Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/4JfKpQ8Bs159nfxTYSBg9OpdfO4.roa
File: 4JfKpQ8Bs159nfxTYSBg9OpdfO4.roa (raw, json)
Hash identifier: k+UT5oR9JqCKvrD0ynCtW4ui0FvfHBmDolKnAXx4IX8=
Subject key identifier: E0:97:CA:A5:0F:01:B3:5E:7D:9D:FC:53:61:20:60:F4:EA:5D:7C:EE
Certificate issuer: /CN=c11d08186433903069b5d6bb652f98428f53c808
Certificate serial: 01A144E92CE353F5B3FE7A98FBBFC1B36162
Authority key identifier: C1:1D:08:18:64:33:90:30:69:B5:D6:BB:65:2F:98:42:8F:53:C8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wR0IGGQzkDBptda7ZS-YQo9TyAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/4JfKpQ8Bs159nfxTYSBg9OpdfO4.roa
Signing time: Fri 16 Oct 2026 13:31:34 +0000
ROA not before: Fri 16 Oct 2026 13:31:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200031
IP address blocks: 91.193.40.0/23 maxlen: 23
91.193.40.0/24 maxlen: 24
91.193.41.0/24 maxlen: 24
91.215.44.0/23 maxlen: 23
91.215.44.0/24 maxlen: 24
91.215.45.0/24 maxlen: 24
91.215.46.0/24 maxlen: 24
195.60.64.0/23 maxlen: 23
195.60.64.0/24 maxlen: 24
195.60.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/wR0IGGQzkDBptda7ZS-YQo9TyAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/wR0IGGQzkDBptda7ZS-YQo9TyAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wR0IGGQzkDBptda7ZS-YQo9TyAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:e9:2c:e3:53:f5:b3:fe:7a:98:fb:bf:c1:b3:61:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11d08186433903069b5d6bb652f98428f53c808
Validity
Not Before: Oct 16 13:31:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e097caa50f01b35e7d9dfc53612060f4ea5d7cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7d:87:fe:42:ae:04:db:c5:80:75:58:7e:7d:
4a:39:aa:4b:56:6a:4f:55:ae:ad:c6:c9:c9:b5:8b:
e1:32:69:92:a1:0d:34:f1:14:3d:ae:bc:94:b0:8e:
22:1d:98:25:22:af:c6:ea:67:69:02:cc:29:5f:7d:
da:2f:b6:8c:9f:bd:10:92:b5:c8:6c:fc:a8:a0:e8:
65:87:dd:10:78:92:89:22:02:51:7e:05:92:ec:c4:
fb:c9:57:40:9f:8f:f5:23:c7:a2:42:a6:07:cc:46:
05:a5:21:cf:a1:03:11:22:59:39:85:0c:f5:72:e1:
cd:6f:be:4f:4b:e0:1f:f8:af:76:39:b3:b9:12:96:
8e:9e:7a:d0:23:07:86:6d:86:42:83:2b:d5:e5:b2:
1a:82:d5:be:5a:f7:95:04:25:f7:ee:7b:6d:6d:e4:
8a:06:02:64:35:ce:2a:ba:e7:1f:dc:3d:cc:52:4a:
cf:28:a6:ff:d2:ab:ac:74:9e:77:1c:7d:78:ec:2f:
f9:45:6f:d4:b8:61:ce:9f:0e:2f:b8:51:84:bd:c1:
a7:28:d9:a0:39:5b:66:31:45:22:42:2a:c1:cb:66:
96:35:c9:9f:23:9c:0a:89:11:f9:08:9f:49:9f:82:
f0:2e:ad:6f:ea:e3:66:0b:f6:5a:3a:12:52:72:b5:
99:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:97:CA:A5:0F:01:B3:5E:7D:9D:FC:53:61:20:60:F4:EA:5D:7C:EE
X509v3 Authority Key Identifier:
keyid:C1:1D:08:18:64:33:90:30:69:B5:D6:BB:65:2F:98:42:8F:53:C8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wR0IGGQzkDBptda7ZS-YQo9TyAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/4JfKpQ8Bs159nfxTYSBg9OpdfO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/wR0IGGQzkDBptda7ZS-YQo9TyAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.40.0/23
91.215.44.0-91.215.46.255
195.60.64.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:d2:76:13:ff:b7:a7:d0:89:11:01:b7:e3:09:5c:2e:f3:05:
e4:46:1f:c5:04:93:02:ad:97:23:6d:ba:cb:bd:3d:07:de:84:
ee:b5:19:63:01:05:33:81:9e:18:6a:1f:42:c5:d6:7f:07:80:
12:9c:14:37:8a:a2:11:60:b6:9e:9e:9e:72:f0:82:d0:2d:b4:
74:e9:8a:c5:b2:7c:0f:f2:c4:19:b6:73:91:83:00:32:1e:24:
cf:27:32:8b:3d:ab:94:dc:8b:03:1d:27:63:12:ee:08:54:48:
ef:bf:c5:44:95:fb:fa:9e:51:17:6a:76:f4:b9:d1:5d:0d:c5:
0b:49:ff:5b:f6:20:cc:40:a0:82:ab:fa:9a:98:81:72:88:6d:
ea:8d:54:64:80:3c:b5:a3:b7:1e:06:2f:1a:d6:a4:55:60:31:
1a:ac:14:2a:1a:58:47:55:83:ce:64:a1:77:05:b4:9f:21:e3:
dc:a0:50:1f:ef:a8:6d:e7:c5:fc:81:96:84:8a:d3:2a:06:a2:
a8:c6:ac:6f:f8:5e:06:e1:fb:e2:5e:ad:3a:d8:97:c2:a4:c8:
26:87:94:ce:c2:45:47:4d:23:84:aa:95:4f:c4:da:01:6d:3f:
42:fe:80:3f:92:f9:aa:9b:71:5a:52:d4:b7:ed:eb:87:3c:e9:
8b:34:85:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:01:45 2026 by rpki-client