Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dABdNFif-ig-t-K90OH9negWStU.roa
File: dABdNFif-ig-t-K90OH9negWStU.roa (raw, json)
Hash identifier: 43C9OdBx+Qt5PifW4LhGNBQCAGwkED96yLkY9Rr/pkg=
Subject key identifier: 74:00:5D:34:58:9F:FA:28:3E:B7:E2:BD:D0:E1:FD:9D:E8:16:4A:D5
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01A0A4025AA060B6CD07C6A21EE20EC0C517
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dABdNFif-ig-t-K90OH9negWStU.roa
Signing time: Tue 15 Sep 2026 07:40:12 +0000
ROA not before: Tue 15 Sep 2026 07:40:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204720
IP address blocks: 31.148.242.0/24 maxlen: 24
93.171.230.0/24 maxlen: 24
146.158.68.0/22 maxlen: 24
195.178.4.0/24 maxlen: 24
195.178.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:02:5a:a0:60:b6:cd:07:c6:a2:1e:e2:0e:c0:c5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Sep 15 07:40:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74005d34589ffa283eb7e2bdd0e1fd9de8164ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:24:96:4f:be:8d:c0:70:0c:91:43:3b:0c:4c:
96:ef:19:bb:3d:c6:88:d3:aa:46:22:f4:e1:25:34:
1e:8b:cd:a7:17:fa:eb:a5:96:93:17:9a:eb:06:da:
84:c5:ea:f2:fc:b0:e8:a7:0e:32:93:82:78:c7:73:
10:2d:0c:45:e8:48:f8:18:4c:4d:af:f0:c0:e2:6e:
25:ef:3a:73:86:14:bb:16:92:09:ba:1d:4b:73:5a:
56:1f:77:2c:43:f9:93:b1:e1:98:fe:94:f8:fc:4e:
f5:67:ef:5f:d6:01:a5:82:68:04:87:9a:0a:08:89:
f1:6b:9c:46:52:55:74:38:68:5c:c5:2a:ec:96:97:
a3:79:7b:69:c8:01:6b:ba:49:af:68:1f:16:18:61:
74:07:0b:a5:08:e0:29:70:7c:b7:5d:0d:33:10:5e:
25:7d:7b:83:ca:82:14:da:9c:16:ab:ad:ca:ec:4a:
4e:01:c8:03:11:57:43:e9:ef:3d:f5:3f:90:24:c9:
8e:ee:91:ce:6b:49:a8:0f:f3:2b:75:43:6a:01:b0:
a0:54:19:0f:c6:6c:e3:5a:67:97:6d:8a:42:85:21:
14:c3:16:37:09:f6:e0:d7:df:c7:b9:c8:d7:d7:86:
6b:47:86:f9:cb:cf:1a:a2:0e:ea:4b:21:7c:6e:6d:
4c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:00:5D:34:58:9F:FA:28:3E:B7:E2:BD:D0:E1:FD:9D:E8:16:4A:D5
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dABdNFif-ig-t-K90OH9negWStU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.242.0/24
93.171.230.0/24
146.158.68.0/22
195.178.4.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:a2:ad:ce:ea:30:f9:04:0e:12:48:8b:29:f9:6e:12:b6:43:
78:4f:3f:2e:32:22:01:ba:28:2e:a1:4d:11:73:56:4a:2f:37:
e1:fc:94:c3:0a:3b:28:e5:2e:dc:b0:e5:57:fe:cb:f2:ed:48:
33:5b:fe:10:19:39:0a:f7:9d:5f:13:f5:03:4e:f6:5a:c9:f9:
a6:69:ea:b6:cf:1d:6a:7e:83:8d:ab:3c:fb:ac:77:a1:f0:2a:
e0:0f:51:78:62:c2:c4:5c:23:f1:43:6e:ca:55:03:86:86:a3:
ba:ab:ff:94:9b:af:65:29:bd:92:29:2e:be:f6:f3:be:1a:15:
95:dd:78:ed:ee:c8:12:94:28:60:64:ba:49:bc:c6:cc:4e:51:
52:2f:65:89:90:b5:11:6d:f3:4f:4e:45:1f:31:f1:0c:61:b0:
95:5d:e3:c3:36:e8:f3:16:4d:18:bb:42:5c:46:ba:e0:89:00:
9f:8a:ec:cc:e8:49:b1:0a:eb:13:f9:51:3e:f3:a2:a3:7d:c1:
64:9a:13:1e:65:24:e2:9e:59:8e:8d:55:9a:c3:08:b4:06:eb:
47:3a:b5:b4:18:b0:ec:25:52:5d:74:a1:5f:ea:f5:0a:5e:fb:
a7:a5:13:c0:74:a1:cf:e9:ab:8f:e6:de:13:dc:31:36:1f:7c:
2a:00:93:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:31:50 2026 by rpki-client