Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/242faa-eae3-46a5-b774-38820548755c/1/yXkD904wFbX88UGQ5CKmV5wKmSY.roa
File: yXkD904wFbX88UGQ5CKmV5wKmSY.roa (raw, json)
Hash identifier: lYxnL52wtUr2micMeYUTFrTapb4xBck2cprtfMipDjk=
Subject key identifier: C9:79:03:F7:4E:30:15:B5:FC:F1:41:90:E4:22:A6:57:9C:0A:99:26
Certificate issuer: /CN=69a8e68d12ae293af2369043cd59a020dac24062
Certificate serial: 019F6F5F068A8083AE6CBC95275DA1D857F0
Authority key identifier: 69:A8:E6:8D:12:AE:29:3A:F2:36:90:43:CD:59:A0:20:DA:C2:40:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aajmjRKuKTryNpBDzVmgINrCQGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/242faa-eae3-46a5-b774-38820548755c/1/yXkD904wFbX88UGQ5CKmV5wKmSY.roa
Signing time: Fri 17 Jul 2026 09:18:46 +0000
ROA not before: Fri 17 Jul 2026 09:18:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31367
IP address blocks: 91.200.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/242faa-eae3-46a5-b774-38820548755c/1/aajmjRKuKTryNpBDzVmgINrCQGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/242faa-eae3-46a5-b774-38820548755c/1/aajmjRKuKTryNpBDzVmgINrCQGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aajmjRKuKTryNpBDzVmgINrCQGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6f:5f:06:8a:80:83:ae:6c:bc:95:27:5d:a1:d8:57:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a8e68d12ae293af2369043cd59a020dac24062
Validity
Not Before: Jul 17 09:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c97903f74e3015b5fcf14190e422a6579c0a9926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1e:30:cb:35:3d:10:3a:b7:09:33:78:30:13:
c1:21:f8:dd:ff:e8:46:89:26:67:cd:6c:48:82:4c:
0b:70:79:b3:41:25:60:24:2f:7f:e4:63:d0:02:56:
02:69:c8:17:a3:80:2c:b6:f7:59:08:90:09:be:05:
a3:30:79:a1:23:af:f0:49:e5:40:d8:d1:66:9e:44:
6a:92:32:39:fe:29:45:bd:77:6e:cd:f3:78:b9:6f:
d6:3b:da:b8:7c:db:ea:ca:53:a5:d9:d6:d4:37:38:
0f:24:bd:c5:78:26:8d:74:e9:81:1e:ba:dd:c0:2f:
8d:f9:eb:27:ba:51:9f:9e:a4:f1:67:82:11:24:86:
17:90:d2:d9:16:61:83:6b:68:47:31:11:d1:c3:a7:
00:f1:96:8d:2d:3a:1e:85:07:15:13:c6:9b:95:a1:
96:9a:e2:26:89:f8:f9:83:86:56:d9:79:d8:db:fc:
68:35:d1:00:91:02:c9:d4:ed:b4:28:74:80:8a:aa:
7b:bf:a5:e3:2b:5c:b4:76:af:8f:d9:80:41:16:b6:
78:df:fd:42:ca:e2:48:ca:cb:c5:74:82:60:ec:24:
91:a0:9e:db:0e:16:1e:f0:9d:fb:4e:2b:4d:8c:69:
80:51:7d:4b:c2:4a:34:a1:f1:fd:22:56:e5:93:8b:
c7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:79:03:F7:4E:30:15:B5:FC:F1:41:90:E4:22:A6:57:9C:0A:99:26
X509v3 Authority Key Identifier:
keyid:69:A8:E6:8D:12:AE:29:3A:F2:36:90:43:CD:59:A0:20:DA:C2:40:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aajmjRKuKTryNpBDzVmgINrCQGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/242faa-eae3-46a5-b774-38820548755c/1/yXkD904wFbX88UGQ5CKmV5wKmSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/242faa-eae3-46a5-b774-38820548755c/1/aajmjRKuKTryNpBDzVmgINrCQGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.177.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:66:64:e2:f4:a5:06:60:a8:ea:f7:cb:dd:13:01:03:2f:3a:
fb:15:63:80:ac:d0:d4:7f:f1:ef:58:05:9f:3b:68:72:2d:bd:
60:58:74:22:8d:f1:77:4a:90:7b:56:3a:31:63:f7:32:cb:36:
4f:a7:6c:bc:c7:4b:40:0e:f3:2b:d6:37:36:72:d6:29:b9:a5:
f1:4e:45:3b:89:76:93:ea:e1:d5:3f:59:76:c0:56:2b:60:63:
54:ab:24:59:25:b0:b3:9f:9c:6b:6c:63:4a:08:e5:76:ae:40:
ce:a0:28:4f:8d:61:3a:1c:a0:08:29:90:7e:43:26:1f:18:d3:
52:43:0b:fe:b7:92:48:42:79:d6:dd:4c:e4:69:d5:67:69:f0:
7e:94:87:69:aa:cd:6b:a1:39:87:01:d8:14:f7:5f:5d:f6:5d:
ca:df:ee:ff:6c:a7:bd:1c:03:55:7f:c3:52:12:a7:a4:86:f2:
82:0d:96:e4:46:cf:4b:58:d2:76:f3:64:f2:0e:86:59:7b:58:
7e:6c:e0:6a:36:62:44:d4:9b:cc:d9:b5:de:c4:a9:89:25:b9:
ae:a2:4d:7a:be:64:1f:c1:06:81:cb:6b:ee:58:e3:12:e2:c4:
2a:8b:1e:c0:02:4c:d9:9c:24:7a:a4:25:77:11:f3:f1:f2:74:
96:08:30:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:48 2026 by rpki-client