Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/S8WgnNE_dcPrbtLzV9RTm7of2Oo.roa
File: S8WgnNE_dcPrbtLzV9RTm7of2Oo.roa (raw, json)
Hash identifier: 9HK2Ed4Pi+Ot9YyJ6chVCwuWYu3IUtMSwr7F8+C6+fs=
Subject key identifier: 4B:C5:A0:9C:D1:3F:75:C3:EB:6E:D2:F3:57:D4:53:9B:BA:1F:D8:EA
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A0EC7BE4D27014FB5F6850570A635E9F01
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/S8WgnNE_dcPrbtLzV9RTm7of2Oo.roa
Signing time: Tue 29 Sep 2026 09:25:37 +0000
ROA not before: Tue 29 Sep 2026 09:25:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216078
IP address blocks: 91.201.87.0/24 maxlen: 24
193.178.226.0/24 maxlen: 24
193.200.78.0/24 maxlen: 24
2a0f:9b40::/29 maxlen: 29
2a13:bb40::/29 maxlen: 29
2a14:1100::/29 maxlen: 29
2a14:6a40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 14:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:7b:e4:d2:70:14:fb:5f:68:50:57:0a:63:5e:9f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Sep 29 09:25:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4bc5a09cd13f75c3eb6ed2f357d4539bba1fd8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:49:90:2d:5f:89:9e:3d:d2:79:b6:66:4c:78:
b7:bc:25:95:ef:b6:b0:46:d5:85:8a:46:9b:3b:c8:
d3:82:91:e2:64:60:7e:60:80:5d:c7:ca:ea:2f:3c:
21:8b:4b:c5:44:66:6e:0a:a5:f2:80:c2:fe:fa:72:
fa:43:5f:84:1e:8b:a0:31:ba:56:e0:21:5b:21:16:
f7:d1:d4:e8:9a:db:a0:b5:69:a0:33:3d:54:d8:2a:
25:29:cd:73:fd:64:5f:f8:6a:14:4b:f2:45:5b:00:
c1:97:5c:c9:b7:89:bb:c0:d8:fc:ea:6a:e9:2a:c6:
99:6b:63:61:2c:1a:e6:fc:d4:6c:82:0b:f7:a2:d4:
5a:bd:55:12:07:9e:bd:92:07:c8:9a:94:72:f6:51:
4f:09:71:57:54:ac:09:5c:34:af:74:8a:14:6c:23:
50:14:cf:b1:a4:77:fa:ad:85:06:e7:ef:d9:bf:99:
d1:41:df:81:81:29:39:33:e5:aa:a8:81:0b:09:bc:
f5:59:d4:9f:1b:54:46:91:58:fd:9a:5b:89:18:21:
61:24:f2:6e:23:f2:ed:16:34:7c:a3:be:0c:a1:79:
31:70:14:51:97:c0:c5:02:77:60:44:09:43:0a:e7:
de:b5:b1:f0:d0:f5:b1:95:ed:d6:c7:f8:e0:6b:83:
ec:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C5:A0:9C:D1:3F:75:C3:EB:6E:D2:F3:57:D4:53:9B:BA:1F:D8:EA
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/S8WgnNE_dcPrbtLzV9RTm7of2Oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.87.0/24
193.178.226.0/24
193.200.78.0/24
IPv6:
2a0f:9b40::/29
2a13:bb40::/29
2a14:1100::/29
2a14:6a40::/29
Signature Algorithm: sha256WithRSAEncryption
a6:60:95:ef:52:e3:36:03:5d:b3:e9:df:74:45:ea:9b:59:da:
a4:fc:0c:cf:97:55:54:5f:8c:6a:df:17:7b:81:98:6b:86:20:
8c:c3:62:16:2d:6b:c1:68:6b:c9:2c:5e:97:43:21:10:e7:4e:
dc:48:1d:6a:69:0e:e5:29:a6:32:05:95:ef:d9:f1:36:36:b7:
f6:c9:be:87:55:b9:b2:68:c8:f1:18:3f:61:56:1c:3c:b8:d3:
8a:ec:f8:46:66:3e:41:9a:3e:dd:02:be:1f:e1:38:1b:06:7d:
26:6e:c0:71:a6:f7:1e:ce:bf:3a:35:1e:d7:bb:c0:ae:2f:5c:
28:5b:b7:41:4b:10:a2:2b:36:be:d3:bc:df:14:47:25:19:9b:
3e:92:1b:b6:15:50:0d:03:e4:7b:43:bf:c0:f6:c1:52:d7:d9:
b5:54:ec:4e:99:14:4e:ff:44:15:f1:0f:f0:44:cc:1a:f3:99:
39:eb:ef:ac:12:23:f3:41:50:d0:46:68:e0:be:dc:54:30:61:
e0:5a:5b:c8:04:ff:ce:9f:ae:a8:ab:07:70:00:ff:97:3b:9b:
71:12:d2:e9:17:64:26:eb:37:9e:b8:bc:ca:85:06:3e:18:2b:
01:46:3c:6e:01:01:4b:a6:2d:63:5e:af:1c:3f:ba:6b:79:fd:
cc:ab:02:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 19:39:06 2026 by rpki-client