Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/1-Kwq2OC8hia9-e5o_ND0cuJTzGI.roa
File: 1-Kwq2OC8hia9-e5o_ND0cuJTzGI.roa (raw, json)
Hash identifier: tLqoo+8Mn+PsGbLOFuyPAehTf/021da/zPAQPbjmeVU=
Subject key identifier: F8:AC:2A:D8:E0:BC:86:26:BD:F9:EE:68:FC:D0:F4:72:E2:53:CC:62
Certificate issuer: /CN=6e213db6d2b1e4f30b62ed1167e25223626360b9
Certificate serial: 01A1787265A462F0E4138DD53E2BA2CE28DB
Authority key identifier: 6E:21:3D:B6:D2:B1:E4:F3:0B:62:ED:11:67:E2:52:23:62:63:60:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/biE9ttKx5PMLYu0RZ-JSI2JjYLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/1-Kwq2OC8hia9-e5o_ND0cuJTzGI.roa
Signing time: Mon 26 Oct 2026 13:42:05 +0000
ROA not before: Mon 26 Oct 2026 13:42:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44090
IP address blocks: 91.213.83.0/24 maxlen: 24
2a12:2500::/29 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/biE9ttKx5PMLYu0RZ-JSI2JjYLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:72:65:a4:62:f0:e4:13:8d:d5:3e:2b:a2:ce:28:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e213db6d2b1e4f30b62ed1167e25223626360b9
Validity
Not Before: Oct 26 13:42:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8ac2ad8e0bc8626bdf9ee68fcd0f472e253cc62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5b:f3:0e:9c:6a:a0:e9:08:84:cc:5e:56:ae:
8c:c4:fc:9c:7a:8e:ae:d2:e7:3d:c2:6b:00:88:a5:
0d:b8:8a:a3:df:0e:cd:d0:d9:42:e3:63:6b:66:3f:
86:49:7c:02:71:02:6f:07:04:20:29:96:33:3b:18:
d3:83:eb:79:66:03:91:54:9d:58:0f:35:a8:98:bc:
a8:24:f4:0a:fb:1f:c6:ee:d4:89:c1:4f:ae:d5:cb:
26:36:6d:b4:fb:bc:c9:95:09:73:d9:ac:bd:46:60:
7c:20:77:b6:7c:b0:47:0a:99:c6:71:67:25:07:cf:
40:3f:3e:b2:b9:7c:99:88:b4:2e:97:a1:02:67:d3:
e7:7e:86:47:7a:a9:33:aa:15:96:f3:47:0e:9e:a8:
0e:f1:be:a6:3a:3e:81:18:0b:73:36:bf:15:58:4d:
60:aa:85:88:ef:45:15:fa:7d:5a:61:33:97:6e:39:
44:e0:ed:e8:4c:32:ed:00:cc:5e:95:49:29:88:4c:
7b:79:2d:a4:dc:8e:b6:47:f9:aa:39:17:f6:00:71:
23:14:31:23:08:af:73:00:eb:71:46:09:d1:c4:ae:
25:b6:21:4c:ac:3f:d6:c0:ad:80:8d:26:1e:ae:f2:
bc:0c:ac:cf:a6:e4:aa:83:7f:ca:b4:98:b3:6f:ce:
ea:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AC:2A:D8:E0:BC:86:26:BD:F9:EE:68:FC:D0:F4:72:E2:53:CC:62
X509v3 Authority Key Identifier:
keyid:6E:21:3D:B6:D2:B1:E4:F3:0B:62:ED:11:67:E2:52:23:62:63:60:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/biE9ttKx5PMLYu0RZ-JSI2JjYLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/1-Kwq2OC8hia9-e5o_ND0cuJTzGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.83.0/24
IPv6:
2a12:2500::/29
Signature Algorithm: sha256WithRSAEncryption
23:dd:63:00:37:8c:b1:b7:b0:38:44:5d:6f:e6:29:b7:fb:8f:
36:32:e1:06:0b:bd:bc:d2:34:71:54:f2:cb:ea:91:e9:d1:a1:
1c:ee:56:86:de:92:ec:91:33:36:82:48:a7:ad:19:4c:54:e7:
26:0f:a9:0f:5e:61:07:ce:8f:49:6a:63:ff:4f:b7:e8:9f:5e:
66:07:90:df:fc:72:a8:a7:a6:8a:31:f3:82:01:82:c7:fd:aa:
92:3a:75:d6:cf:62:11:4a:9a:f1:b5:86:b3:8f:8a:d2:f4:cd:
64:79:6d:b4:97:b2:ff:5d:eb:7f:4d:af:33:0e:c6:9f:15:27:
02:a3:63:26:9f:80:80:14:00:05:b1:fc:2d:4b:91:12:a9:8d:
f7:4e:e6:dc:44:72:91:b2:33:51:0a:e0:36:8a:85:3e:80:4c:
3b:e3:ca:83:74:6f:56:21:51:7b:19:d8:eb:59:8d:60:03:b0:
46:fb:c6:af:60:c7:54:bf:88:10:75:9f:f2:b8:42:2e:a5:3d:
bd:33:22:08:2e:dc:da:55:f2:94:59:30:f4:71:66:de:f7:81:
22:70:d6:fb:a4:f6:b6:05:ab:8f:8f:34:d4:55:77:75:26:c0:
3f:57:d5:12:59:47:7d:6d:fd:c4:91:d2:d6:62:44:12:9c:38:
34:bd:d8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:29:22 2026 by rpki-client