Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/FYE5Q3Mlv51odwTBANvIYF0s6IA.roa
File: FYE5Q3Mlv51odwTBANvIYF0s6IA.roa (raw, json)
Hash identifier: r/sE12BhKzVBtzNy9xBdk9/yYXwH8MFHHau2SN5trWA=
Subject key identifier: 15:81:39:43:73:25:BF:9D:68:77:04:C1:00:DB:C8:60:5D:2C:E8:80
Certificate issuer: /CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Certificate serial: 019DAF8251DCE993C075C8D977CFFB602DC3
Authority key identifier: D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/FYE5Q3Mlv51odwTBANvIYF0s6IA.roa
Signing time: Tue 21 Apr 2026 10:07:26 +0000
ROA not before: Tue 21 Apr 2026 10:07:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213466
IP address blocks: 91.135.176.0/23 maxlen: 23
91.135.176.0/24 maxlen: 24
91.135.177.0/24 maxlen: 24
91.135.178.0/24 maxlen: 24
91.135.179.0/24 maxlen: 24
91.135.181.0/24 maxlen: 24
91.135.182.0/23 maxlen: 23
91.135.182.0/24 maxlen: 24
91.135.183.0/24 maxlen: 24
91.135.184.0/24 maxlen: 24
91.135.185.0/24 maxlen: 24
91.135.186.0/24 maxlen: 24
91.135.187.0/24 maxlen: 24
91.135.188.0/23 maxlen: 23
91.135.188.0/24 maxlen: 24
91.135.189.0/24 maxlen: 24
91.135.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:af:82:51:dc:e9:93:c0:75:c8:d9:77:cf:fb:60:2d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Validity
Not Before: Apr 21 10:07:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=158139437325bf9d687704c100dbc8605d2ce880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ec:18:e4:50:41:12:88:1e:22:e2:b9:14:01:
87:9e:4a:6b:e5:37:a3:d4:ad:6e:4b:f0:b7:4f:97:
69:f6:20:65:c6:7c:22:e8:48:12:b8:64:ea:e3:84:
13:1d:80:e4:f2:e7:e7:c2:9b:0c:d0:f5:36:22:4c:
bc:d1:89:55:27:e0:e4:ac:5f:a7:5b:cc:10:e0:38:
68:c9:90:11:8b:a5:c0:5b:da:4c:8b:59:4b:c6:5e:
1d:e4:58:a5:15:65:9d:bb:5b:ba:e6:ea:ea:c8:28:
49:2b:f6:21:84:17:50:a7:c6:e6:6c:c6:47:1d:7e:
05:93:60:ab:7c:c2:35:39:1e:3e:23:78:7e:07:12:
73:14:b2:7c:7b:2e:e4:46:5c:27:ac:fc:18:b8:47:
6d:b3:81:fe:dd:64:36:1f:af:c4:bb:89:da:d5:e5:
04:e2:10:14:b6:5b:a2:63:38:3c:ef:0a:0c:ff:92:
cf:b4:82:06:d0:fb:77:30:55:93:f6:dc:71:73:fc:
b7:28:bf:c7:44:bb:bf:32:61:38:86:16:05:f2:37:
57:f8:9c:c9:77:87:73:cd:3c:25:80:d2:38:54:21:
3d:54:0d:80:ff:de:d4:63:7c:10:59:30:29:d3:86:
e8:ed:9b:9d:6e:3f:d4:b9:74:ed:7b:f9:9b:fb:cd:
09:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:81:39:43:73:25:BF:9D:68:77:04:C1:00:DB:C8:60:5D:2C:E8:80
X509v3 Authority Key Identifier:
keyid:D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/FYE5Q3Mlv51odwTBANvIYF0s6IA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.135.176.0/22
91.135.181.0-91.135.189.255
91.135.191.0/24
Signature Algorithm: sha256WithRSAEncryption
11:a8:b9:c0:7a:96:ae:07:43:fe:13:e2:22:6a:5c:70:f5:2f:
65:3e:20:31:9d:cc:bb:52:30:d1:9a:ab:12:31:90:fd:3c:8a:
5d:43:4a:ed:65:23:b8:a4:dd:a9:02:1b:5b:ff:27:24:f8:53:
39:df:53:49:d8:9c:13:e8:76:0a:8c:f5:6d:62:9b:b1:5b:a6:
29:74:af:e1:fc:19:25:11:2c:35:bb:dc:12:e3:82:3a:91:7c:
9f:d9:45:8d:53:23:e4:eb:15:e7:f7:02:a7:4f:75:aa:1f:6f:
3d:6c:f4:06:76:1b:bb:e9:19:40:71:89:5b:ab:b9:f0:34:29:
a0:70:d1:1c:e2:3a:f2:5a:a0:d2:78:4e:4e:71:9a:e0:35:53:
68:6f:0c:92:15:59:a5:f2:de:e0:4d:52:77:a1:83:e5:e0:82:
14:94:79:b9:cd:1d:9a:a1:c4:ed:fc:c0:0a:1c:51:9a:66:13:
bb:30:7f:bd:09:64:b1:15:dd:d4:e6:49:c6:a7:2c:b8:6a:22:
11:57:72:7c:77:95:99:5b:84:68:c8:16:a4:ec:b3:4a:95:b9:
3e:f8:65:7e:cf:7e:fd:e2:2a:74:5e:40:aa:00:f8:16:5c:61:
e5:0c:3e:bd:ae:65:b7:e3:30:a8:8e:8e:05:32:c8:8b:be:85:
f9:6a:74:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:28:24 2026 by rpki-client