Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/ThQUC52isDtb_-9iij-owp8YmEA.roa
File: ThQUC52isDtb_-9iij-owp8YmEA.roa (raw, json)
Hash identifier: mEwbHKFNnMVNihOJAKuBMkpDxnn5mdN7MfY1PV/KiCU=
Subject key identifier: 4E:14:14:0B:9D:A2:B0:3B:5B:FF:EF:62:8A:3F:A8:C2:9F:18:98:40
Certificate issuer: /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Certificate serial: 019FD745F609C370862F8ECECA8043A26E41
Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/ThQUC52isDtb_-9iij-owp8YmEA.roa
Signing time: Thu 06 Aug 2026 13:31:54 +0000
ROA not before: Thu 06 Aug 2026 13:31:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44955
IP address blocks: 91.208.114.0/24 maxlen: 24
91.224.108.0/24 maxlen: 24
91.224.109.0/24 maxlen: 32
91.241.78.0/24 maxlen: 24
109.70.72.0/24 maxlen: 24
194.33.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d7:45:f6:09:c3:70:86:2f:8e:ce:ca:80:43:a2:6e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Validity
Not Before: Aug 6 13:31:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e14140b9da2b03b5bffef628a3fa8c29f189840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0c:98:06:a5:39:e1:48:be:56:b0:06:fa:80:
33:59:ed:a7:a5:17:f7:7d:7e:81:5d:13:b0:b1:3f:
41:91:0b:d8:02:aa:1d:67:a5:aa:cc:91:99:e0:93:
a0:94:b8:ab:42:82:3b:db:4b:80:97:05:e4:9e:13:
c2:19:46:c5:70:4c:a2:2b:31:ea:e2:ba:28:c2:71:
c3:f5:4e:3d:54:90:e2:20:a7:b8:e0:9c:e6:cc:b1:
c3:25:cc:5a:dd:76:d0:4d:70:91:ee:aa:fe:54:70:
c3:27:b8:d7:76:82:0f:e5:5d:55:9c:28:06:93:ea:
b2:31:88:69:51:1c:7d:4b:4d:49:6b:d8:09:09:d3:
72:bc:8a:76:00:6a:cf:06:ba:c5:75:08:29:c9:2c:
c6:4f:21:a0:99:08:8a:8a:ee:1b:da:3d:99:d8:f3:
e4:e7:c7:d9:85:51:fd:38:f4:45:90:36:1e:20:48:
e7:3b:aa:73:42:72:a7:af:c6:88:67:b2:83:bb:61:
30:01:37:8b:4f:9e:9c:71:02:26:99:0e:46:f1:14:
c1:92:94:95:21:83:a9:f5:c6:0b:ca:bc:10:b1:b1:
58:8e:13:8f:8a:39:73:b8:26:bc:b0:59:40:2f:16:
ab:45:c5:dd:95:07:a7:32:ba:18:01:34:2b:0f:8c:
16:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:14:14:0B:9D:A2:B0:3B:5B:FF:EF:62:8A:3F:A8:C2:9F:18:98:40
X509v3 Authority Key Identifier:
keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/ThQUC52isDtb_-9iij-owp8YmEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.114.0/24
91.224.108.0/23
91.241.78.0/24
109.70.72.0/24
194.33.58.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:e0:bf:fe:e7:35:d0:89:ee:9e:b4:81:73:cf:a1:e1:4b:0c:
0a:f2:48:8d:87:ae:8e:f5:0d:67:2a:f5:7c:86:99:d0:a9:16:
7a:1e:58:c0:74:67:db:8b:1f:e2:12:01:b7:be:ac:51:e0:fd:
e5:28:6f:1d:bd:ba:4f:76:26:0b:47:8e:b2:f8:4f:90:77:0b:
ae:6b:9c:2c:70:db:11:d4:d4:aa:47:10:35:a6:53:e2:bd:98:
9b:fb:87:c4:d1:50:f4:9e:42:93:28:49:ba:44:95:d0:d6:11:
02:39:a3:57:08:0c:59:1d:b0:77:52:dd:36:c5:cb:61:aa:39:
7f:36:73:25:7c:a1:6a:59:71:6a:d6:68:cc:a5:29:fe:0d:fd:
e4:05:5f:ad:80:14:d7:b8:89:a4:20:f2:d4:12:a6:93:5f:a3:
9f:86:a3:9a:b4:fc:97:58:42:b6:59:9c:a4:b3:af:f5:1a:8d:
26:c0:32:12:ef:9e:cb:d4:73:82:c2:6e:cf:3c:22:23:48:27:
b7:84:66:af:d9:e3:b4:6d:a7:ca:08:66:92:08:08:5a:ec:37:
2b:64:88:bf:42:6b:f8:73:ed:88:23:2c:e7:60:cf:96:5c:b0:
fc:be:5d:9f:7c:21:bf:7b:65:c6:0b:57:37:76:f1:2c:02:df:
32:1b:b5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:55:32 2026 by rpki-client