Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/77501a-87cd-4cd4-820e-c7c9450c547e/1/S6bTx0qF225p9cGwxgAgpVMuMWg.roa
File: S6bTx0qF225p9cGwxgAgpVMuMWg.roa (raw, json)
Hash identifier: DKTGjtHQTIvBcsYzak9PEGsIxXLCwp43vh3q9YVtQ3w=
Subject key identifier: 4B:A6:D3:C7:4A:85:DB:6E:69:F5:C1:B0:C6:00:20:A5:53:2E:31:68
Certificate issuer: /CN=4637aea251854df59db7086ad7cf7bf15d29b2f3
Certificate serial: 01A115B947B461CC413564E05735236ADD9C
Authority key identifier: 46:37:AE:A2:51:85:4D:F5:9D:B7:08:6A:D7:CF:7B:F1:5D:29:B2:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjeuolGFTfWdtwhq18978V0psvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/77501a-87cd-4cd4-820e-c7c9450c547e/1/S6bTx0qF225p9cGwxgAgpVMuMWg.roa
Signing time: Wed 07 Oct 2026 09:37:06 +0000
ROA not before: Wed 07 Oct 2026 09:37:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199383
IP address blocks: 91.235.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/77501a-87cd-4cd4-820e-c7c9450c547e/1/RjeuolGFTfWdtwhq18978V0psvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/77501a-87cd-4cd4-820e-c7c9450c547e/1/RjeuolGFTfWdtwhq18978V0psvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RjeuolGFTfWdtwhq18978V0psvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:b9:47:b4:61:cc:41:35:64:e0:57:35:23:6a:dd:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4637aea251854df59db7086ad7cf7bf15d29b2f3
Validity
Not Before: Oct 7 09:37:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ba6d3c74a85db6e69f5c1b0c60020a5532e3168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b9:cb:52:06:af:bc:9a:d4:1f:6e:fb:b2:5a:
cf:3d:50:bb:3c:24:a6:12:e7:0c:3f:67:43:e8:e2:
97:5b:09:8f:a8:0b:b9:b3:c1:47:a8:3f:6e:3a:67:
e6:82:e5:44:58:ee:d7:7c:21:bb:c1:97:75:19:8f:
e6:51:f7:43:c6:7c:e5:05:3b:de:10:00:77:8e:ef:
75:a0:64:eb:cb:8f:94:70:f9:92:89:7f:68:b0:d5:
08:5d:20:2c:bb:ef:bc:82:b6:e6:f9:21:fe:d3:f0:
1e:5b:74:c3:70:b5:27:37:4f:58:2b:64:86:b2:e8:
e5:1c:92:4a:22:3f:72:2c:95:e6:62:b2:ec:ce:73:
db:43:af:6c:61:4d:73:1c:01:6d:0b:79:b5:fe:63:
4f:7d:fa:4b:0f:a2:00:ea:19:02:62:88:97:e7:81:
88:cb:2d:86:fd:bf:80:55:60:14:d1:e6:4f:cd:0c:
94:06:21:61:89:18:95:62:fa:6b:b4:4a:82:d4:01:
ab:d3:4f:29:a3:9e:04:de:a4:5a:5c:9e:22:85:b4:
64:a2:b6:62:48:3a:0f:ca:7c:1f:5c:9f:32:b7:a0:
49:18:ac:a9:30:0e:7e:6d:e2:39:04:27:52:29:0e:
26:49:a8:e8:d8:07:5d:7b:76:b0:ef:3c:e0:4b:a3:
36:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A6:D3:C7:4A:85:DB:6E:69:F5:C1:B0:C6:00:20:A5:53:2E:31:68
X509v3 Authority Key Identifier:
keyid:46:37:AE:A2:51:85:4D:F5:9D:B7:08:6A:D7:CF:7B:F1:5D:29:B2:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjeuolGFTfWdtwhq18978V0psvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/77501a-87cd-4cd4-820e-c7c9450c547e/1/S6bTx0qF225p9cGwxgAgpVMuMWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/77501a-87cd-4cd4-820e-c7c9450c547e/1/RjeuolGFTfWdtwhq18978V0psvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.138.0/24
Signature Algorithm: sha256WithRSAEncryption
51:84:33:96:20:e8:ad:65:f3:60:84:9c:6a:69:2a:37:d0:11:
01:69:a0:cc:d7:91:75:97:a3:6d:46:7c:53:09:0b:36:cc:42:
11:e0:c2:69:cc:0e:ef:fb:6d:4c:24:9f:a7:7b:26:60:a7:35:
ad:25:f9:56:de:dc:5d:aa:46:ce:dc:e4:f6:f6:59:df:4c:2b:
b8:11:af:fd:de:7d:a4:91:85:c0:8f:ec:ed:ab:64:0a:a8:37:
79:b7:e9:13:1b:83:ae:73:fe:dd:00:b9:88:b2:55:72:98:18:
b6:52:77:65:ea:7f:36:7a:95:ca:9f:8a:0b:fe:0d:8d:ae:74:
65:4c:e9:98:1f:8d:d6:10:53:c7:f8:d6:27:69:52:3f:e0:85:
e5:38:ec:49:6f:d0:78:e9:8f:dd:40:10:34:10:8f:48:24:e8:
fc:10:5b:82:d4:65:2b:95:98:9e:e6:2e:63:b6:d6:54:5b:91:
ff:65:b3:f8:04:e4:24:d3:32:72:97:1e:7a:81:ef:a0:ec:db:
d6:48:37:df:35:8d:a2:04:64:7e:c1:fd:74:17:27:80:38:2a:
fc:6d:6f:fc:18:12:c9:27:b0:b8:72:11:6e:78:d7:51:26:4b:
73:97:b1:f9:30:c6:ed:91:45:d3:7b:a4:9b:6e:68:6a:4b:56:
2b:cb:ec:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:51:16 2026 by rpki-client