Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ed4a4c-e565-4604-999f-c5274399458b/1/PiEU5bw5uemnzlSgvSZN2wdnxVM.roa
File: PiEU5bw5uemnzlSgvSZN2wdnxVM.roa (raw, json)
Hash identifier: ESXJVv37LFh+irhkVpNO1UdQQDqDJqxHQaBXkLgisEo=
Subject key identifier: 3E:21:14:E5:BC:39:B9:E9:A7:CE:54:A0:BD:26:4D:DB:07:67:C5:53
Certificate issuer: /CN=d0c3f954885483cf12a9aed05cce60357fa4b4be
Certificate serial: 019D3E84427B3AA17ED10355AF7427073238
Authority key identifier: D0:C3:F9:54:88:54:83:CF:12:A9:AE:D0:5C:CE:60:35:7F:A4:B4:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0MP5VIhUg88Sqa7QXM5gNX-ktL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ed4a4c-e565-4604-999f-c5274399458b/1/PiEU5bw5uemnzlSgvSZN2wdnxVM.roa
Signing time: Mon 30 Mar 2026 11:32:28 +0000
ROA not before: Mon 30 Mar 2026 11:32:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 91.211.196.0/22 maxlen: 24
193.109.152.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/ed4a4c-e565-4604-999f-c5274399458b/1/0MP5VIhUg88Sqa7QXM5gNX-ktL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/ed4a4c-e565-4604-999f-c5274399458b/1/0MP5VIhUg88Sqa7QXM5gNX-ktL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0MP5VIhUg88Sqa7QXM5gNX-ktL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3e:84:42:7b:3a:a1:7e:d1:03:55:af:74:27:07:32:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0c3f954885483cf12a9aed05cce60357fa4b4be
Validity
Not Before: Mar 30 11:32:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e2114e5bc39b9e9a7ce54a0bd264ddb0767c553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:91:9d:a6:d7:14:fd:76:b5:8c:1c:bd:f3:65:
c1:c2:3c:ac:50:fb:8a:90:60:ff:36:c3:88:52:c5:
37:c8:c0:60:4d:34:db:db:55:6c:c4:5d:9d:a0:12:
d9:6d:d7:a5:b1:f4:eb:f4:cd:15:37:84:27:04:bc:
b1:9f:47:df:27:7c:3c:60:33:0a:70:0e:6a:6f:55:
b4:07:10:a7:ca:ab:c7:6f:23:4c:f5:b5:ec:ff:7d:
3c:c5:c3:18:42:cf:06:f4:dc:db:00:48:ed:2b:73:
c5:bc:2a:b8:e3:c4:27:3d:0a:d9:fb:68:c2:46:62:
ae:23:36:b5:d5:80:93:dc:69:b8:ec:c5:fd:9e:ca:
82:7f:1b:73:96:cf:06:26:c0:aa:77:7a:3e:c5:be:
10:92:98:0c:48:f1:e4:df:6f:e1:21:d5:31:78:12:
7c:eb:9d:4b:b1:d6:02:30:4a:aa:e8:e1:ba:38:86:
97:f7:1f:b8:8b:15:06:d1:1b:d9:ee:75:8c:7a:dd:
91:5f:26:94:a2:fc:61:17:68:36:44:ed:35:04:19:
c7:37:87:8e:76:8d:ae:19:c9:eb:68:59:75:22:8d:
bc:03:4b:28:56:fa:1b:2d:ce:5a:4e:30:40:8c:c9:
0a:45:68:2a:e8:9e:56:2e:96:1e:93:ae:45:48:c9:
a0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:21:14:E5:BC:39:B9:E9:A7:CE:54:A0:BD:26:4D:DB:07:67:C5:53
X509v3 Authority Key Identifier:
keyid:D0:C3:F9:54:88:54:83:CF:12:A9:AE:D0:5C:CE:60:35:7F:A4:B4:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0MP5VIhUg88Sqa7QXM5gNX-ktL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ed4a4c-e565-4604-999f-c5274399458b/1/PiEU5bw5uemnzlSgvSZN2wdnxVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ed4a4c-e565-4604-999f-c5274399458b/1/0MP5VIhUg88Sqa7QXM5gNX-ktL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.196.0/22
193.109.152.0/21
Signature Algorithm: sha256WithRSAEncryption
15:5d:ed:dd:08:fb:41:c6:1e:fe:0f:88:21:1e:b2:d7:45:de:
48:d7:00:06:72:97:a3:0c:26:4f:bf:60:2f:db:d6:ca:71:9d:
fa:c6:f6:f1:93:57:30:39:dc:66:f2:c3:03:aa:81:36:64:22:
1b:7d:6c:97:a6:c3:10:2f:45:8e:00:4f:44:d9:4c:57:4c:08:
50:7d:11:39:37:c0:43:fe:b8:69:56:5e:4b:77:81:54:26:ee:
38:4d:09:37:77:02:2e:6b:f3:17:cd:c2:04:ef:59:cb:5d:8a:
0d:7b:c3:34:2d:2c:44:3d:b3:59:59:23:4a:ac:01:1f:b5:7f:
18:5a:df:8b:da:f7:0e:aa:80:40:22:9f:77:f3:ea:95:1e:a3:
69:c7:de:5b:88:6a:f1:08:15:bb:49:fc:a5:1b:34:28:72:e3:
2b:47:38:32:d3:c6:13:15:c4:ea:84:65:61:22:6a:63:89:99:
5b:88:11:3c:e9:cf:93:2c:32:8b:fa:9e:5e:f1:71:5a:15:30:
18:ad:f7:bd:39:de:3a:d7:d2:5a:d5:d7:5f:8f:85:85:4a:ab:
06:e0:bb:45:79:74:ef:ce:15:d9:ba:7f:32:00:6b:0e:16:5f:
0c:b6:13:27:98:36:8b:48:bc:36:e2:81:44:92:51:70:41:30:
56:f4:dd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:16 2026 by rpki-client