Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/1-zgZS_oWFjeb_FUaP5rf7CIay9s.roa
File: 1-zgZS_oWFjeb_FUaP5rf7CIay9s.roa (raw, json)
Hash identifier: oe0GxzRMGYrpk5fK7HR9K3weYFmW/xstDWDPAgUmAy8=
Subject key identifier: FB:38:19:4B:FA:16:16:37:9B:FC:55:1A:3F:9A:DF:EC:22:1A:CB:DB
Certificate issuer: /CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Certificate serial: 019D864A1B20DD225EC05B7D3DED41A58AB9
Authority key identifier: 8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/1-zgZS_oWFjeb_FUaP5rf7CIay9s.roa
Signing time: Mon 13 Apr 2026 10:01:36 +0000
ROA not before: Mon 13 Apr 2026 10:01:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19905
IP address blocks: 91.209.254.0/24 maxlen: 24
91.221.58.0/23 maxlen: 23
91.221.58.0/24 maxlen: 24
91.221.59.0/24 maxlen: 24
185.156.84.0/22 maxlen: 22
185.156.84.0/23 maxlen: 23
185.156.84.0/24 maxlen: 24
185.156.85.0/24 maxlen: 24
185.156.86.0/23 maxlen: 23
185.156.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:86:4a:1b:20:dd:22:5e:c0:5b:7d:3d:ed:41:a5:8a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Validity
Not Before: Apr 13 10:01:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb38194bfa1616379bfc551a3f9adfec221acbdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7d:d3:6c:1f:d7:2f:df:27:10:e6:35:05:78:
9c:e1:9f:16:66:d9:b6:68:65:a7:2d:81:fd:78:75:
f4:d4:e6:24:01:12:40:eb:3e:d0:80:6a:31:ea:74:
1d:aa:93:e4:ce:2d:7f:8f:02:3d:62:d1:4d:c1:8b:
65:5d:7a:6b:1a:38:ac:b8:31:4e:ce:a8:8e:73:f0:
2f:16:2a:ee:5c:95:4a:b3:1c:6d:2c:c7:61:19:3b:
ab:73:a6:ea:22:c5:03:dc:d9:ea:28:ce:71:7b:c4:
28:0b:22:4e:3f:dc:52:51:34:b6:c1:d1:75:2d:ce:
a8:96:94:e7:3d:40:7c:ef:b3:2a:16:7b:e0:78:0b:
f5:e5:76:a5:6c:39:08:68:46:d6:5b:a4:fb:fa:25:
9e:cc:9f:83:5b:95:c0:b4:cc:d6:c9:34:8e:f7:4e:
78:06:e3:dc:1a:5a:05:5a:a2:d3:d6:22:f6:76:6c:
b0:a8:45:d6:b7:f7:26:9f:c3:3a:84:11:d5:fa:0b:
fe:60:f5:1b:1a:d2:fd:27:1e:9f:3a:f8:db:7f:92:
a6:2e:d7:ff:24:5d:41:b7:63:e5:ed:c7:72:1c:98:
f9:a7:bc:21:a7:ed:5c:a8:36:f5:d4:e7:5d:4d:86:
f4:a8:f1:46:66:a9:2b:fe:20:cc:c7:5d:1e:e5:dc:
69:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:38:19:4B:FA:16:16:37:9B:FC:55:1A:3F:9A:DF:EC:22:1A:CB:DB
X509v3 Authority Key Identifier:
keyid:8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/1-zgZS_oWFjeb_FUaP5rf7CIay9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.254.0/24
91.221.58.0/23
185.156.84.0/22
Signature Algorithm: sha256WithRSAEncryption
82:70:1e:c1:54:8c:30:a4:08:c0:4d:50:a5:7a:81:e9:46:8c:
1e:6c:f3:02:81:6a:31:ed:19:4b:d3:dc:1d:4a:02:94:8f:4a:
f0:d5:e7:e1:eb:ec:71:a3:04:c1:6e:28:d5:35:ff:8c:e0:0c:
c9:96:de:a1:0f:84:fa:b0:a7:69:83:a2:64:3d:cb:a1:f8:f4:
d0:3c:38:26:9a:a3:c4:6e:94:64:93:ac:e8:a9:a9:2e:4a:1d:
70:8f:17:2e:0e:bf:15:ef:f7:59:26:7e:5c:5f:67:5c:84:1b:
5e:12:ee:54:d1:9d:20:d2:19:80:bc:6b:44:2d:39:ab:cc:21:
d9:c6:17:85:36:3b:6a:a0:6c:9c:45:78:76:06:70:3a:dd:83:
ce:fd:78:30:af:de:4f:c2:44:6a:9c:69:96:69:65:64:10:bd:
d9:74:c1:39:a8:46:ca:b7:42:e2:e8:07:39:9a:2b:6a:a1:da:
6a:ba:7a:34:7f:58:71:1a:e3:47:9e:e0:10:87:89:c2:f4:2f:
76:f2:68:7d:3b:b7:34:41:d1:c2:d1:2b:46:2a:03:e0:8c:20:
c6:20:e4:65:93:db:61:13:e0:fb:d0:d2:2c:4e:9c:29:c8:ec:
25:0b:82:f3:5d:6c:69:74:95:d8:3e:68:ba:62:cc:f0:4e:0a:
e4:84:6c:ee
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:28:47 2026 by rpki-client