Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/Td6Q3B8QYWs6GUR_gp32a6eWHug.roa
File: Td6Q3B8QYWs6GUR_gp32a6eWHug.roa (raw, json)
Hash identifier: zBRaP9ZgkbMX6gd0XGzpaqMKhyZdrQKl0S84ZR9K3+0=
Subject key identifier: 4D:DE:90:DC:1F:10:61:6B:3A:19:44:7F:82:9D:F6:6B:A7:96:1E:E8
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 019D9AF3C6E04187D73F3F9B435AA4D7D006
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/Td6Q3B8QYWs6GUR_gp32a6eWHug.roa
Signing time: Fri 17 Apr 2026 10:19:20 +0000
ROA not before: Fri 17 Apr 2026 10:19:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 91.108.248.0/24 maxlen: 24
91.108.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:f3:c6:e0:41:87:d7:3f:3f:9b:43:5a:a4:d7:d0:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Apr 17 10:19:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4dde90dc1f10616b3a19447f829df66ba7961ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:02:3e:8f:1e:4f:4e:03:1b:14:4d:ea:31:33:
c9:92:2c:1a:9a:57:d7:15:13:05:a4:4c:57:1a:b4:
96:34:cc:c3:c2:1f:c6:6d:f3:36:87:53:0f:58:6e:
07:2e:10:29:10:df:72:86:4d:8b:41:7f:7f:ae:f7:
87:a9:5d:05:21:ed:53:ad:af:a7:d7:01:3c:bc:21:
4a:e0:e1:7f:78:cb:bc:fe:e3:a1:4e:e5:b0:8b:91:
c0:48:e3:20:09:1f:02:c7:c4:91:12:d2:6a:06:f0:
2b:7d:54:d5:2e:e2:d9:89:98:fb:8b:69:cb:84:ab:
87:0b:02:6e:16:f2:6d:7e:ff:01:52:69:f2:23:6f:
29:f6:9e:db:16:23:b4:2c:ff:53:8a:87:65:43:89:
0d:d5:7f:56:a4:2b:52:22:8a:40:7c:c1:07:4d:7e:
a1:28:85:76:6c:3c:9f:19:e2:84:63:58:df:97:4e:
e9:b0:cf:ab:e9:71:3d:35:4b:d9:2e:1a:9b:97:fa:
0e:22:a1:13:2e:81:0a:39:58:5e:6a:ef:1b:3d:e0:
bc:c1:1c:5c:89:8f:39:fc:d2:78:90:fc:c5:30:6d:
30:80:6c:bb:e1:0b:67:ee:0a:a7:e2:e2:2d:f0:29:
d2:7f:6a:cf:40:30:b7:ea:14:33:d3:2c:db:b3:1c:
06:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:DE:90:DC:1F:10:61:6B:3A:19:44:7F:82:9D:F6:6B:A7:96:1E:E8
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/Td6Q3B8QYWs6GUR_gp32a6eWHug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.248.0/24
91.108.254.0/24
Signature Algorithm: sha256WithRSAEncryption
71:59:a6:fe:79:63:b3:a8:63:71:ea:9e:7e:61:8d:96:5a:94:
82:bf:57:77:72:d5:34:9e:64:36:38:a8:a5:f9:39:d3:d4:48:
81:b4:37:f0:65:62:46:cc:07:af:5f:8b:09:d9:25:2e:46:43:
4b:52:e8:d1:d5:dc:5f:b8:4f:c0:9b:58:f8:89:13:c1:a4:79:
6d:b5:70:b9:4d:b0:55:5b:88:8e:9d:36:e7:44:d3:f1:c6:9c:
df:c7:75:e5:84:f7:dc:bb:4c:cb:b4:93:e4:69:23:58:79:7a:
a8:fd:f2:00:27:2a:50:e1:07:1f:b0:29:c3:eb:39:61:44:04:
49:70:4f:5c:2c:ed:bd:2f:52:60:cc:d2:b0:3b:22:dd:ec:d2:
aa:c9:56:4d:ba:f2:d4:02:31:c3:8e:9b:71:69:d8:63:81:9c:
92:0b:93:98:37:2a:61:64:7c:9c:ea:55:22:90:3e:fd:f2:71:
ee:ba:69:5d:df:65:90:71:5b:2b:6a:14:8c:c4:cc:ca:15:16:
35:f9:32:8b:d5:11:b4:d9:3f:e6:67:a2:04:bb:06:02:45:24:
11:e9:5d:86:db:63:8b:fb:e2:ce:23:bc:0f:ed:ae:9a:04:a8:
cf:1e:cf:5b:b1:e5:58:50:34:98:23:cf:5f:ec:6d:90:87:b9:
9e:ea:37:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:07:51 2026 by rpki-client