Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/_z1dTWhWp3bC5Wji-rMML9bC-i0.roa
File: _z1dTWhWp3bC5Wji-rMML9bC-i0.roa (raw, json)
Hash identifier: spUxR6tKaRhP0L3x6sz5MaLREHIwM94S0kMPw6XM9uI=
Subject key identifier: FF:3D:5D:4D:68:56:A7:76:C2:E5:68:E2:FA:B3:0C:2F:D6:C2:FA:2D
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 01A055E65224973FE5AC9D6F3298BBCACE1B
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/_z1dTWhWp3bC5Wji-rMML9bC-i0.roa
Signing time: Mon 31 Aug 2026 03:39:12 +0000
ROA not before: Mon 31 Aug 2026 03:39:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402265
IP address blocks: 91.132.85.0/24 maxlen: 24
185.145.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:55:e6:52:24:97:3f:e5:ac:9d:6f:32:98:bb:ca:ce:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Aug 31 03:39:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff3d5d4d6856a776c2e568e2fab30c2fd6c2fa2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ce:41:f3:7e:82:77:f1:d5:25:52:59:04:26:
86:fc:f7:c2:c0:67:08:69:de:8f:93:3d:d9:3b:22:
92:cb:39:96:1c:17:c4:5f:f1:79:23:e0:b4:dd:bd:
b5:5d:66:48:9e:88:33:41:ad:5b:d9:95:d6:27:89:
49:3e:de:0c:49:ea:18:0c:bb:01:11:34:5e:75:4e:
74:ab:81:50:c2:5d:75:9f:e4:49:f0:30:fc:82:1c:
8a:cf:d8:46:1f:fe:e1:d5:29:ad:64:41:e8:8b:0a:
28:17:42:83:20:f1:c1:1e:6e:be:32:53:27:46:52:
56:25:3b:ab:3c:cd:1e:56:22:5a:01:9d:e2:ad:fd:
44:e6:95:67:f7:84:34:67:bf:19:2e:90:aa:9c:19:
88:16:81:90:0f:85:8e:70:82:cd:ee:d0:46:ed:78:
27:0e:8d:cc:f7:30:76:40:f1:51:be:0e:fa:1f:46:
88:ab:c4:1c:b4:bb:6b:f7:ab:4e:55:6d:3b:ec:38:
3c:67:e5:15:86:da:7b:b6:84:9b:39:43:02:51:9d:
75:80:17:0d:fc:41:89:79:c4:74:b0:24:6f:8c:81:
02:0f:90:32:aa:97:63:30:23:67:8a:e2:aa:be:41:
7e:a4:e3:52:24:3f:56:60:60:cc:ad:81:44:2a:cd:
cf:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3D:5D:4D:68:56:A7:76:C2:E5:68:E2:FA:B3:0C:2F:D6:C2:FA:2D
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/_z1dTWhWp3bC5Wji-rMML9bC-i0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.85.0/24
185.145.45.0/24
Signature Algorithm: sha256WithRSAEncryption
30:dd:5b:44:a4:cc:12:d7:33:24:aa:aa:b8:87:c1:27:83:d0:
5a:ca:8c:6a:75:03:89:b4:8b:83:c8:00:92:cf:0a:e5:ac:95:
24:24:0a:29:15:57:3f:12:2e:cb:54:2a:52:10:fe:7d:a3:67:
25:4a:a9:34:db:ff:5a:d3:0b:56:aa:05:48:01:01:c4:50:90:
68:42:6b:f5:fb:1d:31:e0:28:d9:45:e5:92:a2:2d:f6:cc:a6:
b5:0e:b2:19:cc:a1:df:b8:73:53:3f:e6:fe:c6:17:94:12:34:
35:8b:fc:a5:e4:03:2b:73:37:d2:c3:04:bc:4a:55:76:d1:68:
4c:86:29:9a:96:21:14:cd:f5:19:d3:83:87:5e:17:ee:f1:5f:
3e:68:b3:ce:04:0f:be:98:5f:ca:00:dd:29:46:2f:09:73:a5:
e3:8b:05:9a:23:17:01:f2:69:86:f3:f6:a2:0a:db:3b:59:28:
5b:bb:87:de:68:70:9c:f8:ea:c5:a2:f4:44:1d:0d:38:23:03:
97:fb:44:39:05:9c:1d:e1:cb:b1:68:2f:6e:34:7f:6e:1f:73:
70:86:5f:53:61:af:41:f1:39:91:fb:b6:55:9c:2c:99:76:e0:
2d:ac:83:62:b1:fd:4f:d7:39:8b:b9:ff:a2:5e:81:4b:67:a3:
4d:62:ef:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:43 2026 by rpki-client