Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/kEM8AcYx4FQ4Wb2x8ZAoCLy6Z20.roa
File: kEM8AcYx4FQ4Wb2x8ZAoCLy6Z20.roa (raw, json)
Hash identifier: zj/WawNjY0Y19IWnarlasAkbO7yZEHNgZEWyAyJnoYE=
Subject key identifier: 90:43:3C:01:C6:31:E0:54:38:59:BD:B1:F1:90:28:08:BC:BA:67:6D
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A04C19C6C916976FE475C3478920AFE6C0
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/kEM8AcYx4FQ4Wb2x8ZAoCLy6Z20.roa
Signing time: Sat 29 Aug 2026 05:59:12 +0000
ROA not before: Sat 29 Aug 2026 05:59:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 91.201.87.0/24 maxlen: 24
91.208.108.0/24 maxlen: 24
91.227.114.0/24 maxlen: 24
146.19.21.0/24 maxlen: 24
194.26.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4c:19:c6:c9:16:97:6f:e4:75:c3:47:89:20:af:e6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Aug 29 05:59:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90433c01c631e0543859bdb1f1902808bcba676d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f8:40:09:01:aa:2d:c0:6d:b5:0f:bc:83:e7:
c0:b2:7f:a3:64:c4:ff:38:70:f3:57:b2:e2:06:a2:
f5:10:52:aa:38:40:18:25:20:06:69:f3:a8:02:41:
0c:7a:65:fb:a9:a3:11:84:e6:1e:06:85:e3:55:ba:
85:3d:c4:2c:7e:9e:8c:80:42:37:e9:d1:18:21:56:
2e:a0:ab:ce:fc:5c:79:43:69:9c:dc:f1:78:1a:89:
03:6b:f1:e4:4e:53:15:45:fa:bf:1d:22:9d:fc:ca:
f9:a1:f9:52:bc:36:74:e3:90:92:51:5f:6f:58:84:
65:71:11:43:1d:a4:06:b1:65:c8:96:22:f3:02:53:
05:2f:7c:53:8f:c5:ea:d2:fa:f0:db:dd:6c:43:53:
29:34:1b:02:cb:ae:59:a9:f5:b9:a6:47:ea:77:d0:
37:48:97:a0:dc:36:1b:cc:0a:00:d7:ab:cf:73:a4:
ea:b2:b0:78:df:69:13:66:e0:fb:69:3d:a5:ad:7d:
04:13:8b:bf:f3:6c:2e:18:2b:45:3a:92:bf:ac:86:
04:fa:0d:90:87:90:30:7f:da:98:5e:7d:80:0a:c1:
28:91:aa:f7:3e:47:a6:64:1b:f6:66:bd:e1:2f:76:
9d:0a:8c:07:5a:5e:ef:6b:43:df:24:c5:c5:39:c7:
52:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:43:3C:01:C6:31:E0:54:38:59:BD:B1:F1:90:28:08:BC:BA:67:6D
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/kEM8AcYx4FQ4Wb2x8ZAoCLy6Z20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.87.0/24
91.208.108.0/24
91.227.114.0/24
146.19.21.0/24
194.26.215.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:70:66:95:68:ea:a6:07:d9:96:b5:b6:57:7f:90:02:1c:c3:
e9:81:2c:ea:b2:94:3f:13:00:36:52:a9:be:a6:bf:7e:37:68:
f5:61:0d:7b:43:d2:45:1b:66:15:1c:4a:7d:ba:8d:5e:ce:0a:
02:aa:e9:bb:37:6a:d5:e6:50:28:74:55:c9:68:7f:df:83:b9:
97:b4:2b:5f:c1:19:c5:a9:2c:a8:e4:3b:ed:0f:ca:2e:0e:0b:
1d:6f:cf:b1:d4:65:d8:fa:28:a4:b9:b6:89:c4:53:1b:57:8d:
d2:57:99:ca:05:8c:dc:29:cd:04:75:d6:fa:5e:17:20:d1:67:
d8:f0:bd:23:cd:ed:65:e3:b7:0a:0d:96:af:91:ab:57:80:a1:
56:f5:55:db:a4:a8:da:00:d9:0d:bb:67:e0:68:f0:54:b0:74:
09:09:3e:92:81:79:57:30:c0:3f:6f:d2:c4:dc:ed:2c:2f:10:
db:fa:87:75:a7:8b:9b:52:90:86:b6:32:7c:25:a6:2b:c2:46:
6d:9e:4e:56:44:1e:0c:c4:37:fc:84:ff:93:e1:c3:d8:08:a2:
1b:b5:7f:ec:fd:c5:cb:b4:7d:e3:12:4d:03:bd:96:66:27:65:
7a:ee:ce:2e:a1:b5:e0:25:9d:e9:c2:9b:a5:a7:35:48:4f:37:
85:83:6b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 22:57:47 2026 by rpki-client