Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/SHrrbblRGWvBxObcAAyt5RsdJSk.roa
File: SHrrbblRGWvBxObcAAyt5RsdJSk.roa (raw, json)
Hash identifier: apr3LS5MVqfoyW57GATpVVg7ehs52VsSIWU2Qpn5mbk=
Subject key identifier: 48:7A:EB:6D:B9:51:19:6B:C1:C4:E6:DC:00:0C:AD:E5:1B:1D:25:29
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A034C8C55D51F1F173FD2F891DB1895AAD
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/SHrrbblRGWvBxObcAAyt5RsdJSk.roa
Signing time: Mon 24 Aug 2026 17:19:28 +0000
ROA not before: Mon 24 Aug 2026 17:19:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 91.208.108.0/24 maxlen: 24
146.19.21.0/24 maxlen: 24
194.26.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:34:c8:c5:5d:51:f1:f1:73:fd:2f:89:1d:b1:89:5a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Aug 24 17:19:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=487aeb6db951196bc1c4e6dc000cade51b1d2529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7c:55:48:b3:c2:ee:f7:c5:9d:f7:27:e5:ac:
a2:b7:87:ba:8a:f1:85:6d:46:01:8e:3f:d3:6c:ea:
a5:c9:cf:6e:f4:a2:a8:10:55:0f:36:03:2a:5e:10:
c2:0a:23:fe:9c:86:97:3c:c4:30:78:61:b3:07:9d:
b7:7b:58:de:a1:d4:ba:2d:f8:72:07:ec:21:5a:57:
0e:cd:b5:ab:f1:a7:95:d5:95:b8:3e:60:1d:d5:8c:
b7:37:65:2a:43:f2:7c:47:66:5c:ce:ac:8c:89:b3:
78:f9:9b:1e:e8:88:22:39:c7:7d:a4:e3:0e:9b:ef:
6e:0e:e9:ca:6f:32:ce:2c:61:6a:24:b4:59:99:c5:
07:6d:4a:6b:6e:a9:f4:c9:c4:8d:3d:4a:e1:3e:63:
e7:aa:4f:9b:8c:74:54:d3:bc:06:27:38:2f:01:e4:
43:5b:27:75:c7:7a:32:28:18:1c:fe:71:c5:05:f4:
40:0b:d7:d8:81:92:a8:01:23:7a:4b:1b:26:b8:c0:
e8:82:d3:ef:81:53:29:2e:b5:af:19:34:58:ad:0d:
2b:de:02:f8:f2:ad:5b:f4:cc:2f:2d:aa:15:1a:63:
9c:5f:d4:ad:6a:bb:ca:4b:9f:85:88:64:64:75:fb:
32:0e:8e:f5:a3:16:1d:6c:64:49:ae:86:2a:7d:da:
b1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7A:EB:6D:B9:51:19:6B:C1:C4:E6:DC:00:0C:AD:E5:1B:1D:25:29
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/SHrrbblRGWvBxObcAAyt5RsdJSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.108.0/24
146.19.21.0/24
194.26.215.0/24
Signature Algorithm: sha256WithRSAEncryption
03:35:1b:fd:bc:48:44:43:58:ca:f5:3f:ed:f5:f8:92:c0:ef:
e0:8f:c4:c4:b5:2d:75:04:4e:87:c9:bf:8b:6f:30:a5:49:c6:
47:da:b8:ec:1f:3c:f5:54:b8:11:45:a8:d6:01:16:01:35:f7:
e9:2e:35:74:c8:96:2a:00:15:e4:5f:65:b8:1b:c2:8a:b6:82:
30:d4:44:39:c2:1a:5e:d9:0b:5e:96:e3:33:7a:f6:3b:34:19:
b2:72:f1:4e:6d:bd:ed:b8:cf:46:95:aa:75:7b:a5:0b:2d:81:
7a:9f:c9:fb:34:ef:20:c1:d5:92:a9:66:f0:7e:e2:84:c3:9a:
0f:5b:4f:c0:f1:a5:82:b3:01:a4:48:b0:b9:9c:3a:82:14:d1:
8d:ab:70:22:06:60:7b:0a:8d:4e:1e:36:45:d8:29:47:86:59:
01:bf:94:2a:30:b0:99:12:36:39:15:81:4c:ff:a5:e3:ab:42:
a3:84:d2:2b:4f:6c:d7:1d:0d:d6:b5:48:94:7f:d3:98:a2:c2:
29:5f:f2:01:07:b6:e9:43:db:ef:7e:11:fc:1f:3c:d3:d4:b8:
54:dd:59:ce:7b:ee:6e:ad:66:a3:ca:03:0e:46:ae:b7:74:ce:
5d:bc:31:6f:8e:e1:06:82:74:92:32:0d:94:f4:d8:20:1e:97:
c8:4e:b0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 03:52:35 2026 by rpki-client