Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/xCaYNGpP4uLWhfHqxPMUEQYMbhk.roa
File: xCaYNGpP4uLWhfHqxPMUEQYMbhk.roa (raw, json)
Hash identifier: M179D5ht95HXvmui8qseKlw67qEOyUtRNjFtSwuAk2Y=
Subject key identifier: C4:26:98:34:6A:4F:E2:E2:D6:85:F1:EA:C4:F3:14:11:06:0C:6E:19
Certificate issuer: /CN=bba3bdb2c7846fbf7d0087db4552eeb363df9ea5
Certificate serial: 01A1787388B5BBEC11D35C6CD7B0AE24253D
Authority key identifier: BB:A3:BD:B2:C7:84:6F:BF:7D:00:87:DB:45:52:EE:B3:63:DF:9E:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/xCaYNGpP4uLWhfHqxPMUEQYMbhk.roa
Signing time: Mon 26 Oct 2026 13:43:19 +0000
ROA not before: Mon 26 Oct 2026 13:43:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44090
IP address blocks: 91.227.27.0/24 maxlen: 24
2a11:4e00::/29 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:73:88:b5:bb:ec:11:d3:5c:6c:d7:b0:ae:24:25:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bba3bdb2c7846fbf7d0087db4552eeb363df9ea5
Validity
Not Before: Oct 26 13:43:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c42698346a4fe2e2d685f1eac4f31411060c6e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:51:a2:69:ce:8f:c9:c5:b7:22:64:5a:cf:2f:
3c:1e:61:99:b9:c3:b3:23:88:25:24:49:62:56:d9:
ba:6c:f1:87:dc:92:60:d5:75:5a:90:7a:13:99:a1:
ef:ef:b3:b2:a6:28:49:c0:4a:bc:87:35:b6:8d:af:
8e:b2:76:12:f9:8e:9a:63:a7:3d:a8:fb:9d:37:b2:
1b:74:28:44:a8:58:73:66:d0:dd:f6:fb:dc:05:2f:
f4:16:22:6a:25:79:76:8a:39:1a:d0:00:6b:b2:c9:
47:d1:cd:46:86:1e:0b:a0:d8:85:15:a8:b1:22:b7:
2e:50:9a:be:52:2f:85:e7:07:14:4f:68:05:c5:25:
ad:3a:51:6d:37:21:df:e2:eb:6f:de:c2:6c:cc:9c:
d0:81:14:2c:ef:89:ba:e9:e6:83:1d:f4:ad:01:63:
3e:be:da:22:72:32:22:a5:ff:97:35:23:4c:71:df:
4a:20:61:14:e4:3c:24:9b:6c:22:1f:96:60:ac:0f:
46:2b:15:ea:d0:57:16:ea:89:b2:19:5d:51:95:c2:
c8:d4:92:53:4f:cc:09:2e:5d:db:15:49:40:f6:fe:
0c:d1:e6:b9:c6:91:a4:3e:ce:03:2d:2d:c0:72:fb:
b3:e3:a5:06:87:cd:38:f3:05:12:eb:58:40:35:86:
77:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:26:98:34:6A:4F:E2:E2:D6:85:F1:EA:C4:F3:14:11:06:0C:6E:19
X509v3 Authority Key Identifier:
keyid:BB:A3:BD:B2:C7:84:6F:BF:7D:00:87:DB:45:52:EE:B3:63:DF:9E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/xCaYNGpP4uLWhfHqxPMUEQYMbhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.27.0/24
IPv6:
2a11:4e00::/29
Signature Algorithm: sha256WithRSAEncryption
08:52:f9:d3:c6:6f:da:8a:6e:4a:89:36:17:03:49:47:cf:48:
ec:4b:d8:c9:0d:b0:7b:b6:2a:38:55:77:4f:fe:17:51:2f:74:
e9:ab:08:ce:d0:01:fb:df:f1:b1:1f:7a:ed:33:e6:6e:12:25:
1e:bb:b0:ba:3b:bf:a6:ca:2f:3d:96:af:14:44:5e:86:c9:5e:
97:6e:62:c0:e5:f3:57:d2:3b:00:c5:51:d1:52:f8:f3:2e:f3:
bf:d4:47:a0:f9:7b:7b:fb:8b:70:e7:c0:09:8b:3f:9d:9f:90:
18:c3:b1:2b:36:48:05:31:b2:d7:21:45:4c:6d:50:b7:66:0c:
39:ca:b5:c2:bf:93:23:2e:19:9f:6f:b4:84:80:62:a1:63:f4:
ad:d3:a5:f2:ca:df:88:2b:97:0a:72:71:f8:a1:42:2f:a7:60:
61:03:0f:c7:52:23:28:67:6e:b0:45:5c:3a:41:22:3c:32:9b:
20:19:92:15:dd:e5:d7:fb:39:3e:e5:8e:c0:6c:e5:e0:1a:2d:
c3:76:24:70:18:40:ed:ae:86:44:31:09:29:68:12:24:e9:7e:
d7:d9:88:8a:04:5e:0f:b1:cf:34:15:5e:a6:66:8c:aa:44:df:
2a:23:2b:05:92:ad:cc:68:b9:e3:26:8e:92:3f:a3:61:16:3e:
f4:f7:db:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:55:03 2026 by rpki-client