Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IQfQ8F4ZndaNRuMmVjrp2g94VtI.roa
File: IQfQ8F4ZndaNRuMmVjrp2g94VtI.roa (raw, json)
Hash identifier: nHQpBM74kPG/oSq5JHK3ZZqmZ/dWZeAYh84BGliAL9A=
Subject key identifier: 21:07:D0:F0:5E:19:9D:D6:8D:46:E3:26:56:3A:E9:DA:0F:78:56:D2
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A0AE6633800744F92D0A3557B3471200F5
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IQfQ8F4ZndaNRuMmVjrp2g94VtI.roa
Signing time: Thu 17 Sep 2026 08:05:28 +0000
ROA not before: Thu 17 Sep 2026 08:05:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215728
IP address blocks: 45.91.194.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 13:41:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:66:33:80:07:44:f9:2d:0a:35:57:b3:47:12:00:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 17 08:05:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2107d0f05e199dd68d46e326563ae9da0f7856d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a0:a5:23:2e:f0:89:d2:be:22:92:d7:fa:d3:
72:96:d5:2c:d7:a3:f2:31:aa:92:2d:58:b6:98:bb:
c4:c9:dc:c6:89:72:91:68:67:63:40:f4:96:5c:28:
b8:ae:69:a7:98:bd:61:94:23:48:1d:21:b9:01:10:
bb:5a:71:9a:62:a0:01:d5:1a:1c:7f:fe:83:81:cf:
91:e8:cc:4c:3b:ad:2b:52:8a:c2:dc:fd:99:ed:13:
6e:67:7f:36:69:72:42:29:50:26:26:9d:af:80:6a:
00:ba:f8:49:3e:71:4b:80:bf:1f:09:f3:76:64:c7:
51:9a:12:b1:8e:81:64:1f:15:46:06:2f:63:68:41:
bc:38:01:27:a9:89:5b:f8:d9:4c:e2:ad:f1:fa:d8:
11:c0:52:9a:c9:ed:de:0c:a5:22:8a:6b:b9:c2:14:
3f:6c:96:20:d4:b5:b4:14:c8:11:aa:28:07:7b:8e:
b4:2e:49:30:49:da:b3:d3:b4:df:40:eb:51:3e:2c:
0a:01:1d:65:00:35:e9:93:d2:6e:9f:44:99:82:ff:
dc:31:82:b2:4a:1e:e5:d6:aa:5a:2e:1a:5d:54:15:
6d:23:6e:f8:8e:4d:99:79:a3:1d:26:b2:64:d1:f0:
d2:97:7c:d7:aa:cc:08:7a:ed:56:df:db:ed:b9:89:
c5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:07:D0:F0:5E:19:9D:D6:8D:46:E3:26:56:3A:E9:DA:0F:78:56:D2
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IQfQ8F4ZndaNRuMmVjrp2g94VtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.194.0/24
85.31.47.0/24
Signature Algorithm: sha256WithRSAEncryption
67:6c:f5:c8:a4:fb:a5:85:78:e2:36:61:1d:3c:8a:10:ef:07:
91:15:38:cc:2d:30:ab:eb:73:5a:21:28:cb:ad:19:59:3f:d0:
bb:ed:8e:db:52:ae:77:cf:d5:aa:5d:ea:62:36:da:5d:b8:e2:
23:db:92:ac:d6:6e:ac:4b:2f:50:c8:28:9f:8e:a8:af:07:4e:
5b:81:b7:e1:a5:57:0b:f6:8e:1e:32:95:f3:99:97:16:f1:25:
48:68:6e:e0:05:2c:33:62:cb:24:2d:e0:c4:9d:eb:93:dc:6c:
eb:b4:0a:0f:4e:0c:02:87:fb:44:a4:f3:ad:8c:29:36:52:20:
5a:3d:11:5c:e2:1d:75:5e:6e:7f:c8:55:59:19:f7:13:12:01:
82:d3:ee:9e:9a:e7:75:17:1b:24:46:86:fa:98:25:38:a2:2c:
f2:5f:6f:28:3e:0c:d5:b6:35:32:36:6c:dc:a5:a7:69:79:65:
53:32:d1:e9:34:92:f1:4e:e3:82:0d:c9:7f:5a:62:a2:70:0c:
f6:90:04:23:b7:e3:b9:03:be:f7:a9:d4:f0:cf:09:d6:ea:41:
c1:7e:a1:27:12:98:70:b0:7c:c7:98:73:ed:68:f1:4d:d5:ed:
80:78:60:f8:39:e4:00:f8:82:87:40:2a:d9:b1:32:61:25:7b:
9f:9c:d3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 21:31:05 2026 by rpki-client