Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/m4DpurF7pXpEMEv3x379sHsIzI0.roa
File: m4DpurF7pXpEMEv3x379sHsIzI0.roa (raw, json)
Hash identifier: AQ+Y/OhWDwIEf3fur9MU0/7BD96QO4hZo7G0csSPbMo=
Subject key identifier: 9B:80:E9:BA:B1:7B:A5:7A:44:30:4B:F7:C7:7E:FD:B0:7B:08:CC:8D
Certificate issuer: /CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Certificate serial: 019F66173C1DDF029DC2A9A84AA7533ECD7B
Authority key identifier: 61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/m4DpurF7pXpEMEv3x379sHsIzI0.roa
Signing time: Wed 15 Jul 2026 14:03:46 +0000
ROA not before: Wed 15 Jul 2026 14:03:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211796
IP address blocks: 89.126.232.0/24 maxlen: 24
91.188.248.0/24 maxlen: 24
91.188.249.0/24 maxlen: 24
91.202.244.0/24 maxlen: 24
2a0c:6ec0:1::/48 maxlen: 48
2a0c:6ec0:2::/48 maxlen: 48
2a0c:6ec0:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:66:17:3c:1d:df:02:9d:c2:a9:a8:4a:a7:53:3e:cd:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Validity
Not Before: Jul 15 14:03:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b80e9bab17ba57a44304bf7c77efdb07b08cc8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:58:c9:8d:06:51:bc:99:43:2e:a7:15:c9:bf:
b0:55:1e:b8:f9:84:14:03:d0:fe:52:b8:d0:f9:94:
36:02:7c:e1:8c:54:a0:48:59:91:ca:d1:45:ce:1a:
e8:20:65:30:93:2a:ab:a9:08:44:69:d3:44:13:de:
44:c8:39:c1:80:fe:dd:0e:8b:91:92:2a:1c:b1:ef:
4c:c2:57:ef:fa:14:c3:0f:a2:95:53:67:e8:2c:6c:
c3:45:d6:85:e4:0b:bf:56:42:77:5f:5a:de:28:ab:
7d:86:17:e2:05:ef:06:26:d3:d1:28:a3:5b:fc:56:
ce:de:3e:3f:4c:a5:4c:c3:9e:f5:98:2f:4b:9c:d4:
48:ed:8a:1f:d0:ed:16:59:71:73:23:92:9b:ab:37:
d6:2b:ce:b0:b6:72:7c:19:75:7b:12:fd:77:6a:84:
b7:78:27:ec:93:0e:e8:0f:33:86:12:54:f7:ca:54:
aa:39:03:fa:a4:af:91:0e:3d:bc:e6:6c:b1:e3:43:
b8:f8:db:bf:52:e3:63:a6:ca:49:39:1b:02:3f:3e:
34:60:c8:df:2f:82:73:4b:0f:cb:c1:85:be:fb:6a:
be:83:17:d0:3b:3c:28:e9:ba:56:43:ff:0f:fc:af:
4a:23:d8:25:34:cc:cc:fb:4e:8c:b7:50:01:7c:0b:
2c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:80:E9:BA:B1:7B:A5:7A:44:30:4B:F7:C7:7E:FD:B0:7B:08:CC:8D
X509v3 Authority Key Identifier:
keyid:61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/m4DpurF7pXpEMEv3x379sHsIzI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.126.232.0/24
91.188.248.0/23
91.202.244.0/24
IPv6:
2a0c:6ec0:1::-2a0c:6ec0:3:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1c:ec:df:5c:81:60:9a:f3:6a:36:20:8b:78:9c:4b:10:78:f7:
cd:8a:2e:db:7f:b6:13:5c:f9:ea:a3:0e:8c:0f:2f:21:5e:cb:
a9:28:41:f3:0c:a5:13:0f:b0:a8:59:4b:a9:cc:f1:36:e8:3b:
e1:a2:61:da:74:4b:53:1c:6d:78:ff:d8:60:f0:0d:2d:f1:b3:
68:84:e1:92:31:e6:57:a6:41:04:6f:cc:1a:2e:b8:84:18:81:
0a:7c:50:8f:25:b2:76:ba:13:8c:ed:73:84:c9:a7:35:b1:75:
10:c4:cf:20:53:70:ba:07:70:7d:04:7d:d7:40:2e:43:bd:f6:
db:28:f4:c4:60:d6:10:9d:24:31:1f:3d:f1:ae:29:c6:7d:d0:
df:29:e2:98:9d:8f:f3:34:88:6c:27:71:1c:33:e3:3b:a6:58:
b5:44:62:6e:df:68:7d:d7:17:c1:d3:36:b8:a8:dd:10:87:5f:
a3:f2:ae:22:35:8f:21:39:c7:00:02:ea:4d:a2:dc:d4:2c:3d:
d7:13:92:ec:41:a0:26:9a:f9:0d:05:14:48:13:9b:f2:37:f9:
9d:8e:42:4c:81:92:13:34:ad:55:9f:e3:5b:40:da:8f:e3:64:
61:19:5d:5c:86:69:72:d8:fa:18:b0:be:17:8d:ad:ec:a0:96:
a5:d0:c7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:14:45 2026 by rpki-client