Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/U3bWZJPmXb5HC8ZBynCGcpMnDxc.roa
File: U3bWZJPmXb5HC8ZBynCGcpMnDxc.roa (raw, json)
Hash identifier: jGsPJwud8N9jK9xqGdhKBeXPPSmHNeM014ngs+T2aRY=
Subject key identifier: 53:76:D6:64:93:E6:5D:BE:47:0B:C6:41:CA:70:86:72:93:27:0F:17
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01A0662E39BA9013B6B49D600787D8FCC68A
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/U3bWZJPmXb5HC8ZBynCGcpMnDxc.roa
Signing time: Thu 03 Sep 2026 07:31:40 +0000
ROA not before: Thu 03 Sep 2026 07:31:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 91.210.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 07:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:2e:39:ba:90:13:b6:b4:9d:60:07:87:d8:fc:c6:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Sep 3 07:31:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5376d66493e65dbe470bc641ca70867293270f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:60:a2:12:5a:f6:5d:90:96:68:86:27:40:37:
ba:83:e1:8c:86:fb:b7:d6:45:e3:8c:8f:ce:d1:7a:
61:39:5f:43:ba:5f:27:32:ef:1d:f8:e5:a9:20:cf:
79:1c:b3:cd:e6:7a:06:0f:ac:70:0f:60:12:8b:56:
12:08:c3:d0:df:79:25:5c:80:b0:dd:92:a7:6e:42:
87:c2:50:b1:8c:d1:b7:4d:42:ee:a1:3f:52:a7:96:
7e:85:6d:b7:93:b7:fe:a4:ae:48:97:f4:fa:69:91:
dd:ca:e1:54:b7:38:ed:f2:04:08:b8:74:a9:8b:09:
f2:94:96:51:20:15:b1:3e:66:23:79:8d:0d:7a:4d:
1e:bd:59:b0:22:b3:81:a2:a5:93:3a:06:28:0e:ac:
62:70:ff:d9:d3:a6:74:ca:59:be:bb:f9:95:22:ec:
9e:c6:d6:0a:7e:2c:3f:7c:b1:f8:d9:91:a2:e3:7a:
c7:b8:8d:0c:f2:d8:e4:7a:ab:5a:13:ad:85:6a:f1:
ce:3e:6a:5f:0c:cc:7b:d3:05:72:da:e2:ea:e9:b3:
b0:77:6c:6f:76:84:1d:3b:1f:75:8e:bc:00:22:5d:
48:6e:db:1e:b9:09:58:37:18:23:d0:ac:69:4d:c5:
ff:8d:fd:a3:28:75:8f:a1:48:35:f7:12:33:ee:db:
a4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:76:D6:64:93:E6:5D:BE:47:0B:C6:41:CA:70:86:72:93:27:0F:17
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/U3bWZJPmXb5HC8ZBynCGcpMnDxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.146.0/24
Signature Algorithm: sha256WithRSAEncryption
23:37:1c:95:85:11:13:0f:7a:8a:5f:1a:cc:06:e4:ea:d2:78:
ae:83:c9:25:2c:0e:e9:e3:5f:d4:19:69:a1:2d:49:c1:1a:af:
db:04:59:16:0e:0d:51:4c:de:b2:28:f2:69:99:0f:a7:6c:06:
c3:df:84:90:39:23:02:1e:1e:c7:89:02:92:f3:8e:0f:6f:5c:
b1:9d:d1:09:da:04:10:81:60:d5:87:30:20:1e:6e:89:86:55:
a8:9c:ce:79:79:47:14:aa:ab:48:44:0b:aa:61:06:cd:be:a2:
2d:af:1d:b2:f6:e5:82:9b:e1:63:d2:1d:10:47:2e:d1:28:b7:
b4:b0:8a:02:ce:54:a8:34:4b:fe:45:55:59:4e:d4:3d:8a:68:
d4:6f:87:f5:d8:fc:53:cc:0c:ff:80:1a:49:b2:8d:85:a0:f1:
02:cd:5c:32:8c:33:0f:68:d5:a6:51:94:59:71:0d:42:9a:5c:
a8:fb:8f:a4:24:98:80:d1:91:45:3f:ec:57:8a:7e:ab:1e:36:
4b:38:60:31:5c:53:1c:d7:5d:41:81:e6:b9:d7:7d:c3:b6:fa:
94:ed:34:3b:6c:6f:c0:57:ef:97:c3:9e:19:a3:e8:c8:26:a0:
81:eb:f4:b2:28:85:b9:75:75:95:3f:54:c5:7a:d2:6f:6d:a0:
ee:50:25:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 15:53:57 2026 by rpki-client