Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/94IWAiwtIxj1_7vSB68lXR75Qz4.roa
File: 94IWAiwtIxj1_7vSB68lXR75Qz4.roa (raw, json)
Hash identifier: PoUv8ick/XzPCPDkQB4xirKEOxjjjPN5SVmI6BX5nNU=
Subject key identifier: F7:82:16:02:2C:2D:23:18:F5:FF:BB:D2:07:AF:25:5D:1E:F9:43:3E
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 019C5CE9D0CF1FA19F53B35A06E5BF3F6F9E
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/94IWAiwtIxj1_7vSB68lXR75Qz4.roa
Signing time: Sat 14 Feb 2026 16:09:12 +0000
ROA not before: Sat 14 Feb 2026 16:09:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5650
IP address blocks: 91.190.184.0/24 maxlen: 24
185.112.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:5c:e9:d0:cf:1f:a1:9f:53:b3:5a:06:e5:bf:3f:6f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Feb 14 16:09:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f78216022c2d2318f5ffbbd207af255d1ef9433e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a9:6d:f9:01:fe:d1:16:0c:5c:c9:a6:7a:ad:
cc:9f:78:f5:28:85:15:22:64:c9:54:ba:a7:d3:04:
8c:6e:02:89:8c:d3:e8:9e:0a:03:cd:e6:8a:a5:f9:
0d:d6:2e:0a:2b:c2:03:64:02:8a:b6:6a:ff:c4:28:
b4:7a:49:a6:99:d0:6e:f6:0e:00:f9:ad:18:bc:f4:
0f:85:7d:5b:80:12:a7:ad:1d:5c:43:00:2e:9f:c7:
7a:2c:87:09:4f:4c:eb:22:22:14:50:15:cb:29:23:
27:38:59:92:be:73:6b:2e:42:fa:5e:e7:e1:5a:c8:
04:d4:23:54:4f:36:4a:23:e3:54:04:6e:98:d4:26:
e4:8e:ab:96:bf:21:86:92:52:51:e1:ad:56:10:49:
d9:79:fc:58:7d:b4:28:c7:99:ec:1b:76:30:33:cf:
6d:b3:f7:68:04:82:43:95:06:fd:08:70:d2:9c:db:
1c:51:be:63:08:4f:01:be:13:93:10:df:a6:47:5b:
30:82:3a:77:de:b6:63:d0:a7:19:19:4a:b8:ec:d9:
26:3f:95:9b:85:f2:db:38:0a:20:d5:26:4d:67:5d:
7e:bb:7a:e8:19:da:5e:a1:cc:2e:05:aa:b8:0c:9a:
d9:3c:2f:34:8f:c6:48:af:c5:5c:e0:32:21:f0:5e:
70:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:82:16:02:2C:2D:23:18:F5:FF:BB:D2:07:AF:25:5D:1E:F9:43:3E
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/94IWAiwtIxj1_7vSB68lXR75Qz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.190.184.0/24
185.112.240.0/24
Signature Algorithm: sha256WithRSAEncryption
56:70:b6:58:4a:7c:dc:9b:1e:fa:ef:76:89:c6:54:5b:27:83:
34:51:45:44:1d:7f:4e:f5:13:5e:70:45:2a:45:d4:02:68:8c:
fb:9c:cc:e5:2f:ff:bd:f1:c9:85:8d:aa:90:f2:7e:60:22:0b:
c6:50:cd:2b:98:f6:7a:8e:ff:54:2d:64:32:ac:f7:b8:51:3f:
da:1e:19:95:f9:40:52:2f:32:00:2b:83:f6:af:e9:2e:5f:20:
b9:99:58:2b:c4:5f:3a:9f:96:e2:5e:10:70:31:86:77:3a:8e:
51:c1:a1:02:76:10:74:21:69:13:f9:c3:8b:5a:42:c3:34:52:
56:3e:d9:5b:1c:36:d3:23:11:18:72:e2:5a:02:5d:8b:7c:9d:
72:a6:08:34:e8:6e:9e:e8:d3:a4:39:79:6a:20:5a:37:c6:97:
10:bb:c9:de:bf:f1:47:49:19:cc:07:d9:a4:7e:9b:53:2a:5b:
01:ac:b6:3b:e4:f6:48:96:b7:63:5a:d5:3e:43:5e:49:20:80:
a6:96:01:1c:91:db:96:71:7c:1b:2e:f9:29:d4:3e:70:f9:c2:
d5:97:bb:ce:22:59:7b:b5:73:29:dc:28:4a:0c:05:e4:71:04:
ca:8c:67:79:eb:4a:e7:60:14:b1:ac:65:0b:d0:2f:03:0b:a0:
f5:af:4c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:04:36 2026 by rpki-client