Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/SIvhvF1If_eehl4BJQbNmZRMLCs.roa
File: SIvhvF1If_eehl4BJQbNmZRMLCs.roa (raw, json)
Hash identifier: A0jqff8Zj1Pg1atqnLNMXWm6hZKNe3Li8V1vNh3iP38=
Subject key identifier: 48:8B:E1:BC:5D:48:7F:F7:9E:86:5E:01:25:06:CD:99:94:4C:2C:2B
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 019DFB3CB16F96C645D5108551702C27E12F
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/SIvhvF1If_eehl4BJQbNmZRMLCs.roa
Signing time: Wed 06 May 2026 03:02:31 +0000
ROA not before: Wed 06 May 2026 03:02:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 91.221.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fb:3c:b1:6f:96:c6:45:d5:10:85:51:70:2c:27:e1:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: May 6 03:02:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=488be1bc5d487ff79e865e012506cd99944c2c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:89:be:62:31:a4:9a:ad:cc:40:58:df:95:90:
09:ba:ec:00:db:43:d7:80:4a:c2:2e:74:96:5b:34:
73:0c:e3:ce:c3:73:42:c3:33:a4:51:48:b7:5a:e5:
8a:13:e1:ac:fb:09:d5:8a:42:eb:aa:78:2d:f8:9a:
a6:ad:76:62:21:33:46:4b:98:d0:ab:d3:e9:f1:71:
c8:b9:d1:98:ed:46:6e:1c:c2:05:4c:6a:3d:01:59:
2e:24:0f:99:da:19:18:32:ee:16:27:0e:f2:63:d7:
e6:78:82:cd:9b:86:57:18:ca:e9:97:ab:fb:3c:96:
32:7e:4b:c3:14:fa:0e:e1:f4:6d:4e:dc:77:9d:6d:
bc:c8:fe:48:e8:17:fa:08:01:d1:a8:d9:bc:24:28:
2b:f9:56:4e:5e:c7:b3:c4:7c:ca:02:d1:05:f1:7f:
f0:ac:00:48:7c:9c:22:e5:84:4d:0f:5d:07:1e:25:
4f:37:fc:f8:be:7d:ad:e6:ab:92:3a:7a:dd:a5:ab:
2e:bb:14:00:d2:d0:79:c3:9b:6e:5a:21:29:3b:63:
3e:f4:76:cc:45:5b:38:31:2c:a0:d0:dd:72:4c:7a:
4a:be:29:ac:ae:02:df:a0:d0:23:b3:5d:e4:6d:c7:
70:f8:ac:61:b7:a8:88:7e:f1:e0:ac:cc:11:eb:1b:
b9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8B:E1:BC:5D:48:7F:F7:9E:86:5E:01:25:06:CD:99:94:4C:2C:2B
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/SIvhvF1If_eehl4BJQbNmZRMLCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.116.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:a9:f9:f3:ba:a1:4b:86:9a:02:87:08:19:38:d3:bf:5a:c8:
f4:d4:40:85:81:57:81:4e:e1:18:4f:e4:c1:de:f9:a3:b6:13:
b9:d4:a5:80:29:00:9d:12:c2:0a:6c:e5:ce:72:65:ef:ea:8d:
bf:c2:fe:bb:c3:17:89:00:21:f6:c5:ed:77:f1:0d:4e:de:b2:
a3:2e:72:67:bc:18:ca:b0:a9:d3:6b:8b:bf:9f:e8:0a:49:92:
ac:a3:91:80:c6:96:71:98:a5:83:89:d5:c2:1a:7c:7d:41:b9:
f6:5e:d2:2c:95:80:3d:0f:e4:72:6f:bd:19:17:30:32:76:63:
4d:d6:c9:7e:f8:38:f4:82:2e:d5:92:c2:c1:34:11:ae:24:cb:
fd:aa:6d:62:0d:1d:c9:ff:4d:2a:3f:0c:1b:26:0d:2e:7a:06:
5f:9f:5b:0f:77:66:34:76:6b:59:4c:84:6b:84:0f:e6:0b:a8:
fb:d2:ba:fc:eb:ef:bc:c5:60:11:7c:cf:4d:61:3a:fc:8d:38:
40:6a:44:02:cf:a2:b0:18:51:6a:11:21:70:77:b5:c4:49:31:
1c:c2:e9:4c:92:23:02:cb:82:b4:c1:00:0c:f1:72:46:72:df:
98:6a:75:ee:55:12:d1:e3:b7:0c:33:56:d2:8b:a1:50:86:1f:
ca:c9:b2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:17:08 2026 by rpki-client