Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/35g8C0Bqx69WCLMEI0d4eZzXow8.roa
File: 35g8C0Bqx69WCLMEI0d4eZzXow8.roa (raw, json)
Hash identifier: aKHlWChv0cCXRM+u3C5OOeU1egqlZV55eA/cfuE3sp4=
Subject key identifier: DF:98:3C:0B:40:6A:C7:AF:56:08:B3:04:23:47:78:79:9C:D7:A3:0F
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 019C713AEDB2F73C4015812083E7FC043D55
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/35g8C0Bqx69WCLMEI0d4eZzXow8.roa
Signing time: Wed 18 Feb 2026 14:50:13 +0000
ROA not before: Wed 18 Feb 2026 14:50:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215590
IP address blocks: 91.108.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:71:3a:ed:b2:f7:3c:40:15:81:20:83:e7:fc:04:3d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Feb 18 14:50:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df983c0b406ac7af5608b304234778799cd7a30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c6:e4:c8:02:54:8d:cb:52:83:53:ec:a1:e2:
df:77:46:71:c2:c7:8f:1c:48:97:dc:eb:34:e1:b2:
27:11:6d:22:6c:6d:4a:0d:0d:5a:93:12:27:c3:8e:
31:a7:70:10:78:61:08:ad:9e:db:e8:4b:7b:b2:87:
df:4a:70:a1:40:f8:a1:e1:f9:15:86:c2:b0:94:2e:
99:ad:bf:28:66:56:2c:bc:e0:37:13:d0:b2:2a:19:
8f:8e:5b:dd:bb:d1:91:e5:82:5e:94:38:b5:5f:62:
7a:11:c8:b8:50:da:dc:90:09:0a:c8:c8:fb:39:ac:
6d:6c:d5:cb:42:2b:49:8b:0f:75:bc:b5:c9:32:6e:
a6:b7:94:3d:ce:22:4c:de:20:3b:66:a4:47:1a:ad:
d9:0f:ff:94:79:c0:ed:ab:db:51:72:d1:15:05:6a:
4b:c9:b5:68:ef:7e:c4:5d:02:9b:eb:3d:75:3a:d7:
5b:6e:1e:08:e0:e0:a9:17:9d:8b:34:99:85:b7:dd:
c7:a0:bb:e2:16:47:a4:b6:9e:db:98:0e:db:87:69:
32:e2:97:a2:be:37:6c:b3:d4:f0:61:09:d7:63:8a:
7b:f4:c8:8c:3e:52:9f:53:7c:c8:88:93:ac:7a:78:
1c:d9:9e:c0:64:3e:29:69:f4:32:8f:26:6e:87:ed:
6d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:98:3C:0B:40:6A:C7:AF:56:08:B3:04:23:47:78:79:9C:D7:A3:0F
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/35g8C0Bqx69WCLMEI0d4eZzXow8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.226.0/24
Signature Algorithm: sha256WithRSAEncryption
20:cd:bd:c9:86:c5:a3:ed:0e:b1:c4:56:6a:fd:62:41:d0:21:
5a:6a:33:c8:35:f5:fe:6f:96:a5:a3:05:66:df:1f:fa:68:a9:
18:79:a7:58:a0:bc:10:a6:3b:01:6b:e5:bd:7a:93:e0:94:32:
80:37:e1:c7:f4:53:7f:e8:66:90:4c:67:9c:5a:16:b2:8f:35:
f9:b6:ce:61:01:02:60:fc:fc:4f:42:ec:46:35:2c:48:30:df:
13:15:c4:39:a7:4a:c0:e8:24:e5:3d:77:ef:e2:58:7a:06:a6:
ed:c5:39:fc:4e:59:51:0a:02:f8:e3:47:d9:c5:f9:a2:f2:5e:
19:4b:75:07:da:60:40:98:97:01:4f:b9:67:46:4a:47:15:94:
7b:10:4e:6d:31:fc:63:76:ed:d0:0c:b4:fd:b1:cd:cf:60:b6:
25:0a:c8:0e:1a:ce:22:5c:e1:6b:0a:8f:b3:19:d7:e2:f8:b4:
a4:8d:44:cd:83:25:6f:81:91:9b:5f:db:f8:80:34:b0:67:35:
2b:7e:4e:ce:f9:6c:25:db:70:73:5e:ee:6d:bc:95:cc:53:fd:
7a:ae:57:91:8a:dd:54:db:ff:1e:15:a5:a8:33:ae:28:28:4b:
e6:8d:80:3d:c1:c1:27:d1:96:2b:e9:38:49:51:f6:83:51:71:
ee:aa:cd:27
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZxxOu2y9zxAFYEgg+f8BD1VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZWU0NTQyNmUxMmU1MGZlMzBlOGZmYzM5ZTA0NDg1ZDhm
NzMzMzkwHhcNMjYwMjE4MTQ1MDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjk4M2MwYjQwNmFjN2FmNTYwOGIzMDQyMzQ3Nzg3OTljZDdhMzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsbkyAJUjctSg1PsoeLfd0ZxwseP
HEiX3Os04bInEW0ibG1KDQ1akxInw44xp3AQeGEIrZ7b6Et7soffSnChQPih4fkV
hsKwlC6Zrb8oZlYsvOA3E9CyKhmPjlvdu9GR5YJelDi1X2J6Eci4UNrckAkKyMj7
OaxtbNXLQitJiw91vLXJMm6mt5Q9ziJM3iA7ZqRHGq3ZD/+UecDtq9tRctEVBWpL
ybVo737EXQKb6z11Otdbbh4I4OCpF52LNJmFt93HoLviFkektp7bmA7bh2ky4pei
vjdss9TwYQnXY4p79MiMPlKfU3zIiJOsengc2Z7AZD4pafQyjyZuh+1tXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN+YPAtAasevVgizBCNHeHmc16MPMB8GA1UdIwQY
MBaAFMLuRUJuEuUP4w6P/DngRIXY9zM5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUt
ZGE3NTQzMGIxNmY2LzEvMzVnOEMwQnF4NjlXQ0xNRUkwZDRlWnpYb3c4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUtZGE3NTQzMGIxNmY2
LzEvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW2ziMA0G
CSqGSIb3DQEBCwUAA4IBAQAgzb3JhsWj7Q6xxFZq/WJB0CFaajPINfX+b5alowVm
3x/6aKkYeadYoLwQpjsBa+W9epPglDKAN+HH9FN/6GaQTGecWhayjzX5ts5hAQJg
/PxPQuxGNSxIMN8TFcQ5p0rA6CTlPXfv4lh6BqbtxTn8TllRCgL440fZxfmi8l4Z
S3UH2mBAmJcBT7lnRkpHFZR7EE5tMfxjdu3QDLT9sc3PYLYlCsgOGs4iXOFrCo+z
Gdfi+LSkjUTNgyVvgZGbX9v4gDSwZzUrfk7O+Wwl23BzXu5tvJXMU/16rleRit1U
2/8eFaWoM64oKEvmjYA9wcEn0ZYr6ThJUfaDUXHuqs0n
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:04:05 2026 by rpki-client