Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/1T1EmzuploW8Hli3F6VvN89444c.roa
File: 1T1EmzuploW8Hli3F6VvN89444c.roa (raw, json)
Hash identifier: 0xB4j4LlwM3o7BHqfHhrdF1w4xBf3JBcz4TO0vz2AeQ=
Subject key identifier: D5:3D:44:9B:3B:A9:96:85:BC:1E:58:B7:17:A5:6F:37:CF:78:E3:87
Certificate issuer: /CN=2a9100a145dcb7b3795379bb0938fe89aa861924
Certificate serial: 019B7AC7CDD6E54C1C85D264476988A79C67
Authority key identifier: 2A:91:00:A1:45:DC:B7:B3:79:53:79:BB:09:38:FE:89:AA:86:19:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/1T1EmzuploW8Hli3F6VvN89444c.roa
Signing time: Thu 01 Jan 2026 18:17:53 +0000
ROA not before: Thu 01 Jan 2026 18:17:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48143
IP address blocks: 91.207.132.0/23 maxlen: 23
91.218.144.0/22 maxlen: 22
91.218.144.0/23 maxlen: 23
91.218.146.0/23 maxlen: 23
91.218.146.0/24 maxlen: 24
91.218.146.0/25 maxlen: 25
91.218.146.128/25 maxlen: 25
194.213.110.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c7:cd:d6:e5:4c:1c:85:d2:64:47:69:88:a7:9c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a9100a145dcb7b3795379bb0938fe89aa861924
Validity
Not Before: Jan 1 18:17:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d53d449b3ba99685bc1e58b717a56f37cf78e387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:f0:c8:5f:68:74:87:c4:8d:62:4a:da:26:0a:
17:c3:3a:ad:ac:98:af:6d:70:81:15:ac:9a:cb:9d:
cd:92:56:74:e1:ab:d7:0f:f7:c9:91:0e:79:c1:09:
c2:06:bf:d5:df:d4:9e:d2:62:b1:9e:b7:42:2b:6e:
9c:ea:27:c5:a1:3f:cd:c1:6b:f5:6b:a4:35:b9:bd:
22:c6:8e:9e:24:50:bf:f9:e7:5e:2d:d5:39:44:38:
4f:6d:af:68:dc:e3:ba:f0:b3:99:3b:cd:74:da:fb:
54:0c:e9:5f:29:6c:80:6a:66:53:1a:bb:ce:d4:da:
d1:e6:db:e5:e9:19:10:d4:31:5c:04:7a:81:7d:19:
02:22:7c:9c:c1:39:9b:e7:4c:77:3d:15:a8:cf:60:
45:76:6b:33:a7:e1:48:2e:61:b4:38:26:3f:f6:26:
bd:bf:fa:57:6c:19:d6:b1:ff:2b:be:46:82:f4:91:
12:63:29:77:4a:dd:5d:3b:fc:56:87:e4:15:7d:3d:
68:df:00:c4:b1:dd:f7:80:5d:a7:3b:a9:9d:15:57:
ee:9a:8f:82:ee:18:26:6b:ff:c5:f0:a8:91:bb:8f:
ff:3c:98:53:6d:21:d3:2c:90:50:67:1d:bd:2c:da:
c0:67:90:78:75:4f:76:29:7a:4e:7d:0e:cd:a0:6e:
7d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3D:44:9B:3B:A9:96:85:BC:1E:58:B7:17:A5:6F:37:CF:78:E3:87
X509v3 Authority Key Identifier:
keyid:2A:91:00:A1:45:DC:B7:B3:79:53:79:BB:09:38:FE:89:AA:86:19:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/1T1EmzuploW8Hli3F6VvN89444c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.132.0/23
91.218.144.0/22
194.213.110.0/23
Signature Algorithm: sha256WithRSAEncryption
66:bc:61:fa:ca:86:07:22:b9:af:01:a9:1e:48:81:53:25:3b:
b9:4c:d0:01:99:d4:ac:da:04:ac:45:6f:6f:70:e0:98:ac:af:
6d:df:fe:1d:a8:0a:31:9f:8b:c9:88:2f:96:2c:a9:98:aa:4b:
44:69:74:ee:0b:c2:92:33:6b:ac:3e:07:4f:e2:c5:6c:d7:46:
66:4a:c6:f2:61:6b:7c:d8:84:f9:45:28:9d:19:58:dd:70:ac:
6e:62:36:a1:c2:bf:94:81:d7:24:dd:65:f5:9e:ff:6d:d9:e6:
56:7c:fd:d6:2c:33:fe:78:5c:da:07:58:40:4f:d7:2c:91:74:
3a:83:68:af:16:e9:09:62:60:03:f7:72:b6:01:74:0a:7c:c8:
34:08:be:c0:35:7f:82:db:50:1a:3f:45:42:26:62:53:d6:63:
42:a8:7f:49:cc:85:a7:8e:d6:4b:f2:85:ea:0c:b1:ca:03:ad:
e9:bc:0a:1c:25:79:f5:05:78:cb:22:b7:a3:89:96:27:43:05:
5e:d4:29:23:d0:47:6c:b6:c6:d9:b5:9e:d3:b9:2b:76:ca:71:
45:b9:2a:46:19:3f:7a:09:fb:2b:0d:7a:3e:cc:b3:52:83:fc:
10:42:f6:d6:85:e1:cb:ca:f9:00:91:aa:c5:32:80:14:c3:c8:
5a:b5:fc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:52:02 2026 by rpki-client