b2:7d:85:9a:
63:66:d0:76:57:8d:85:d9:df:bb:72:01:83:96:70:de:fa:99:
c5:4e:8a:ef:c9:0a:25:93:b8:88:f6:a4:ff:eb:b8:94:b6:3c:
99:d5:90:61:5a:e6:be:04:80:44:a3:f0:d7:b6:79:24:20:37:
4a:c5:71:15:62:9a:29:7f:80:0c:7a:03:97:12:ab:9d:a1:42:
2c:4e:44:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:22:32 2026 by rpki-client