Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IA4rd-JfVjULCzzlm9ZBfH-o63E.roa
File: IA4rd-JfVjULCzzlm9ZBfH-o63E.roa (raw, json)
Hash identifier: wi8qI/Z7QAHmjTfIffCt4Faekh0sR66zWSdaYe/iooU=
Subject key identifier: 20:0E:2B:77:E2:5F:56:35:0B:0B:3C:E5:9B:D6:41:7C:7F:A8:EB:71
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019D615C38FDF92C7E60B0C309B56453F807
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IA4rd-JfVjULCzzlm9ZBfH-o63E.roa
Signing time: Mon 06 Apr 2026 05:55:27 +0000
ROA not before: Mon 06 Apr 2026 05:55:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397423
IP address blocks: 91.92.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Apr 2026 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:61:5c:38:fd:f9:2c:7e:60:b0:c3:09:b5:64:53:f8:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 6 05:55:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=200e2b77e25f56350b0b3ce59bd6417c7fa8eb71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ee:3e:d0:1d:50:95:10:ae:55:8d:a0:53:9d:
8e:0a:94:a0:bd:ea:e3:a6:2e:ed:e8:78:0a:68:c8:
3b:8a:ad:c9:b4:0b:f5:27:ac:61:eb:cb:46:5d:fb:
d7:0c:5c:b7:3f:fc:e4:02:61:d8:a7:ca:d6:8d:26:
ee:21:2c:fd:a0:a8:31:a5:df:34:27:54:21:8d:00:
65:64:ca:0c:03:d4:6b:a1:00:32:0a:80:d4:c5:ae:
20:a5:48:09:9f:f8:2d:ff:e3:87:96:9c:b6:2c:26:
d5:af:0a:53:f6:7d:df:6f:90:09:3c:ae:6c:ba:79:
4e:14:22:fd:07:88:40:88:10:b6:59:cf:58:9c:28:
28:90:3e:8f:04:e1:06:d7:b4:2d:c8:76:3b:28:76:
38:df:e0:4b:18:5e:c9:23:0a:91:67:22:72:33:43:
1c:c7:94:91:68:bb:1c:c3:03:06:96:ee:e1:a2:c9:
3b:8e:3a:71:20:f0:25:7f:25:ec:3d:d4:24:e3:b3:
d5:53:49:f7:35:7c:a7:aa:ce:ef:3e:d3:b1:6f:43:
b8:75:78:af:ea:9f:79:d7:6b:66:22:fc:e2:34:e0:
65:88:ea:53:3a:2b:86:a9:1b:f0:2d:bb:ca:58:d9:
b8:e2:8f:fe:d3:09:e5:d5:ba:64:16:0e:28:dd:6c:
b1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0E:2B:77:E2:5F:56:35:0B:0B:3C:E5:9B:D6:41:7C:7F:A8:EB:71
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IA4rd-JfVjULCzzlm9ZBfH-o63E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.195.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:89:64:8b:5f:42:45:af:b0:e0:de:0c:01:8b:19:98:c3:fc:
49:b6:e8:57:32:16:6b:39:c9:05:06:83:d0:c0:4b:ed:c0:ae:
58:1a:98:ee:00:82:70:1f:47:6a:46:4b:be:ab:45:aa:51:2b:
28:c8:e7:73:64:2a:ab:85:93:78:77:cd:51:59:f3:f9:62:43:
ac:e3:81:74:28:0a:ac:e8:c3:61:64:b1:83:60:1f:fb:b6:81:
8a:49:26:0c:9c:74:bd:01:17:f6:13:ac:14:c3:f3:64:d1:53:
b2:c4:4e:3b:df:b9:ce:70:00:44:02:92:63:a0:8b:a3:92:8b:
d9:88:d7:97:75:1d:4c:01:35:e7:eb:07:08:44:ad:49:56:88:
40:ee:80:37:94:73:01:e3:0b:93:92:31:ce:20:d8:69:2d:8a:
e1:c8:09:e1:dc:78:61:13:b6:d7:d7:24:4d:c5:c6:d0:c4:d7:
47:4f:42:c5:97:74:4c:d7:d8:6c:af:50:2b:82:4c:14:97:13:
f4:5d:cf:37:e0:d2:06:d1:1d:5f:3b:2b:29:35:a2:4a:cd:d6:
61:d4:fd:01:11:fb:07:50:bc:54:f6:49:b6:10:ed:8c:58:bd:
a5:b0:6f:1c:b9:02:1e:23:13:6b:2b:b9:b8:a7:4a:a0:33:af:
94:cb:b8:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ1hXDj9+Sx+YLDDCbVkU/gHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYwNDA2MDU1NTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDBlMmI3N2UyNWY1NjM1MGIwYjNjZTU5YmQ2NDE3YzdmYThlYjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2O4+0B1QlRCuVY2gU52OCpSgverj
pi7t6HgKaMg7iq3JtAv1J6xh68tGXfvXDFy3P/zkAmHYp8rWjSbuISz9oKgxpd80
J1QhjQBlZMoMA9RroQAyCoDUxa4gpUgJn/gt/+OHlpy2LCbVrwpT9n3fb5AJPK5s
unlOFCL9B4hAiBC2Wc9YnCgokD6PBOEG17QtyHY7KHY43+BLGF7JIwqRZyJyM0Mc
x5SRaLscwwMGlu7hosk7jjpxIPAlfyXsPdQk47PVU0n3NXynqs7vPtOxb0O4dXiv
6p9512tmIvziNOBliOpTOiuGqRvwLbvKWNm44o/+0wnl1bpkFg4o3Wyx5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCAOK3fiX1Y1Cws85ZvWQXx/qOtxMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvSUE0cmQtSmZWalVMQ3p6bG05WkJmSC1vNjNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW1zDMA0G
CSqGSIb3DQEBCwUAA4IBAQBeiWSLX0JFr7Dg3gwBixmYw/xJtuhXMhZrOckFBoPQ
wEvtwK5YGpjuAIJwH0dqRku+q0WqUSsoyOdzZCqrhZN4d81RWfP5YkOs44F0KAqs
6MNhZLGDYB/7toGKSSYMnHS9ARf2E6wUw/Nk0VOyxE4737nOcABEApJjoIujkovZ
iNeXdR1MATXn6wcIRK1JVohA7oA3lHMB4wuTkjHOINhpLYrhyAnh3HhhE7bX1yRN
xcbQxNdHT0LFl3RM19hsr1ArgkwUlxP0Xc834NIG0R1fOyspNaJKzdZh1P0BEfsH
ULxU9km2EO2MWL2lsG8cuQIeIxNrK7m4p0qgM6+Uy7iY
-----END CERTIFICATE-----
Generated at Mon Apr 6 17:17:21 2026 by rpki-client