Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/PE_Tce8xM1SvQOyoivmCZY3zjes.roa
File: PE_Tce8xM1SvQOyoivmCZY3zjes.roa (raw, json)
Hash identifier: /ZeTOmr+gWLHHVZJAewm9ieoBEFRx12ej0Ep29z8u/w=
Subject key identifier: 3C:4F:D3:71:EF:31:33:54:AF:40:EC:A8:8A:F9:82:65:8D:F3:8D:EB
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 019FF59B6CAEF6478ADC5874771387D3E81F
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/PE_Tce8xM1SvQOyoivmCZY3zjes.roa
Signing time: Wed 12 Aug 2026 10:53:51 +0000
ROA not before: Wed 12 Aug 2026 10:53:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56331
IP address blocks: 91.224.18.0/24 maxlen: 24
91.224.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 16:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:9b:6c:ae:f6:47:8a:dc:58:74:77:13:87:d3:e8:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Aug 12 10:53:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c4fd371ef313354af40eca88af982658df38deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3a:0f:fd:14:df:21:37:61:69:cb:a9:ec:bc:
de:5c:cc:23:6d:40:6b:78:53:03:6d:c3:2b:cc:03:
aa:6f:a6:a2:e2:6c:90:9d:7b:7f:69:0d:d0:aa:60:
ef:44:73:23:dc:20:6c:55:fd:9e:dc:c1:1e:44:fe:
d7:5a:36:74:84:a0:f8:19:1e:c7:2a:c3:d1:ad:ac:
28:09:a7:28:85:98:77:e2:f0:09:64:5a:7c:23:33:
1d:f4:ba:d0:c7:18:67:35:3f:29:cb:d0:87:4f:7f:
80:f1:d3:c7:d0:a8:67:93:9f:d8:12:47:f6:f8:c1:
1e:c5:3a:1d:b2:8f:c0:93:20:a2:e1:6b:14:4d:91:
f7:16:46:2d:a9:90:a2:bd:26:62:a7:cf:ee:a2:27:
a4:71:e2:7f:4a:10:53:69:58:3f:ff:48:4d:b5:ff:
a5:e8:96:af:f9:4b:0c:3b:a7:e1:b9:9f:7c:4a:d7:
0d:5b:88:c1:a1:47:67:29:f0:20:67:ec:8a:60:64:
25:42:63:7e:f7:f2:63:dd:32:ba:e0:56:4a:22:67:
ed:32:5f:c9:de:16:e6:b5:38:4d:a5:ba:90:35:ff:
91:80:82:6f:35:07:cf:aa:91:f7:24:14:fc:bf:d3:
06:ca:f3:3f:2d:24:45:af:3a:67:5b:b2:e5:16:05:
50:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4F:D3:71:EF:31:33:54:AF:40:EC:A8:8A:F9:82:65:8D:F3:8D:EB
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/PE_Tce8xM1SvQOyoivmCZY3zjes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.18.0/23
Signature Algorithm: sha256WithRSAEncryption
45:80:ee:87:a8:91:e4:c6:25:03:d6:a1:94:e9:e4:06:d3:c3:
28:b2:ae:cb:d0:7e:1a:87:71:3a:86:ba:8f:7f:99:74:a2:6c:
d7:e2:35:f5:b5:db:4e:e4:96:c2:1c:a9:4c:0e:e8:96:24:ac:
1c:d2:1d:a6:98:ea:38:2a:1b:72:31:45:91:c4:dc:40:bf:ea:
c5:e3:ef:de:8b:ac:2c:02:ca:b2:5f:4b:4b:76:ab:f0:03:fc:
51:53:99:69:2f:14:55:64:f8:4a:c2:e1:89:34:08:40:1f:3e:
35:31:04:ea:fd:58:73:f4:18:60:e6:6b:53:17:41:78:c5:51:
08:32:02:a6:0a:1c:f4:8a:b3:99:69:56:67:ce:ef:38:d1:5a:
d5:5e:88:60:09:45:5f:ab:12:0d:ee:7c:c6:81:6b:78:85:e8:
d9:d4:8e:ed:75:1a:e4:12:46:6a:9f:24:1a:da:91:4e:81:cc:
0e:9b:11:8b:1d:a5:28:70:8c:1b:03:6a:ac:44:f4:84:68:6c:
03:0d:51:64:a5:e0:5d:32:71:b6:3b:74:93:85:0e:a3:1d:7f:
19:fc:65:99:3a:a6:1d:2e:1a:07:ad:44:2b:82:17:bd:75:f7:
9a:69:a2:bd:6a:ae:35:d4:c5:91:1a:c5:20:11:bd:4c:0e:99:
7c:88:68:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:30:37 2026 by rpki-client