Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Uu6kgZoXxkmNniYXRrRma31jomI.roa
File: Uu6kgZoXxkmNniYXRrRma31jomI.roa (raw, json)
Hash identifier: SRpT2c+ZtineJthFU2Lj326eHBfCWg/PI6AuJE6p0HE=
Subject key identifier: 52:EE:A4:81:9A:17:C6:49:8D:9E:26:17:46:B4:66:6B:7D:63:A2:62
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 019CF7F3182FE4D2AB51F77D59DF06D57F5D
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Uu6kgZoXxkmNniYXRrRma31jomI.roa
Signing time: Mon 16 Mar 2026 18:40:29 +0000
ROA not before: Mon 16 Mar 2026 18:40:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 91.221.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f7:f3:18:2f:e4:d2:ab:51:f7:7d:59:df:06:d5:7f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Mar 16 18:40:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52eea4819a17c6498d9e261746b4666b7d63a262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:08:6f:79:c2:90:3d:cb:46:7f:b9:2b:3e:24:
bf:d3:19:8e:9b:ca:20:0e:83:21:13:10:ff:5f:12:
c0:72:15:c3:ec:27:72:fb:00:4c:9c:2b:66:4f:04:
0c:9e:75:6f:ed:13:bf:81:c1:d5:d5:59:23:b7:63:
05:5d:1b:62:53:a5:77:a9:89:ce:f1:e4:50:82:9f:
83:b3:91:fe:2d:ac:6d:ac:f4:c2:98:1d:7a:27:05:
62:f2:32:8a:b4:0e:e5:f3:c8:12:54:a4:5d:c4:5d:
24:e4:a6:42:b5:b5:37:5d:ea:e5:ad:2c:f7:a6:e3:
48:6e:1f:d7:0f:81:a2:16:a9:70:6e:4c:bb:d5:e9:
e5:62:e3:b0:99:e9:cf:60:df:98:2b:91:18:6b:d7:
d3:d2:5f:2a:17:ee:59:e4:1a:b4:46:d7:34:2a:f2:
6c:9e:36:a1:9d:f5:38:2f:a1:e0:9e:06:74:86:d1:
0a:db:b6:11:2e:c2:e6:f9:5f:7a:1f:07:eb:21:43:
35:a5:a2:0b:0c:83:aa:04:2a:4f:6c:68:7e:65:a6:
d6:87:2c:dd:1d:8a:56:25:b4:1d:ad:74:c5:90:f5:
b4:50:4b:b4:e8:07:2a:f8:52:17:ef:cd:3b:e2:d2:
aa:c6:e3:0a:d3:20:3d:d8:9e:d5:87:cc:05:9e:cb:
c9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EE:A4:81:9A:17:C6:49:8D:9E:26:17:46:B4:66:6B:7D:63:A2:62
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Uu6kgZoXxkmNniYXRrRma31jomI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.117.0/24
Signature Algorithm: sha256WithRSAEncryption
79:49:bd:41:57:10:d4:b2:54:4d:35:bf:f5:d3:47:c2:7e:e9:
f9:ef:0c:1c:9d:52:c3:4b:fd:97:54:0a:bf:a8:88:88:ba:2d:
03:85:3e:f7:3c:7a:e9:5c:f5:e9:38:9d:24:e9:b7:30:ef:5a:
4b:2c:02:d9:69:0a:4d:2f:0b:86:54:d6:d0:5d:2c:e2:62:c9:
c8:9f:96:ff:d9:50:d6:50:ee:a1:66:ec:b8:1a:40:b8:70:0f:
ee:de:ed:c5:71:f9:8e:ae:cc:ae:e5:93:cb:a3:50:11:55:32:
9f:3d:ae:f8:e7:f7:27:3e:02:ba:1c:0f:13:c1:8b:23:8c:3b:
ea:f1:f1:85:94:ad:73:0c:8c:21:2b:cc:b2:d6:ad:07:03:34:
a3:76:c9:b0:65:78:c0:c2:d1:3a:7b:0d:9e:ce:61:8c:00:92:
24:a4:b7:ab:ce:a6:65:ad:c6:35:8d:48:fc:2d:4a:0f:78:d1:
b3:3c:87:50:e0:8f:01:5e:01:1c:09:d3:fb:6c:a1:64:19:f0:
ab:43:a7:4c:e2:e8:0b:89:0b:ff:07:08:dd:6b:67:da:2e:e5:
20:5a:ac:d8:3f:c3:18:8a:dc:34:81:7a:35:78:d1:48:00:6c:
3e:1d:ce:fb:cf:d7:3c:09:cb:00:14:0b:2b:41:ff:e1:dc:14:
9c:00:b4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:34:40 2026 by rpki-client