Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/TIabuWefpCecVB1UqdvmsprEB6M.roa
File: TIabuWefpCecVB1UqdvmsprEB6M.roa (raw, json)
Hash identifier: U0F7N1JBM9qnvLxoEK87L79dMHF1o/Xt4kA4GI9V3KM=
Subject key identifier: 4C:86:9B:B9:67:9F:A4:27:9C:54:1D:54:A9:DB:E6:B2:9A:C4:07:A3
Certificate issuer: /CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Certificate serial: 01A10BE84F009BFEAE882626AD9CC10E3BB4
Authority key identifier: A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/TIabuWefpCecVB1UqdvmsprEB6M.roa
Signing time: Mon 05 Oct 2026 11:52:16 +0000
ROA not before: Mon 05 Oct 2026 11:52:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52125
IP address blocks: 91.197.128.0/24 maxlen: 24
91.197.129.0/24 maxlen: 24
91.197.130.0/24 maxlen: 24
91.222.64.0/24 maxlen: 24
91.222.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:e8:4f:00:9b:fe:ae:88:26:26:ad:9c:c1:0e:3b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Validity
Not Before: Oct 5 11:52:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c869bb9679fa4279c541d54a9dbe6b29ac407a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:db:c9:55:29:5b:d8:a6:80:67:cb:c9:85:f6:
52:9d:64:d7:4c:b0:df:da:05:43:e7:37:ec:05:37:
0b:a0:e8:14:17:3f:7c:68:a9:a1:6b:63:4b:1e:3b:
11:26:0e:32:2b:77:c3:f6:e4:1a:de:30:c6:33:1d:
a0:8c:5f:a0:90:20:74:59:78:7c:9a:02:e4:cf:70:
6a:46:df:5e:2a:13:1d:17:50:61:18:08:95:45:e7:
e5:31:3e:ca:2f:f0:83:3e:0f:b4:55:59:a3:d5:84:
cc:c9:58:fa:1c:ab:95:a3:04:1f:92:7e:2b:cd:22:
29:95:71:1a:cc:f9:23:4f:4d:3d:d0:4c:54:26:4f:
2f:0f:33:d4:6d:c3:8a:17:7d:2d:71:0c:0b:13:9d:
32:ab:2c:f9:02:97:6d:75:fb:c7:72:95:06:8f:2a:
6c:ed:49:e2:e3:41:d7:7b:07:af:55:2e:43:be:74:
52:55:04:63:00:4f:52:a5:54:7d:ed:1a:6e:61:0d:
9a:d3:dc:55:16:e9:de:3c:9a:63:83:06:2d:3a:db:
54:6f:e3:7d:2f:16:b7:87:35:f6:64:8c:d3:bf:39:
56:1f:49:09:07:98:c7:1c:6b:8d:0b:4c:2f:f0:56:
b0:b9:26:01:2c:25:81:d2:eb:ba:b8:0f:06:21:5f:
6c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:86:9B:B9:67:9F:A4:27:9C:54:1D:54:A9:DB:E6:B2:9A:C4:07:A3
X509v3 Authority Key Identifier:
keyid:A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/TIabuWefpCecVB1UqdvmsprEB6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.128.0-91.197.130.255
91.222.64.0/23
Signature Algorithm: sha256WithRSAEncryption
54:0b:4f:bf:19:58:64:f2:1a:2b:75:a6:52:e4:0f:64:4f:9e:
5c:3e:a7:c9:9d:30:74:3f:8a:d9:09:be:74:30:15:85:5e:89:
0c:8a:a5:06:36:05:2c:b5:1f:5b:0b:e5:38:f8:3a:74:61:7b:
cc:fd:5f:91:f7:ad:96:be:9f:25:10:90:1c:60:db:28:a1:d6:
21:cf:95:b7:b7:f6:b8:aa:f2:2c:09:80:6b:31:8b:6e:b8:32:
29:e3:a3:92:4b:72:ee:c2:10:71:62:3d:90:50:ab:ed:09:43:
de:00:3b:59:dc:94:ef:c0:d9:87:f1:2f:f1:0a:e2:d1:5a:b1:
ec:5d:5e:b8:bb:98:12:f7:55:5c:17:a7:ce:e9:6b:8e:cb:f7:
14:bd:53:b5:14:66:fd:34:17:f4:48:74:60:af:b2:a4:51:e3:
01:9c:f3:a9:da:5a:a3:fb:ba:2f:7f:c3:59:56:0b:af:41:83:
c5:81:47:6f:53:53:00:10:27:21:3d:8f:a2:64:30:d0:63:dd:
37:46:b9:a9:c2:9f:df:e2:64:f6:8d:27:b3:ef:24:12:d6:76:
f3:07:d9:8e:7c:be:85:b5:42:91:56:9f:37:87:1e:43:de:ee:
dd:2f:c3:bb:53:81:8c:12:c5:55:85:dc:ff:01:b1:62:bf:18:
8e:3c:ec:f4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Oct 22 21:23:59 2026 by rpki-client