Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/41uTXUE3-Tyf_FkkFMPgrkYthMo.roa
File: 41uTXUE3-Tyf_FkkFMPgrkYthMo.roa (raw, json)
Hash identifier: 9Aolk2ywdWY79USk6tBgdgUvgIQSTS6ltMiW7geqE8M=
Subject key identifier: E3:5B:93:5D:41:37:F9:3C:9F:FC:59:24:14:C3:E0:AE:46:2D:84:CA
Certificate issuer: /CN=b1241f129dbfc4a1651fecdba03108fcd2cc1df2
Certificate serial: 019D708509FB7D026B0A60A0877D5E9BF4E3
Authority key identifier: B1:24:1F:12:9D:BF:C4:A1:65:1F:EC:DB:A0:31:08:FC:D2:CC:1D:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/41uTXUE3-Tyf_FkkFMPgrkYthMo.roa
Signing time: Thu 09 Apr 2026 04:34:20 +0000
ROA not before: Thu 09 Apr 2026 04:34:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42742
IP address blocks: 91.189.232.0/21 maxlen: 21
92.118.140.0/24 maxlen: 24
92.118.141.0/24 maxlen: 24
92.118.142.0/24 maxlen: 24
194.79.4.0/22 maxlen: 22
195.211.64.0/22 maxlen: 22
2a09:ad40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:70:85:09:fb:7d:02:6b:0a:60:a0:87:7d:5e:9b:f4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1241f129dbfc4a1651fecdba03108fcd2cc1df2
Validity
Not Before: Apr 9 04:34:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e35b935d4137f93c9ffc592414c3e0ae462d84ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:49:9a:74:fd:90:4b:03:67:5d:1d:c3:8f:19:
eb:ca:fe:9e:60:ba:c8:0f:28:c0:7a:76:8f:ad:0c:
76:5a:00:15:0f:71:47:60:57:1a:46:7d:1b:e8:d0:
4f:1b:cf:a1:29:c8:8b:35:7b:af:88:f4:95:30:50:
3e:a7:2f:e5:e7:17:67:e5:86:5c:67:00:06:45:08:
38:9d:88:d4:44:1c:ef:ba:c1:98:94:6f:7a:cd:6c:
a9:1c:9e:6f:ec:f8:82:11:7d:f0:7f:57:73:bd:05:
60:87:36:fc:cc:42:ba:a9:5f:22:3e:94:01:ae:4c:
79:2c:76:7b:90:f0:80:25:2a:b8:92:98:f4:b4:cc:
5c:31:ff:d3:88:ad:07:5e:bb:11:fa:2b:37:88:e5:
95:a3:0d:e5:a1:a2:e7:1f:af:42:46:5a:e6:12:17:
60:52:6a:06:f8:7e:9a:22:45:32:a1:f2:ab:d1:80:
6d:91:fc:b5:4c:c0:bd:ab:1e:24:ec:fd:02:60:86:
c9:07:55:b0:f7:e1:57:a3:e0:b0:f6:6a:5e:75:cc:
3b:f1:04:81:9c:f7:04:4f:6d:6d:2a:2e:89:c7:f2:
68:43:b2:88:66:e5:b0:35:69:ba:fd:d5:f4:77:3c:
2e:0c:b2:6f:71:76:94:36:81:3a:35:5b:bb:76:b8:
4f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:5B:93:5D:41:37:F9:3C:9F:FC:59:24:14:C3:E0:AE:46:2D:84:CA
X509v3 Authority Key Identifier:
keyid:B1:24:1F:12:9D:BF:C4:A1:65:1F:EC:DB:A0:31:08:FC:D2:CC:1D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/41uTXUE3-Tyf_FkkFMPgrkYthMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.189.232.0/21
92.118.140.0-92.118.142.255
194.79.4.0/22
195.211.64.0/22
IPv6:
2a09:ad40::/29
Signature Algorithm: sha256WithRSAEncryption
5b:87:3f:bd:a7:ec:1c:f4:4a:e7:88:36:c9:62:ae:42:ec:d1:
33:8d:0a:8a:af:77:bc:86:68:88:47:f8:36:5d:c0:97:35:d5:
36:49:b1:c6:86:b0:8a:0c:30:50:b2:bb:71:a4:28:bf:6c:9d:
95:22:f9:52:f9:1d:a9:98:e1:e2:89:32:ab:0e:9f:6a:e6:eb:
fd:72:c3:c5:6c:58:df:df:54:1c:60:69:1c:e6:8d:78:f9:79:
eb:d9:64:cf:19:e6:7a:b3:db:01:8a:1e:14:2b:9a:48:26:d9:
bd:bb:ae:f4:5d:f8:1b:8b:3a:1b:e8:d1:40:43:01:af:75:a9:
ed:cb:48:90:cc:1d:58:e5:1c:0c:a0:54:71:f9:ac:87:fc:8e:
4b:8a:be:a4:7b:1e:30:78:eb:b3:b8:62:5a:3e:0f:29:9b:c0:
b6:ec:52:a9:32:00:6b:8e:f1:0c:09:79:ec:78:0a:bd:a6:b5:
0f:75:66:47:bc:34:53:b7:00:4a:37:04:5f:d8:61:c5:59:8a:
1c:5d:cc:cf:0a:e1:11:13:c4:3d:2f:fa:8f:29:e6:39:ae:6d:
48:be:d5:5d:06:39:3a:95:f6:6d:6f:d8:2c:83:f7:50:f2:67:
dc:b4:25:b9:f0:25:01:ac:db:74:a9:27:04:a8:8f:dd:ba:79:
96:ac:eb:75
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgISAZ1whQn7fQJrCmCgh31em/TjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMjQxZjEyOWRiZmM0YTE2NTFmZWNkYmEwMzEwOGZjZDJj
YzFkZjIwHhcNMjYwNDA5MDQzNDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzViOTM1ZDQxMzdmOTNjOWZmYzU5MjQxNGMzZTBhZTQ2MmQ4NGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0madP2QSwNnXR3Djxnryv6eYLrI
DyjAenaPrQx2WgAVD3FHYFcaRn0b6NBPG8+hKciLNXuviPSVMFA+py/l5xdn5YZc
ZwAGRQg4nYjURBzvusGYlG96zWypHJ5v7PiCEX3wf1dzvQVghzb8zEK6qV8iPpQB
rkx5LHZ7kPCAJSq4kpj0tMxcMf/TiK0HXrsR+is3iOWVow3loaLnH69CRlrmEhdg
UmoG+H6aIkUyofKr0YBtkfy1TMC9qx4k7P0CYIbJB1Ww9+FXo+Cw9mpedcw78QSB
nPcET21tKi6Jx/JoQ7KIZuWwNWm6/dX0dzwuDLJvcXaUNoE6NVu7drhPzQIDAQAB
o4ICMjCCAi4wHQYDVR0OBBYEFONbk11BN/k8n/xZJBTD4K5GLYTKMB8GA1UdIwQY
MBaAFLEkHxKdv8ShZR/s26AxCPzSzB3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1NRZkVwMl94S0ZsSC16Ym9ERUlfTkxNSGZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9iMWE3NWQtYjc5MS00MGI0LWJkYTct
ZTlkZGJlM2VmYmUzLzEvNDF1VFhVRTMtVHlmX0Zra0ZNUGdya1l0aE1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9iMWE3NWQtYjc5MS00MGI0LWJkYTctZTlkZGJlM2VmYmUz
LzEvc1NRZkVwMl94S0ZsSC16Ym9ERUlfTkxNSGZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgAwQDW73oMAwD
BAJcdowDBABcdo4DBALCTwQDBALD00AwDQQCAAIwBwMFAyoJrUAwDQYJKoZIhvcN
AQELBQADggEBAFuHP72n7Bz0SueINslirkLs0TONCoqvd7yGaIhH+DZdwJc11TZJ
scaGsIoMMFCyu3GkKL9snZUi+VL5HamY4eKJMqsOn2rm6/1yw8VsWN/fVBxgaRzm
jXj5eevZZM8Z5nqz2wGKHhQrmkgm2b27rvRd+BuLOhvo0UBDAa91qe3LSJDMHVjl
HAygVHH5rIf8jkuKvqR7HjB467O4Ylo+DymbwLbsUqkyAGuO8QwJeex4Cr2mtQ91
Zke8NFO3AEo3BF/YYcVZihxdzM8K4RETxD0v+o8p5jmubUi+1V0GOTqV9m1v2CyD
91DyZ9y0JbnwJQGs23SpJwSoj926eZas63U=
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:03:08 2026 by rpki-client