Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/RBn0x09QP17HKTcUk35SeRs4wcQ.roa
File: RBn0x09QP17HKTcUk35SeRs4wcQ.roa (raw, json)
Hash identifier: K/tTO8Tdy7lEQRLsArj6GBa808uE/Om7+O6QXLd3MN8=
Subject key identifier: 44:19:F4:C7:4F:50:3F:5E:C7:29:37:14:93:7E:52:79:1B:38:C1:C4
Certificate issuer: /CN=4142d3f9b31126e0850265715c9fc32174b557a4
Certificate serial: 019D678029F71B297BEF7825785923ADA833
Authority key identifier: 41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/RBn0x09QP17HKTcUk35SeRs4wcQ.roa
Signing time: Tue 07 Apr 2026 10:32:25 +0000
ROA not before: Tue 07 Apr 2026 10:32:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201325
IP address blocks: 91.151.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:67:80:29:f7:1b:29:7b:ef:78:25:78:59:23:ad:a8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4142d3f9b31126e0850265715c9fc32174b557a4
Validity
Not Before: Apr 7 10:32:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4419f4c74f503f5ec7293714937e52791b38c1c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a2:46:a0:91:73:61:38:57:a9:28:8f:97:27:
ef:15:ca:77:62:70:e1:c8:2f:58:32:89:1b:ae:4b:
a2:39:da:7b:3f:6d:df:22:26:4d:0a:73:bf:f0:93:
bd:08:41:f1:6f:1f:62:91:6e:4a:db:b4:8a:8c:f8:
11:bd:87:2a:5b:05:a7:41:95:dd:52:10:9f:6a:4c:
bf:49:56:42:5f:05:b7:a3:ab:cb:10:e7:09:06:67:
61:bf:14:da:5e:9b:a8:94:a0:27:54:4a:42:b0:0f:
c2:84:6d:95:d2:6f:39:1a:bc:d2:b3:24:b6:11:ce:
53:5c:bb:5a:9d:98:89:90:3e:33:39:38:1c:3f:93:
ee:43:6c:a8:b7:e1:31:0e:38:04:97:3c:47:12:3a:
cd:88:00:66:61:74:12:cc:0e:dd:c6:da:3b:2a:e6:
ed:ee:52:1f:09:22:46:12:7f:37:1b:50:f2:89:b7:
16:f3:18:1d:c4:05:f1:20:63:22:d3:91:13:67:00:
67:f0:4c:7e:b0:de:cf:6a:a0:00:7d:4d:b9:40:81:
0f:c5:ae:cc:0f:7f:8e:62:31:e8:70:99:61:e4:b8:
35:2a:87:52:ec:fc:cc:f2:73:08:13:3e:3c:8a:f3:
d2:56:0f:c6:3e:10:65:4b:28:3e:f1:31:da:1d:6d:
19:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:19:F4:C7:4F:50:3F:5E:C7:29:37:14:93:7E:52:79:1B:38:C1:C4
X509v3 Authority Key Identifier:
keyid:41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/RBn0x09QP17HKTcUk35SeRs4wcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.151.90.0/24
Signature Algorithm: sha256WithRSAEncryption
80:00:a4:a7:fe:1b:6e:63:60:0b:9d:ad:ca:cc:b5:73:96:11:
42:53:c7:d2:e1:fb:6b:97:4a:42:ca:55:00:bf:f0:4b:f6:99:
61:62:dc:4d:be:5d:e3:53:ce:c7:78:93:94:de:30:cc:f9:49:
43:a2:df:d1:7e:1c:62:0d:9e:8d:d2:44:fc:7b:fe:bf:47:66:
9b:a6:d0:55:a0:b9:6c:41:f7:cc:fa:06:c0:5b:e9:e9:1c:a0:
f6:65:ed:59:28:5e:43:5a:88:99:d9:ec:28:e6:3c:b4:d1:13:
aa:cd:9b:16:4f:29:09:45:4c:ad:fd:56:e9:96:39:b3:5e:a0:
3b:05:d4:c2:f4:75:fd:f2:b8:a0:2e:7c:7a:95:4a:b6:ca:a0:
08:58:3f:f9:fa:61:79:1a:92:77:7b:16:9b:0c:34:18:bd:fb:
57:b0:06:cb:04:d4:12:0b:05:7c:5a:6d:28:4b:c1:51:8b:d3:
f0:37:6d:1c:ef:82:5c:7e:72:99:55:9f:c7:d9:2a:72:0a:49:
93:c5:2b:60:51:f7:55:af:40:a1:7b:7d:90:33:47:1f:4a:9b:
c3:78:be:28:61:50:a4:ee:58:46:f2:ae:09:d2:31:db:a9:d8:
37:94:98:e2:fb:56:a1:3c:b1:df:5a:a2:0f:8e:91:02:25:03:
a9:b8:5d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:59:50 2026 by rpki-client