Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/1JM4h3EV4-8QJEhH66ZaLPFtVD4.roa
File: 1JM4h3EV4-8QJEhH66ZaLPFtVD4.roa (raw, json)
Hash identifier: 617mTV8mCeQIVRSd/rCSBbz87h5uVI4Yg+pGJw94jsE=
Subject key identifier: D4:93:38:87:71:15:E3:EF:10:24:48:47:EB:A6:5A:2C:F1:6D:54:3E
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 01A1833C264783A1054E77D8A7976B9867C9
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/1JM4h3EV4-8QJEhH66ZaLPFtVD4.roa
Signing time: Wed 28 Oct 2026 15:58:39 +0000
ROA not before: Wed 28 Oct 2026 15:58:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41171
IP address blocks: 86.107.166.0/24 maxlen: 24
89.35.15.0/24 maxlen: 24
93.113.67.0/24 maxlen: 24
93.119.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 23:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:3c:26:47:83:a1:05:4e:77:d8:a7:97:6b:98:67:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Oct 28 15:58:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d49338877115e3ef10244847eba65a2cf16d543e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:78:8b:1f:05:10:0d:1f:6e:0c:38:25:91:92:
45:bc:03:69:b4:8a:31:01:17:11:78:7d:6b:cc:cd:
81:de:91:36:c3:67:bf:ca:73:5b:06:8b:b9:a2:d4:
25:c5:5d:ba:be:d5:0c:3b:0c:42:e5:45:b3:35:9a:
97:13:22:74:6d:68:4b:65:cb:5e:ea:dd:98:59:9e:
39:cf:76:3f:ff:93:d2:49:2e:b6:ec:d2:81:bf:50:
76:b5:71:fc:9d:8d:70:92:ca:a9:b9:c0:36:c2:1f:
63:41:04:5c:08:4c:30:bf:f7:e0:48:fe:e5:f4:32:
6d:24:71:b6:4c:8a:49:86:8c:b1:ba:ec:18:5c:c7:
ac:40:a7:ff:4b:88:22:cd:02:bb:28:4d:f2:10:0f:
09:a2:9f:fc:4f:20:f9:dd:48:9b:ad:1f:de:1a:5f:
5d:dc:03:f1:fc:da:25:49:d3:f7:c2:8d:1c:eb:34:
a5:43:9c:e1:32:34:6c:ce:e4:a2:87:11:e0:3e:3a:
9a:7e:03:af:8a:f6:e5:87:a3:bd:ac:59:06:32:4e:
49:d5:eb:1b:34:3e:64:4b:17:11:40:9f:75:32:d7:
29:85:3b:f1:4e:e0:e8:3c:4a:01:c8:06:e4:1b:39:
64:55:c4:b4:cb:c6:bb:3e:fd:f6:60:a5:d1:9e:f4:
4a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:93:38:87:71:15:E3:EF:10:24:48:47:EB:A6:5A:2C:F1:6D:54:3E
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/1JM4h3EV4-8QJEhH66ZaLPFtVD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.166.0/24
89.35.15.0/24
93.113.67.0/24
93.119.150.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:4c:a0:90:c3:01:9e:8b:0c:7a:4d:4a:55:41:03:22:25:da:
00:a5:2f:49:42:0c:5d:67:25:e9:c0:78:fd:57:76:cb:58:fc:
e4:16:94:d2:eb:97:4f:87:a1:48:67:7c:9b:a4:e5:84:b7:a7:
54:35:4a:cd:ca:5c:80:f9:c0:20:34:ea:87:c1:de:3b:a5:f4:
be:94:cf:5f:bf:bc:01:19:e2:dc:6c:ce:06:42:21:45:e9:30:
2b:a4:2a:7b:4c:30:22:5f:b2:f3:d0:90:3e:8d:8a:61:92:00:
0b:66:6a:c7:de:ce:93:11:13:8e:c0:78:55:e3:75:33:af:83:
8a:74:6a:59:25:6a:b4:c1:39:3e:e5:4f:91:57:b2:b6:a9:39:
5f:27:21:23:94:ab:72:4f:25:08:01:c2:00:0a:67:c4:8c:c6:
f6:ed:f6:34:a1:e3:6e:d9:54:46:ce:da:ba:af:09:fc:bc:aa:
71:7e:a2:1d:7b:0d:92:cb:9c:cc:d7:63:41:71:a3:e0:33:c8:
f2:83:6c:ee:70:f0:a1:0e:b6:5b:4e:1c:f7:97:06:b3:dd:d4:
73:f6:8a:17:22:db:88:06:4d:80:f3:c6:67:1c:81:75:fd:03:
e2:db:b0:21:85:a7:5d:16:64:4b:5c:c1:13:32:ee:44:91:1c:
70:1e:aa:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 04:17:03 2026 by rpki-client