Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/Sd-xrg1WYUb3j1aAfLaieUu-SXA.roa
File: Sd-xrg1WYUb3j1aAfLaieUu-SXA.roa (raw, json)
Hash identifier: lupaoGAb9G9jmcyDst4TpR0w8/406hEUWmw4Xwce1tg=
Subject key identifier: 49:DF:B1:AE:0D:56:61:46:F7:8F:56:80:7C:B6:A2:79:4B:BE:49:70
Certificate issuer: /CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Certificate serial: 01A0F6A1454CFFA2DA2FFC55D5D73399A280
Authority key identifier: EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/Sd-xrg1WYUb3j1aAfLaieUu-SXA.roa
Signing time: Thu 01 Oct 2026 08:42:39 +0000
ROA not before: Thu 01 Oct 2026 08:42:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42232
IP address blocks: 91.83.112.0/21 maxlen: 24
213.163.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:a1:45:4c:ff:a2:da:2f:fc:55:d5:d7:33:99:a2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Validity
Not Before: Oct 1 08:42:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49dfb1ae0d566146f78f56807cb6a2794bbe4970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:04:11:dd:1f:3d:bb:f7:ad:6d:a5:39:86:7f:
9d:e7:02:f8:90:6a:f4:1a:ec:c1:3b:5b:0b:ee:2f:
5c:55:1b:f3:d5:5a:6f:60:d7:4b:e7:eb:87:93:72:
8f:08:64:11:5d:ca:78:ab:7f:c1:f1:33:44:27:75:
81:40:b7:db:65:fb:4e:7a:3d:7f:f2:18:33:09:08:
7a:f7:2d:6b:5b:d7:da:5e:49:87:0c:f0:49:6b:5d:
ba:c3:50:02:61:4f:3f:be:98:cd:ae:66:b8:98:2b:
48:6b:05:00:e9:52:87:e8:07:10:98:f7:8d:c1:d8:
6d:d7:63:a7:c2:c0:42:b3:d3:bb:9d:b4:04:4a:8f:
0e:87:45:dc:fe:88:cc:b0:6b:27:04:81:62:34:75:
af:f8:6e:74:91:63:ba:c1:90:9c:5d:76:d1:8b:11:
8f:74:84:3c:35:9c:01:f3:a8:77:b0:3e:c8:29:2a:
d8:1b:d4:7a:be:6e:fd:45:7c:5e:b1:a6:61:4d:68:
21:89:c7:0d:d8:57:1c:70:28:19:24:c9:df:4d:85:
77:2f:74:21:87:f8:7f:d6:d1:30:18:e8:18:92:e9:
0a:ad:3b:80:65:6e:82:e1:89:1c:21:ec:8e:0e:49:
fa:f1:85:2b:d6:8c:ef:19:cc:6f:9d:8c:ae:75:e1:
c0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DF:B1:AE:0D:56:61:46:F7:8F:56:80:7C:B6:A2:79:4B:BE:49:70
X509v3 Authority Key Identifier:
keyid:EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/Sd-xrg1WYUb3j1aAfLaieUu-SXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.83.112.0/21
213.163.9.0/24
Signature Algorithm: sha256WithRSAEncryption
19:6b:6c:b6:45:ca:9d:f1:6a:22:53:0a:78:4f:59:87:8a:d5:
57:0e:fe:3b:0a:12:1a:6e:b0:ea:62:b9:10:36:2f:69:1a:f2:
27:30:02:f4:82:3b:66:c8:17:b0:c0:74:7d:51:0e:7d:34:4b:
94:73:64:8a:81:9a:1f:07:19:0c:fa:45:42:aa:45:00:0a:65:
eb:50:c7:6f:b0:0d:14:04:32:54:b4:96:70:e3:5f:c8:61:b3:
89:53:21:a5:32:8f:a6:ab:be:79:4e:d5:ea:21:98:bf:53:96:
2d:40:8b:97:38:83:e1:37:bd:d7:ee:e7:bd:8f:9d:1a:be:d7:
97:cd:72:dc:bb:1b:de:0b:13:7c:f5:b3:1b:10:e8:53:98:39:
fe:b3:bd:99:20:56:89:ec:12:ce:88:3d:fc:4b:a3:0b:d3:27:
30:47:1a:24:82:97:05:53:5f:47:0e:20:54:f7:83:b9:c5:63:
cf:a1:1b:f5:27:1e:3c:47:33:7d:5d:82:4e:f3:97:cf:67:65:
f8:b4:b8:a1:21:6f:e1:19:fc:24:e5:5a:92:73:65:ba:7f:2a:
61:fd:9a:d3:f1:2a:3b:5e:bd:ac:90:dc:52:df:78:78:1c:51:
67:12:02:95:0a:c6:7b:a9:b1:aa:69:1a:af:22:27:41:7a:e7:
38:d8:68:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 17:39:05 2026 by rpki-client