Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/Cn7otlqrlBoH8eqplXyFDFxSHV0.roa
File: Cn7otlqrlBoH8eqplXyFDFxSHV0.roa (raw, json)
Hash identifier: KQg1ng+oRcwBjN4nRRG0LDNp+DR1AyFQwxX7EBSyZLI=
Subject key identifier: 0A:7E:E8:B6:5A:AB:94:1A:07:F1:EA:A9:95:7C:85:0C:5C:52:1D:5D
Certificate issuer: /CN=4645c9c58d5a4999b5dce9e070d32f488e331f52
Certificate serial: 019B7AC87881D3709C8C01175E533257D200
Authority key identifier: 46:45:C9:C5:8D:5A:49:99:B5:DC:E9:E0:70:D3:2F:48:8E:33:1F:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/Cn7otlqrlBoH8eqplXyFDFxSHV0.roa
Signing time: Thu 01 Jan 2026 18:18:36 +0000
ROA not before: Thu 01 Jan 2026 18:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215160
IP address blocks: 91.229.73.0/24 maxlen: 24
185.18.224.0/23 maxlen: 24
185.18.224.0/24 maxlen: 24
185.18.225.0/24 maxlen: 24
193.8.95.0/24 maxlen: 24
2a14:3540::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c8:78:81:d3:70:9c:8c:01:17:5e:53:32:57:d2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4645c9c58d5a4999b5dce9e070d32f488e331f52
Validity
Not Before: Jan 1 18:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a7ee8b65aab941a07f1eaa9957c850c5c521d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:28:47:35:b7:7a:30:39:93:12:20:f7:7a:7a:
57:32:23:22:43:0f:12:a6:d0:17:37:ed:b9:71:93:
71:99:73:7b:c1:9d:27:27:00:b2:3d:35:ee:05:6e:
9f:ba:4b:65:1b:21:d7:28:a0:b7:b4:8b:47:18:d8:
72:e2:d3:a8:f3:23:19:9d:aa:0f:dd:18:b1:8f:9a:
fb:fa:bd:da:b7:b2:84:0a:ff:3d:35:92:7b:9b:2e:
fc:bc:1d:46:f0:db:15:3d:b1:fa:3d:13:03:c8:4b:
1f:4b:28:c8:77:f0:2f:8b:0e:75:0d:1b:f1:ab:33:
2c:e7:3f:0e:e1:30:bb:44:3c:4a:5c:01:8b:92:95:
1e:a4:11:66:3b:6d:bb:81:6f:2c:e8:8c:46:5e:e2:
c1:05:38:c8:be:17:41:20:d4:4d:75:62:fb:e7:e7:
50:fe:fb:cb:ab:97:b0:44:fc:35:93:37:6a:4f:76:
c7:41:72:1e:54:92:4d:b2:36:69:1a:a1:3c:34:26:
2b:2f:19:82:70:9f:d8:0c:a7:80:60:96:3b:62:a5:
35:f5:b8:96:c8:c9:2f:06:f4:c4:71:b5:df:44:e3:
25:b6:78:a1:a3:02:cb:70:76:be:da:b4:a0:06:fb:
dd:75:e4:51:50:e4:3b:5a:6c:2e:fc:c4:8e:f5:29:
81:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7E:E8:B6:5A:AB:94:1A:07:F1:EA:A9:95:7C:85:0C:5C:52:1D:5D
X509v3 Authority Key Identifier:
keyid:46:45:C9:C5:8D:5A:49:99:B5:DC:E9:E0:70:D3:2F:48:8E:33:1F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/Cn7otlqrlBoH8eqplXyFDFxSHV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.73.0/24
185.18.224.0/23
193.8.95.0/24
IPv6:
2a14:3540::/32
Signature Algorithm: sha256WithRSAEncryption
1c:50:91:4e:cc:7b:8e:75:ed:e1:59:0b:b5:f0:d0:08:64:1b:
7c:9b:92:db:38:7b:86:2f:3c:df:19:a0:f2:bf:90:26:aa:01:
c1:87:6c:b6:66:fa:ee:ba:ae:71:c6:01:9f:61:93:52:13:91:
89:63:61:f6:cc:c3:44:e8:2c:f8:00:6a:b7:72:4a:a7:1d:53:
f4:2a:40:1b:29:ca:ae:3a:1a:3e:6a:84:74:41:7c:e1:3c:7d:
3c:f5:35:3f:2f:5d:54:b2:18:4f:2c:42:31:6c:56:6c:db:9e:
ad:1e:51:cb:19:ac:17:44:c4:be:15:54:72:57:9f:b0:5c:f2:
a7:bf:80:d3:4b:30:27:d7:00:f4:bf:7f:d2:3c:2a:71:93:e7:
f6:00:9e:8c:94:2b:88:5a:84:0b:31:70:79:22:91:53:8e:52:
46:fb:6f:3b:54:f1:36:96:b6:b7:9c:d1:16:db:0a:18:78:b0:
34:c5:7b:cd:ae:5f:71:70:87:56:0a:98:00:b2:f8:c2:91:d4:
84:4b:1f:2e:35:63:be:33:c0:fb:bf:21:0b:77:2b:f3:2c:77:
45:c5:21:e1:16:4f:78:04:b3:35:92:86:db:a5:ee:54:8a:53:
f4:11:af:a6:1c:e1:85:ab:da:0f:5b:ff:56:a9:27:1b:73:36:
fe:49:72:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:57:14 2026 by rpki-client