Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/1RE6ww1Ea-6gysSCZTYsJnidS0o.roa
File: 1RE6ww1Ea-6gysSCZTYsJnidS0o.roa (raw, json)
Hash identifier: CQyftuAGWQah8Z8S7nvqIbuWFmobahfp7OoSj07FVF0=
Subject key identifier: D5:11:3A:C3:0D:44:6B:EE:A0:CA:C4:82:65:36:2C:26:78:9D:4B:4A
Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial: 019EFDF94D5C52E23BABE7235B193D6AD09F
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/1RE6ww1Ea-6gysSCZTYsJnidS0o.roa
Signing time: Thu 25 Jun 2026 08:50:34 +0000
ROA not before: Thu 25 Jun 2026 08:50:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 91.217.223.0/24 maxlen: 24
103.69.226.0/24 maxlen: 24
103.69.227.0/24 maxlen: 24
185.191.20.0/24 maxlen: 24
185.191.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fd:f9:4d:5c:52:e2:3b:ab:e7:23:5b:19:3d:6a:d0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
Validity
Not Before: Jun 25 08:50:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5113ac30d446beea0cac48265362c26789d4b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:63:c3:7f:ca:fc:5b:f1:75:d2:f4:e1:99:02:
e3:51:c5:d5:55:ca:12:a7:18:05:66:d7:52:d2:23:
5d:b9:42:b7:1f:f9:9f:2a:63:dd:02:72:9e:84:f6:
7f:7e:87:72:88:ad:a4:e3:43:04:b7:16:b0:40:13:
56:45:8c:c9:fd:e8:97:df:a2:75:d2:0b:45:29:3e:
f6:d2:32:88:29:0b:38:aa:25:7e:19:74:bb:ef:3c:
8d:f3:5f:0a:18:67:63:42:50:c9:a8:95:7d:af:76:
a7:46:00:02:52:da:57:69:cd:19:b9:1d:35:7a:fd:
58:38:5f:25:53:c5:4b:fe:a5:c4:e2:0d:8d:9a:15:
1f:61:cf:d2:3c:7a:19:37:69:3d:06:27:72:03:c5:
8f:43:41:f6:3e:04:d6:3d:bb:06:4c:42:73:02:16:
14:cb:a4:81:09:d4:f0:18:b2:31:c6:26:96:03:fb:
24:71:ca:6a:eb:8d:50:e5:91:c5:74:91:19:a9:e4:
d9:70:b2:bd:e6:76:e1:dd:c5:9e:af:da:94:7c:23:
fb:58:c1:7a:19:74:40:66:78:ef:5f:79:fa:0e:a8:
93:be:d2:d2:57:44:12:a8:3d:2d:a6:7b:60:94:48:
91:34:a1:55:a3:e4:43:3e:5d:97:80:55:41:72:a5:
18:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:11:3A:C3:0D:44:6B:EE:A0:CA:C4:82:65:36:2C:26:78:9D:4B:4A
X509v3 Authority Key Identifier:
keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/1RE6ww1Ea-6gysSCZTYsJnidS0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.223.0/24
103.69.226.0/23
185.191.20.0/23
Signature Algorithm: sha256WithRSAEncryption
31:b9:d5:07:8b:95:d3:38:3c:d6:8d:65:84:ee:7c:03:8b:85:
87:41:c1:4f:10:12:50:e0:9c:61:16:e2:2c:77:b5:f3:c3:1d:
ce:69:46:72:43:dc:55:16:74:a1:14:a7:a8:30:b3:d0:f0:6d:
cc:35:f2:c0:63:3a:31:34:03:e4:7e:1c:bc:b8:2c:7f:aa:1a:
a1:b2:19:82:3f:1e:d5:f4:20:e5:f7:c8:08:9f:36:14:51:46:
19:74:49:53:95:13:7a:9b:3f:46:f3:c6:36:74:67:6c:21:b2:
95:e2:33:29:b8:e3:27:a9:ea:f5:c4:e1:90:c4:af:25:ca:98:
6c:c0:28:59:5a:aa:5c:53:c9:2d:b9:d8:ac:2a:88:d7:5b:b1:
96:40:21:35:11:c2:5a:dd:a7:08:b7:b1:ad:72:04:58:64:c1:
fe:35:e4:80:f1:ab:7a:ce:39:79:bf:c0:1f:3f:95:56:3e:a2:
fd:b4:f3:a4:b8:4b:01:8b:2b:5a:48:e4:4e:e6:96:92:91:15:
e2:36:8e:58:50:62:87:47:82:5c:dd:69:b4:73:10:7f:fa:e0:
2a:6c:9b:a3:d0:18:ab:b9:2a:ea:0f:e7:8d:42:e1:cf:ac:89:
e4:7a:63:7c:89:fc:b5:37:d9:b3:ec:58:bd:6b:ef:c2:97:2a:
0d:95:e3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:59:52 2026 by rpki-client