Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/_Sl1aXhjCfZwdAjpNhVf_MgoZK0.roa
File: _Sl1aXhjCfZwdAjpNhVf_MgoZK0.roa (raw, json)
Hash identifier: MEVYRdsGH/1edLj92hA8fQtWiosyCwFg3hCFDQaJkck=
Subject key identifier: FD:29:75:69:78:63:09:F6:70:74:08:E9:36:15:5F:FC:C8:28:64:AD
Certificate issuer: /CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Certificate serial: 01A0657AC8420AC09F77DC65C40717B1AF08
Authority key identifier: D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/_Sl1aXhjCfZwdAjpNhVf_MgoZK0.roa
Signing time: Thu 03 Sep 2026 04:15:40 +0000
ROA not before: Thu 03 Sep 2026 04:15:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219263
IP address blocks: 91.204.224.0/22 maxlen: 22
91.204.224.0/24 maxlen: 24
91.204.225.0/24 maxlen: 24
91.204.226.0/24 maxlen: 24
91.204.227.0/24 maxlen: 24
185.202.100.0/22 maxlen: 22
185.202.100.0/24 maxlen: 24
185.202.101.0/24 maxlen: 24
185.202.102.0/24 maxlen: 24
185.202.103.0/24 maxlen: 24
194.126.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:65:7a:c8:42:0a:c0:9f:77:dc:65:c4:07:17:b1:af:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Validity
Not Before: Sep 3 04:15:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd297569786309f6707408e936155ffcc82864ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c9:55:68:4c:f0:32:f5:7c:f5:90:40:bb:9b:
f9:e0:4a:12:0b:1d:6d:bb:e1:cc:22:ac:e0:ac:fa:
13:67:a4:7c:b5:d3:2e:46:bd:33:b1:5e:eb:89:1f:
da:53:ef:d8:2b:ff:0f:5e:50:a8:b7:c4:a9:8b:9a:
47:27:dc:69:27:bb:70:5f:25:21:7e:cf:67:66:ec:
03:23:ab:25:e1:3b:06:50:64:0c:4d:02:dd:f2:6e:
cf:8d:f1:1d:46:d9:ee:2e:47:ed:1e:01:8c:88:92:
2d:38:8e:d4:1e:8d:76:86:6b:c2:97:6a:1f:44:a4:
98:a5:d5:a3:97:eb:f7:94:ad:77:b7:1b:88:71:7e:
9b:bc:4d:6d:a6:e3:cd:e7:0e:14:b4:c2:1a:1f:e4:
08:9f:ea:38:ff:a5:cb:d0:e1:2e:47:4b:bb:bd:81:
77:1f:79:5a:5b:81:21:d9:9c:88:08:fc:34:e7:97:
1d:77:43:8b:e6:86:3e:ad:ae:6b:f4:02:8e:21:16:
d4:fa:57:36:26:20:c5:c7:00:79:0e:c9:44:ed:d6:
cb:a7:dc:13:49:64:2f:d4:40:0e:05:0b:59:c7:28:
a3:98:23:79:ab:9f:ef:09:b0:22:ee:70:3c:74:06:
f1:2f:d9:4d:f6:f9:80:98:8c:11:06:93:ad:96:93:
bc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:29:75:69:78:63:09:F6:70:74:08:E9:36:15:5F:FC:C8:28:64:AD
X509v3 Authority Key Identifier:
keyid:D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/_Sl1aXhjCfZwdAjpNhVf_MgoZK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.224.0/22
185.202.100.0/22
194.126.215.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:9e:4b:f7:40:ce:8b:c4:cd:d8:18:29:dd:e1:7d:72:1b:e9:
31:b6:3a:c6:e0:dc:b9:51:05:76:e3:7b:66:17:8d:56:43:7b:
63:ef:f5:47:a7:a1:4b:b8:ed:2c:2f:df:23:32:60:1f:ec:f6:
35:f2:69:73:6b:0d:5f:ad:49:95:83:74:01:63:76:71:b4:ff:
ec:2f:ec:d8:6d:c5:82:81:9e:90:dd:9d:b2:90:ec:52:8e:0b:
95:51:d6:96:a0:f5:df:7b:de:6e:7a:bd:92:f4:e1:a0:26:1c:
ff:08:72:d9:3c:a8:e6:a5:c9:10:15:43:26:06:c8:7c:90:f3:
3a:ce:78:f9:87:bf:a1:bb:ed:50:5e:12:5d:3b:82:d8:2c:2c:
05:e2:c5:54:bd:bd:bf:08:96:ff:6e:dc:bd:64:1a:ab:59:2d:
27:9d:63:7e:1a:31:6b:09:a1:26:ea:d5:32:8a:89:c0:23:95:
11:56:b7:b7:d7:af:68:fd:ad:41:3a:66:6a:b1:c1:26:d0:f8:
6f:ee:44:66:5c:e9:47:6b:3c:d6:c6:87:80:3b:da:1c:fa:8b:
ed:ee:5d:0a:db:d9:b8:da:cb:4f:48:b7:4c:7d:ea:04:4e:15:
d7:0a:44:8b:d9:83:5a:ec:22:4a:87:a3:65:72:a1:67:7b:a2:
70:11:e3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:41:24 2026 by rpki-client