Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RD1YNAqGRS0W8Sckp-Y-UIEzQ3M.roa
File: RD1YNAqGRS0W8Sckp-Y-UIEzQ3M.roa (raw, json)
Hash identifier: KYwfzc1NQTOC2aMy2UoUOJjebYJrXIetGTWweyrd8S0=
Subject key identifier: 44:3D:58:34:0A:86:45:2D:16:F1:27:24:A7:E6:3E:50:81:33:43:73
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019DD8EC7C5CAFAFD4D3C118EC8560865AE0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RD1YNAqGRS0W8Sckp-Y-UIEzQ3M.roa
Signing time: Wed 29 Apr 2026 11:07:50 +0000
ROA not before: Wed 29 Apr 2026 11:07:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44828
IP address blocks: 87.121.133.0/24 maxlen: 24
94.154.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 07:39:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d8:ec:7c:5c:af:af:d4:d3:c1:18:ec:85:60:86:5a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 29 11:07:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=443d58340a86452d16f12724a7e63e5081334373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a1:91:24:dd:df:00:84:e1:74:12:4c:e4:58:
79:28:26:7c:2a:de:09:f6:4a:84:4e:90:38:56:e5:
ff:9e:b0:41:57:27:a4:1c:25:04:c2:23:f9:77:05:
bf:0a:1a:3f:d1:54:a9:da:ee:6b:50:b8:88:b3:11:
12:57:5f:4e:d8:5e:2d:11:63:73:44:03:ac:8e:89:
64:06:bd:23:97:a0:ae:7d:de:d6:12:3e:08:3d:5b:
06:7c:06:f1:9b:22:58:50:be:7f:b8:17:b7:0a:2a:
4c:74:3f:93:cd:96:91:f2:76:db:6f:27:f2:ff:31:
2a:22:84:2f:27:ca:19:d6:5e:dc:27:6f:4d:25:2f:
77:c6:7f:22:11:4e:0d:27:0c:59:64:4a:01:ec:3f:
bc:88:1d:cc:4a:27:24:92:be:0b:5a:75:5c:71:5a:
ea:d0:35:b2:3e:44:ec:4a:68:84:f7:a0:55:0d:8c:
f1:f3:cf:86:59:31:e6:33:32:f3:e1:91:76:f5:0c:
7d:e5:93:92:50:a8:4a:cd:d6:6d:80:ee:37:46:ff:
f1:0a:f4:e5:7c:a7:04:0c:0d:58:90:21:85:58:16:
93:89:f7:7b:9a:0f:e3:45:57:52:0b:ac:02:3b:df:
27:92:c3:fa:39:b9:9b:98:bc:91:70:75:6a:f5:e9:
b9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3D:58:34:0A:86:45:2D:16:F1:27:24:A7:E6:3E:50:81:33:43:73
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RD1YNAqGRS0W8Sckp-Y-UIEzQ3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.133.0/24
94.154.161.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:b9:e0:8b:1f:3d:d5:c1:a3:ee:30:49:e0:53:18:80:a6:76:
6b:39:c5:da:e0:66:26:f9:9a:97:88:89:95:3a:34:55:91:ee:
d3:50:aa:ca:54:a7:b2:07:d3:04:c6:19:02:99:cc:00:df:06:
b0:47:fc:29:58:c3:a0:48:06:87:f4:54:6e:df:49:06:b2:be:
5b:91:29:dc:6d:c9:11:ce:42:3e:72:04:a4:7b:a2:8a:cd:0a:
fd:61:60:b8:1b:0f:b6:45:77:60:54:e5:e4:b4:72:fe:0b:24:
82:c6:b0:b5:ae:86:d3:62:c7:ca:f5:ee:16:a3:9e:c4:c4:a9:
89:11:91:a4:38:09:25:8b:8e:0c:7d:42:07:f5:2a:f2:f0:a4:
08:2d:f8:67:e7:dd:87:dc:a7:28:a7:13:01:81:32:68:ba:aa:
2d:89:01:fc:c5:8d:47:f9:26:1f:b6:8b:97:c0:9b:0e:f7:32:
01:28:e0:93:3b:5c:2a:1b:85:1f:21:45:fb:ba:be:32:90:37:
d9:d6:5b:c6:5d:de:3c:6f:e7:2e:b4:a7:9f:68:03:24:3b:70:
81:80:18:12:3f:c1:8d:59:95:70:fa:d0:07:68:54:b3:a5:97:
66:08:37:a6:4f:94:96:79:cd:4b:d5:de:b7:9d:19:2c:9d:54:
77:69:db:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 14:32:31 2026 by rpki-client