Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/Po1iPTbiF1HxWAxAdi5tfajzMlo.roa
File: Po1iPTbiF1HxWAxAdi5tfajzMlo.roa (raw, json)
Hash identifier: 68qLDff/0Yfto5RJ5VfAe9GhmhGb2Dhs3nR+qh/T7x4=
Subject key identifier: 3E:8D:62:3D:36:E2:17:51:F1:58:0C:40:76:2E:6D:7D:A8:F3:32:5A
Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial: 01A0B34FD963A50ED03B2115971868AFCFE9
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/Po1iPTbiF1HxWAxAdi5tfajzMlo.roa
Signing time: Fri 18 Sep 2026 06:59:09 +0000
ROA not before: Fri 18 Sep 2026 06:59:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62005
IP address blocks: 91.210.108.0/23 maxlen: 24
91.221.190.0/23 maxlen: 24
132.243.168.0/22 maxlen: 24
193.43.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:4f:d9:63:a5:0e:d0:3b:21:15:97:18:68:af:cf:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Validity
Not Before: Sep 18 06:59:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e8d623d36e21751f1580c40762e6d7da8f3325a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7f:0f:2e:a4:e8:c8:8f:c8:29:3f:e4:5a:75:
b7:bf:8f:72:ed:01:6c:fc:61:14:67:3a:e6:81:27:
4d:98:e1:07:ca:94:cd:bb:0c:f6:65:e1:f7:2c:51:
7b:95:a2:72:fd:05:b8:9a:14:a3:a1:bb:ab:be:4d:
e4:4f:d1:19:a9:9d:fc:95:19:79:3e:52:ce:b1:08:
af:e3:78:c6:d4:da:ce:2f:1e:74:0d:6f:69:41:ba:
dc:d0:2e:56:46:36:87:8d:07:85:07:a3:e2:2d:b4:
45:88:00:45:b5:7b:c2:54:52:71:ed:59:10:b0:42:
5a:a0:88:93:b9:4e:54:26:53:97:ff:d3:41:b6:14:
4e:01:09:aa:95:58:d8:ba:0b:7a:27:19:99:ca:4c:
e2:bb:a5:84:d3:90:de:47:71:0a:d9:1e:ed:66:47:
8e:45:6e:7b:16:5f:ec:81:ad:b1:b0:47:6d:38:7a:
ad:26:ac:82:36:ed:39:19:cb:6d:3d:b1:84:9a:a3:
fe:f8:12:f2:e4:38:be:01:23:ea:f2:d7:0a:ac:8f:
c7:30:15:80:16:d1:3e:9c:a8:46:0c:a0:d2:2e:69:
4a:0d:38:c5:55:93:ae:01:06:70:7d:ac:c7:ae:81:
c3:97:d0:52:3e:cc:b7:3c:47:1e:81:ce:ae:64:bb:
14:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8D:62:3D:36:E2:17:51:F1:58:0C:40:76:2E:6D:7D:A8:F3:32:5A
X509v3 Authority Key Identifier:
keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/Po1iPTbiF1HxWAxAdi5tfajzMlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.108.0/23
91.221.190.0/23
132.243.168.0/22
193.43.104.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:f0:3e:aa:47:23:2f:dd:64:55:9f:ef:9b:74:70:8e:72:d7:
4d:0e:5b:7f:4d:aa:9b:e2:18:20:52:f1:c7:d3:52:5a:7b:14:
73:44:0c:5d:07:ca:aa:cd:43:ce:96:63:ea:31:08:30:ec:7d:
8d:ac:34:8a:bf:bf:56:23:e4:9f:c8:e0:a3:13:46:1a:75:e2:
4c:5e:e8:5b:37:f6:6c:24:4b:bd:ba:a0:72:8d:c1:f9:3a:1b:
5a:6f:21:38:a9:16:e3:28:01:5c:8d:01:64:97:42:29:5b:ab:
bd:b7:fa:74:9b:0d:1a:ad:ff:a2:bd:61:1d:1d:05:df:e3:35:
2c:dc:d0:b1:64:a5:86:52:5d:e6:09:a1:93:02:b5:fb:20:1e:
f4:c7:0a:26:30:d3:3a:d4:b5:dd:33:13:1e:fb:99:11:6f:74:
a9:c6:dd:7b:f1:8f:e4:70:1d:08:99:bc:ed:55:28:5f:b3:1a:
cd:ae:fa:7f:35:aa:6b:05:7e:53:cd:a6:76:2e:9f:7f:71:a6:
73:6f:9f:e7:a3:8a:ff:8b:a1:e1:07:9c:9b:eb:da:2b:8b:9b:
52:f9:75:ff:0a:6b:57:b1:1f:3c:70:4a:4f:58:4a:d0:4a:04:
a4:b3:66:c3:f4:61:34:47:5b:b5:32:07:99:1e:aa:2f:2e:8f:
69:c4:8a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:00:53 2026 by rpki-client