Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/RkmzIDwv2MgHZyKYScrBn60mQH8.roa
File: RkmzIDwv2MgHZyKYScrBn60mQH8.roa (raw, json)
Hash identifier: w8dH9EMpt6cAmLFLrxm/+tA+56apr6HKvXBTw5qDHJ0=
Subject key identifier: 46:49:B3:20:3C:2F:D8:C8:07:67:22:98:49:CA:C1:9F:AD:26:40:7F
Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial: 019E87FB3316C8A7EC92F7438380E472375C
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/RkmzIDwv2MgHZyKYScrBn60mQH8.roa
Signing time: Tue 02 Jun 2026 10:57:27 +0000
ROA not before: Tue 02 Jun 2026 10:57:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62005
IP address blocks: 91.210.108.0/23 maxlen: 24
91.221.190.0/23 maxlen: 24
132.243.168.0/22 maxlen: 24
146.19.49.0/24 maxlen: 24
193.43.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:87:fb:33:16:c8:a7:ec:92:f7:43:83:80:e4:72:37:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Validity
Not Before: Jun 2 10:57:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4649b3203c2fd8c80767229849cac19fad26407f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:81:29:14:1e:21:09:1a:a6:ef:f2:9a:37:a5:
63:8d:3b:13:fa:f2:59:e9:83:76:f6:d9:bc:34:80:
cd:e7:ad:2a:00:08:c3:9c:7c:67:7c:4d:b8:38:30:
11:67:87:e3:2e:20:4e:a8:04:02:f4:69:d6:3e:8b:
3f:c6:1e:08:0f:2e:ea:97:32:67:ed:33:a2:b9:db:
23:cf:3b:b4:86:38:80:46:50:73:01:52:d8:b8:d4:
a0:ff:74:b5:68:e9:36:eb:0e:95:6c:9b:3d:36:7e:
b2:6d:65:b2:82:e3:11:99:f6:79:8a:5d:09:ff:18:
f6:9c:7d:93:b5:06:29:57:dd:c5:84:9b:54:f9:e8:
d8:d7:18:24:1f:7d:ba:e9:5d:fb:09:29:a0:44:30:
83:2e:18:03:aa:24:6b:a8:b4:9e:20:40:a8:b8:39:
86:0e:7e:55:19:cf:96:2e:0f:54:b9:ef:be:1c:49:
ca:13:b9:44:34:65:e7:fa:60:1d:cf:51:dc:05:b3:
35:84:09:bc:9f:11:10:17:c1:c7:6f:16:00:b5:be:
2b:a4:db:28:a5:cb:ee:43:5a:58:7c:2a:29:b0:c5:
ed:1a:c6:38:d1:4f:71:a5:d8:3f:b7:f6:1c:26:6d:
aa:cb:ef:e6:b7:62:cf:83:1d:2e:52:56:b8:4d:81:
65:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:49:B3:20:3C:2F:D8:C8:07:67:22:98:49:CA:C1:9F:AD:26:40:7F
X509v3 Authority Key Identifier:
keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/RkmzIDwv2MgHZyKYScrBn60mQH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.108.0/23
91.221.190.0/23
132.243.168.0/22
146.19.49.0/24
193.43.104.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:a6:bb:8c:3b:18:85:2a:7f:07:4c:b2:b9:99:5c:6d:b4:0b:
cf:08:ce:a8:c3:17:d8:16:32:e3:75:75:ce:e4:95:ef:8e:88:
84:d8:29:96:87:94:97:44:ba:61:36:29:fb:d8:f2:2b:99:04:
ed:9d:d2:76:20:77:f3:ab:9a:9b:30:51:e4:d4:28:09:29:d2:
d3:23:ff:c1:f4:d5:68:df:49:6c:42:a3:2a:d2:27:48:70:c0:
8d:7d:b8:cd:7a:ea:85:43:e4:0b:b4:5c:f1:1f:9b:90:64:ad:
31:35:3f:af:3a:99:07:fd:d8:05:7e:67:68:88:23:0f:95:35:
04:b6:6c:7c:d2:4e:ab:52:c8:7a:99:e5:67:3f:fb:a2:16:65:
5a:75:08:75:1a:f7:d5:1c:89:12:51:74:05:75:a2:14:8a:3f:
31:34:b3:b5:68:05:82:b8:12:58:34:7d:2a:fe:01:f2:a3:a0:
51:d5:1b:16:e0:ca:58:1e:26:98:d4:6a:52:6e:82:36:81:83:
e9:40:52:7a:3a:a8:43:67:e8:4b:f9:1a:1e:79:3c:6a:be:1f:
a1:3f:af:5d:3d:9a:28:b5:bc:e9:d4:11:3f:ea:6b:87:aa:81:
7a:71:eb:ac:e2:17:62:db:4e:3d:ca:4f:e5:d3:d6:9a:18:72:
79:7b:f7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:31:04 2026 by rpki-client