Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/Ps1Fm5-3fMaGfagQSJZpGv8fa4g.roa
File: Ps1Fm5-3fMaGfagQSJZpGv8fa4g.roa (raw, json)
Hash identifier: 9YLroviAwMkOWqDYpr1xALG9eiz5p8F1qgoHGq+NZt4=
Subject key identifier: 3E:CD:45:9B:9F:B7:7C:C6:86:7D:A8:10:48:96:69:1A:FF:1F:6B:88
Certificate issuer: /CN=a484e902fb2c70bdb99b150d533f44e6233b5d12
Certificate serial: 019F236894E23E83025370A0ACB144733A11
Authority key identifier: A4:84:E9:02:FB:2C:70:BD:B9:9B:15:0D:53:3F:44:E6:23:3B:5D:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pITpAvsscL25mxUNUz9E5iM7XRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/Ps1Fm5-3fMaGfagQSJZpGv8fa4g.roa
Signing time: Thu 02 Jul 2026 15:18:04 +0000
ROA not before: Thu 02 Jul 2026 15:18:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198108
IP address blocks: 91.216.232.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/pITpAvsscL25mxUNUz9E5iM7XRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/pITpAvsscL25mxUNUz9E5iM7XRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pITpAvsscL25mxUNUz9E5iM7XRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:94:e2:3e:83:02:53:70:a0:ac:b1:44:73:3a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a484e902fb2c70bdb99b150d533f44e6233b5d12
Validity
Not Before: Jul 2 15:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ecd459b9fb77cc6867da8104896691aff1f6b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0e:6c:94:be:ab:19:25:bb:3b:e0:81:dc:76:
6f:bb:66:f4:11:0d:6b:3a:ed:15:43:10:84:58:25:
3b:c4:5a:6f:a6:d5:5d:29:db:7e:cb:d8:f7:93:e4:
d7:eb:a7:3a:98:39:11:5c:df:2a:4d:b9:4c:44:c3:
f5:18:52:51:cd:a3:e5:ab:b3:6a:d3:25:d1:f4:5e:
8e:44:ad:e0:8f:67:6e:05:09:8a:bb:fb:e5:bb:f9:
cc:35:7a:57:f5:a3:1b:d4:6a:49:83:92:c5:c3:70:
6c:51:68:b4:4c:fb:a0:e1:c9:35:e5:83:71:52:bf:
48:56:70:04:94:51:fe:99:b4:3e:aa:1a:41:47:d7:
02:40:b9:43:cd:2d:41:b5:4a:b4:0d:f4:10:26:b4:
b1:a3:8d:46:b1:f1:c0:60:ab:3b:18:bf:2f:d1:a9:
89:ee:3d:e2:a2:97:4d:49:b8:bc:07:f7:8b:b6:df:
86:f9:ad:fd:82:5d:44:70:e8:40:53:a4:79:b4:51:
b2:94:f7:af:de:44:9a:0a:e0:bc:e1:7a:da:5c:b1:
e0:81:23:a1:b8:38:3f:98:c6:34:61:ad:25:78:7d:
70:d0:49:6a:ab:c2:b9:79:51:1f:32:53:0e:25:27:
2e:f7:22:ec:3b:19:f6:4f:1f:52:37:f8:e0:8c:e1:
82:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CD:45:9B:9F:B7:7C:C6:86:7D:A8:10:48:96:69:1A:FF:1F:6B:88
X509v3 Authority Key Identifier:
keyid:A4:84:E9:02:FB:2C:70:BD:B9:9B:15:0D:53:3F:44:E6:23:3B:5D:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pITpAvsscL25mxUNUz9E5iM7XRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/Ps1Fm5-3fMaGfagQSJZpGv8fa4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/pITpAvsscL25mxUNUz9E5iM7XRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.232.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:4b:df:fd:ea:23:c2:57:ff:55:fe:3b:f8:eb:23:57:0d:21:
70:ea:e5:21:87:9d:de:02:fd:5e:95:ee:d7:18:b7:54:c6:d7:
8d:17:a4:2d:af:af:b8:8e:5f:87:6d:0c:84:59:54:15:f4:cf:
7d:fe:8f:1b:19:6e:ec:f1:eb:c7:e1:ae:9e:75:47:9c:a3:58:
11:e3:f8:85:09:6b:a3:d9:f6:db:78:0b:4f:db:28:5e:37:69:
9a:90:f1:35:d1:c5:b4:c9:fc:76:ec:50:97:c6:0d:38:67:7e:
0a:31:1d:8b:28:44:bf:75:1e:01:82:f1:60:af:e8:56:74:62:
ae:92:eb:77:75:ee:a4:bf:cd:e2:bf:71:27:42:ef:b5:0a:14:
e9:e6:7b:cd:fb:38:b3:4c:35:b9:d4:bc:a6:fd:15:d0:e3:5c:
02:a9:7f:94:ba:09:0d:d4:a9:9a:66:1e:30:fb:36:e7:e8:3e:
94:33:d5:12:05:12:bf:71:9e:7d:25:f6:39:16:25:42:88:66:
72:8c:fc:37:78:30:b5:0e:ca:53:98:41:20:1f:e2:03:18:d3:
e9:b9:73:0b:5c:e7:9c:54:6d:89:aa:da:b5:d7:01:da:24:45:
f5:05:21:17:44:0f:36:cc:07:7e:16:b4:fe:b3:0d:fe:a8:04:
2b:0d:78:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:19:18 2026 by rpki-client