Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/jaS_aopjW2l13vfiNLU-zDkULZ8.roa
File: jaS_aopjW2l13vfiNLU-zDkULZ8.roa (raw, json)
Hash identifier: ME5jooaurn2IHi9kVMEVsmrNESUrxsBsGovYqe75bQk=
Subject key identifier: 8D:A4:BF:6A:8A:63:5B:69:75:DE:F7:E2:34:B5:3E:CC:39:14:2D:9F
Certificate issuer: /CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Certificate serial: 01A06BF875B416DF5B28C9D927A097AA5140
Authority key identifier: 41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/jaS_aopjW2l13vfiNLU-zDkULZ8.roa
Signing time: Fri 04 Sep 2026 10:30:40 +0000
ROA not before: Fri 04 Sep 2026 10:30:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203273
IP address blocks: 91.211.13.0/24 maxlen: 24
91.211.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6b:f8:75:b4:16:df:5b:28:c9:d9:27:a0:97:aa:51:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Validity
Not Before: Sep 4 10:30:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8da4bf6a8a635b6975def7e234b53ecc39142d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1c:36:40:5a:0e:3b:12:87:29:55:ad:93:df:
6f:e1:10:23:91:16:08:7b:81:92:2d:1a:33:56:8c:
9f:bf:07:1f:a4:54:b8:c5:cc:2a:30:2f:b9:29:6c:
f8:60:0c:c6:89:9f:a2:b4:11:bb:1f:41:a3:53:ce:
d6:b6:8b:95:37:1d:73:70:4d:5c:6f:b1:a3:24:5c:
d3:d4:8d:fc:ea:c1:c4:71:d5:54:34:23:33:bf:e7:
ea:50:2c:71:f3:93:e7:ea:20:6b:1d:d5:33:17:a0:
cf:d6:43:b0:6a:0d:cf:d6:7b:9f:1b:86:a5:62:d0:
a8:16:b7:97:24:c9:ef:97:48:25:ca:e6:da:3a:59:
e4:47:39:8d:a3:cb:f8:f8:7c:39:d0:04:3e:6c:3a:
b0:16:3b:f3:ae:dc:88:5b:95:70:70:e8:ea:96:4d:
09:c9:b0:3d:d7:18:55:3a:81:d0:4f:ab:a8:a1:df:
32:6a:fd:0f:3d:5a:67:e7:a7:3f:7a:a1:80:e8:a9:
bc:b8:c5:10:fa:5c:68:30:ce:a8:96:b8:81:44:00:
01:de:94:13:4a:64:53:ca:dd:43:d2:8b:8c:d1:ed:
b9:ae:db:0a:c4:ef:de:cc:be:ac:db:39:d3:b0:c7:
ac:84:ac:e0:c8:10:55:66:24:a5:f9:71:30:37:e8:
18:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A4:BF:6A:8A:63:5B:69:75:DE:F7:E2:34:B5:3E:CC:39:14:2D:9F
X509v3 Authority Key Identifier:
keyid:41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/jaS_aopjW2l13vfiNLU-zDkULZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.13.0-91.211.14.255
Signature Algorithm: sha256WithRSAEncryption
56:99:29:d2:fc:98:b6:b6:fa:07:4d:a1:a6:01:78:79:f5:75:
19:74:fd:6b:cc:23:d1:95:98:a9:60:0c:4d:4c:6a:1a:11:3a:
fb:3b:2a:11:30:f2:a6:fb:cd:7c:27:9d:e6:f0:02:7e:39:4c:
4b:39:a2:98:61:80:48:db:0a:3e:69:42:a4:4d:5c:1b:f6:43:
2d:79:42:ad:09:d9:72:fd:35:23:7b:26:29:b0:f5:fa:8e:51:
76:d5:60:22:b1:92:07:04:f7:43:d9:22:07:74:ff:a3:99:80:
c8:e4:1c:07:9d:43:d3:f4:a2:40:e2:8e:4c:9e:cc:67:c8:4c:
3a:be:af:58:9c:a6:b8:10:3f:0c:2b:30:5c:f1:6c:89:21:00:
d9:fa:90:28:23:dc:33:d2:d3:4e:e8:42:31:03:d3:55:65:fb:
fc:7e:ad:5d:3a:dd:33:f0:7f:cb:4b:c3:c9:e0:a8:04:91:7e:
5b:79:c9:d5:1b:65:aa:95:33:34:56:2d:d5:b1:ad:06:c2:db:
e1:be:29:6f:1c:27:9b:a1:21:88:ec:3b:4b:6e:af:5a:a4:c9:
67:73:f4:be:30:6e:95:9f:ba:1b:77:2d:09:18:49:9c:5d:e8:
7b:5d:fe:48:35:f2:0a:fb:5a:cf:35:99:91:a7:19:78:e1:7c:
2e:73:cd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:36:38 2026 by rpki-client