Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/IdTc_NGiUhPjzbH4h1jDf2p5EP4.roa
File: IdTc_NGiUhPjzbH4h1jDf2p5EP4.roa (raw, json)
Hash identifier: /SnddnhzfdAoVbwS9KSvuBamdPxjn0wKa8xhp2NUfNs=
Subject key identifier: 21:D4:DC:FC:D1:A2:52:13:E3:CD:B1:F8:87:58:C3:7F:6A:79:10:FE
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 019D42AA1BE5D0E7DD7A2530900D945FE0B0
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/IdTc_NGiUhPjzbH4h1jDf2p5EP4.roa
Signing time: Tue 31 Mar 2026 06:52:17 +0000
ROA not before: Tue 31 Mar 2026 06:52:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150293
IP address blocks: 91.108.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:42:aa:1b:e5:d0:e7:dd:7a:25:30:90:0d:94:5f:e0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Mar 31 06:52:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21d4dcfcd1a25213e3cdb1f88758c37f6a7910fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3d:11:bf:4b:4f:83:ac:8a:99:ba:ad:c5:b8:
c7:69:65:70:3f:a5:21:93:4a:13:7e:0a:0a:2a:4f:
65:bc:53:83:7f:7e:14:8c:fc:df:8e:6a:75:c4:eb:
cb:e9:90:33:45:60:f4:e2:40:e8:ca:bc:fe:06:89:
94:91:7b:52:15:4b:e2:ba:f6:77:47:00:88:34:61:
8f:70:d9:4f:cb:64:67:45:e6:72:e0:2b:9e:1c:ab:
93:47:6e:a7:ef:c0:e1:74:17:5c:b5:82:03:3d:53:
b9:b9:24:b4:14:e6:9c:4f:84:03:50:92:de:e8:01:
90:f2:67:31:e9:0a:f0:98:e4:95:4b:99:fe:6b:b8:
09:48:fe:14:e6:c6:0d:da:bd:db:cd:d4:7d:e7:18:
e7:d7:e3:cb:cb:45:62:aa:83:6e:e9:a5:67:d8:44:
9a:35:ab:e2:09:19:de:96:88:3a:9a:37:91:c8:ad:
43:e1:43:99:45:be:3d:eb:0c:b3:e6:5e:9c:ec:f0:
19:e9:11:88:84:39:ce:29:27:31:1e:b5:ab:40:39:
35:61:2f:82:af:d6:ed:fa:67:d9:71:44:99:fd:d0:
22:81:86:51:3b:42:1d:ec:d3:4d:c3:ed:d1:53:09:
44:02:c1:cc:f8:a6:cc:f5:33:21:c9:19:81:3c:a2:
4e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D4:DC:FC:D1:A2:52:13:E3:CD:B1:F8:87:58:C3:7F:6A:79:10:FE
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/IdTc_NGiUhPjzbH4h1jDf2p5EP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.83.0/24
Signature Algorithm: sha256WithRSAEncryption
75:f0:d3:fe:6c:76:73:2b:4f:cd:61:b3:25:52:75:d9:62:8a:
a3:25:8c:1b:36:68:f2:37:89:c1:15:20:6a:c6:ee:11:3b:26:
f1:fc:b3:52:01:47:39:0f:c5:6d:19:7b:60:41:50:e9:5d:65:
0b:ee:d9:b3:ea:1d:08:4a:f3:6e:ee:d3:f4:c3:c1:10:8c:fb:
bc:61:73:b3:fa:f8:f6:bc:aa:62:1b:ae:ae:de:c3:4c:3b:ba:
1a:31:d9:9c:6c:6d:cc:d8:a0:df:72:0d:02:ca:67:8d:00:3a:
67:cf:69:c6:ad:57:29:82:91:bd:7d:5d:d0:3a:35:64:3b:a5:
5c:ad:fb:ff:72:b1:11:8e:49:a5:c0:ff:95:b0:59:28:13:c6:
09:dc:c3:f9:24:e0:8e:85:ea:a6:17:10:5c:90:2a:c7:68:cf:
ac:32:76:d9:64:92:f6:1d:14:cd:9f:bf:c5:23:e8:1f:15:a1:
3b:64:b1:40:d6:7d:fa:3c:3c:ee:c0:21:df:9e:55:dd:94:0e:
f0:00:f1:9c:ab:9d:c2:d6:d1:8f:ff:46:c3:67:9f:9e:a4:97:
03:88:48:d2:d3:46:6e:ab:5b:d1:2b:29:f2:4f:ea:f2:c9:ed:
23:e2:1c:57:32:8b:ca:18:da:7a:37:b9:83:54:a3:97:d2:2d:
7a:98:7d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:37:50 2026 by rpki-client