Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/aac8da-9eec-4587-9e73-e9618c3b5a95/1/sNkrn4e_iEhVmsY7BKmVgiJzrPk.roa
File: sNkrn4e_iEhVmsY7BKmVgiJzrPk.roa (raw, json)
Hash identifier: Wi4vAN2/n0xlq6WCGCToRrJhwKyrF46LKv+aBLh5wr4=
Subject key identifier: B0:D9:2B:9F:87:BF:88:48:55:9A:C6:3B:04:A9:95:82:22:73:AC:F9
Certificate issuer: /CN=91cb57d7e1e767b53efde4e6ca35e6ead63ea0f2
Certificate serial: 019DD892BF6D1D146E38B553505C66AF0B41
Authority key identifier: 91:CB:57:D7:E1:E7:67:B5:3E:FD:E4:E6:CA:35:E6:EA:D6:3E:A0:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kctX1-HnZ7U-_eTmyjXm6tY-oPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/aac8da-9eec-4587-9e73-e9618c3b5a95/1/sNkrn4e_iEhVmsY7BKmVgiJzrPk.roa
Signing time: Wed 29 Apr 2026 09:29:49 +0000
ROA not before: Wed 29 Apr 2026 09:29:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3170
IP address blocks: 193.239.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/aac8da-9eec-4587-9e73-e9618c3b5a95/1/kctX1-HnZ7U-_eTmyjXm6tY-oPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/aac8da-9eec-4587-9e73-e9618c3b5a95/1/kctX1-HnZ7U-_eTmyjXm6tY-oPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kctX1-HnZ7U-_eTmyjXm6tY-oPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 May 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d8:92:bf:6d:1d:14:6e:38:b5:53:50:5c:66:af:0b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91cb57d7e1e767b53efde4e6ca35e6ead63ea0f2
Validity
Not Before: Apr 29 09:29:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0d92b9f87bf8848559ac63b04a995822273acf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d5:96:46:2c:79:39:d4:6e:ad:6a:a1:98:6e:
5c:ef:82:b2:5a:07:25:34:ed:7d:df:c8:94:d4:0f:
15:23:e9:48:75:8f:fb:b4:30:34:01:0c:1a:c5:a8:
63:24:5a:58:5c:13:67:fc:94:79:60:99:84:6e:31:
8c:48:cf:db:ae:be:a8:d2:75:7f:75:31:59:28:9a:
5f:5a:89:1d:d1:56:29:85:f1:10:8f:28:9e:4b:52:
c5:c4:66:48:ef:45:03:3d:5c:ef:91:62:6b:11:97:
07:00:b6:37:72:17:f7:3d:96:03:05:26:d2:9e:1a:
67:6c:83:c8:14:3d:68:7e:e9:f5:6e:42:76:74:ae:
c7:31:c3:e4:c1:a1:6f:ae:fa:12:c4:a4:48:09:5d:
c5:6e:5e:5e:f8:63:97:54:9a:f4:2e:4e:22:e9:5a:
c1:75:97:6b:d8:8c:9b:0c:b6:6d:ad:ef:b8:ee:96:
79:ee:ed:3b:ca:ec:bb:7e:22:24:74:19:df:30:3f:
d1:98:3a:ec:d3:da:8b:08:75:28:05:6f:69:36:fb:
24:de:87:e3:d7:eb:52:15:c2:3f:96:1a:1c:8a:c1:
85:fe:44:37:63:e3:de:6c:77:67:4d:48:97:fe:ab:
c1:de:13:ae:cd:a1:46:e3:b7:2e:06:40:36:11:42:
0f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D9:2B:9F:87:BF:88:48:55:9A:C6:3B:04:A9:95:82:22:73:AC:F9
X509v3 Authority Key Identifier:
keyid:91:CB:57:D7:E1:E7:67:B5:3E:FD:E4:E6:CA:35:E6:EA:D6:3E:A0:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kctX1-HnZ7U-_eTmyjXm6tY-oPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/aac8da-9eec-4587-9e73-e9618c3b5a95/1/sNkrn4e_iEhVmsY7BKmVgiJzrPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/aac8da-9eec-4587-9e73-e9618c3b5a95/1/kctX1-HnZ7U-_eTmyjXm6tY-oPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.174.0/23
Signature Algorithm: sha256WithRSAEncryption
02:2e:ec:66:09:92:b2:ab:8b:36:bb:a9:42:8b:40:43:22:bd:
75:79:5c:38:a7:89:10:11:10:c4:88:cb:8f:3d:4d:fc:47:70:
ac:15:dd:c9:0b:64:f3:be:8c:94:1d:e5:8b:72:cb:b4:e1:70:
a4:ed:0f:63:7f:05:ec:7d:58:71:f4:65:98:80:14:45:11:1e:
de:4f:70:c7:62:ff:fc:f7:6d:58:fa:90:cb:95:4d:bf:06:95:
7c:e0:f0:cc:dd:b9:03:7f:9a:1f:20:00:11:b9:31:47:4c:1b:
54:31:5b:ca:90:90:f5:e5:3e:af:73:39:fc:fd:95:b3:58:20:
a2:50:db:25:1c:07:b0:e9:94:52:ae:b8:a3:7c:6f:3b:95:d9:
ce:fc:b2:ca:cb:79:15:f5:e5:b7:7c:b8:e1:46:8e:30:c0:62:
e0:6b:14:9f:d8:46:47:34:35:9b:fd:47:0e:ed:98:3e:bd:18:
4f:ff:7b:3f:cf:42:84:2f:84:e0:15:f9:91:7a:fc:c6:e4:50:
e2:1c:ff:33:fd:7e:93:0a:20:57:27:f5:0f:49:b5:a9:b2:a0:
c7:69:16:4a:11:5f:3b:be:87:e7:04:af:2a:b2:cd:46:4c:7f:
b8:d1:a6:3f:52:8b:67:ea:dd:45:f8:17:84:d7:23:24:b5:ed:
00:34:b9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 09:14:31 2026 by rpki-client