Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/r0mR3JdsSHjQijRrm4Pcq7lgM58.roa
File: r0mR3JdsSHjQijRrm4Pcq7lgM58.roa (raw, json)
Hash identifier: s1x3KCynDraX05aiffgCwXTC5LKE3qCWa29JhXg/r4M=
Subject key identifier: AF:49:91:DC:97:6C:48:78:D0:8A:34:6B:9B:83:DC:AB:B9:60:33:9F
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 01A05E567A9B28CE3CCC472A4AE345E9FC58
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/r0mR3JdsSHjQijRrm4Pcq7lgM58.roa
Signing time: Tue 01 Sep 2026 18:58:40 +0000
ROA not before: Tue 01 Sep 2026 18:58:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 91.103.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5e:56:7a:9b:28:ce:3c:cc:47:2a:4a:e3:45:e9:fc:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Sep 1 18:58:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af4991dc976c4878d08a346b9b83dcabb960339f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:41:65:11:aa:40:98:55:93:a9:4b:7f:74:2d:
1a:ab:a8:de:e7:b7:b7:68:f3:ac:39:37:39:c7:f5:
ae:68:26:b3:32:da:db:3c:32:9c:f7:44:ea:0c:c7:
cd:a0:2b:c3:6d:da:b2:48:21:b0:e2:b3:70:48:cc:
08:7c:46:57:bf:f6:a3:17:bd:fe:49:3b:63:4d:f3:
d0:25:1c:cf:73:fb:f5:6f:5d:58:9b:af:34:0d:8e:
31:bb:d3:29:84:1b:21:55:9a:78:58:e0:77:e7:c1:
ff:13:f9:a5:09:5d:6b:d0:25:b8:4f:0f:b2:a6:6f:
95:ad:fe:66:ab:bf:67:7b:84:ce:ec:5f:8d:34:65:
15:46:d3:64:86:97:36:f8:8d:e5:4d:f8:25:5d:95:
23:17:5f:04:30:ee:0a:95:13:d1:e0:fa:e1:c4:1b:
1d:3c:cd:6b:2d:c3:85:12:5b:6d:20:87:82:a1:cf:
3a:e6:23:19:ee:2a:fa:4d:27:53:f2:b3:28:95:43:
ea:ad:5f:41:0c:e7:54:84:ba:46:7c:99:b0:12:45:
f3:1b:13:b3:79:7b:8d:97:ff:3b:e8:d0:fd:5f:cd:
17:ac:82:73:99:62:ac:60:86:f1:c0:43:a0:94:0c:
04:d8:1b:cb:f3:b5:27:5e:f6:68:0e:ac:eb:34:17:
d2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:49:91:DC:97:6C:48:78:D0:8A:34:6B:9B:83:DC:AB:B9:60:33:9F
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/r0mR3JdsSHjQijRrm4Pcq7lgM58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.124.0/22
Signature Algorithm: sha256WithRSAEncryption
43:6b:60:c7:b8:52:ac:67:a5:4d:49:1e:f2:3a:52:fe:ac:98:
47:f9:9b:6a:1f:47:99:c2:df:05:0f:6a:13:5c:0f:05:2e:ba:
11:6f:c2:ba:af:01:dd:15:7c:f9:f4:b0:98:5d:ed:f3:80:07:
d6:d4:9c:ca:cd:a8:7c:36:3e:ee:79:8b:87:2c:38:11:0b:ad:
42:6a:08:8d:0f:5d:a4:81:62:10:e5:6b:a8:80:44:df:9c:ef:
6d:27:52:27:f2:bb:29:52:28:94:4e:4e:e5:cc:ca:fb:fe:32:
8f:46:b0:da:b4:79:92:0c:8a:b4:4b:c8:d4:ea:d5:df:72:56:
f8:5b:1f:64:84:0b:d9:59:83:f3:f2:0d:04:11:ab:10:3f:dc:
7f:1a:1b:ec:b3:ff:57:e1:c4:ab:9f:13:8c:f8:23:0c:20:c0:
b1:24:a4:f0:b6:41:60:f3:30:a9:85:52:b6:34:76:c5:25:8c:
34:59:ed:2a:15:fe:b0:ac:53:72:18:c3:d7:13:a1:ac:80:90:
c9:ff:a2:f4:67:e7:5c:24:04:6c:82:0d:8a:11:4e:83:a7:14:
94:77:a1:9e:39:a5:a4:ec:fc:73:e0:85:dd:ca:98:04:44:32:
7a:54:bf:7d:87:08:04:ba:58:0f:c8:40:cf:5d:0c:7f:9f:5e:
00:83:75:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 05:32:32 2026 by rpki-client