Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/hyDLxp-YatfS001VZEVLL1vX8oc.roa
File: hyDLxp-YatfS001VZEVLL1vX8oc.roa (raw, json)
Hash identifier: 1H/AL2H8aeO5E6Omvo64CNw6HNYXqHAE8+uJ/gd3b5E=
Subject key identifier: 87:20:CB:C6:9F:98:6A:D7:D2:D3:4D:55:64:45:4B:2F:5B:D7:F2:87
Certificate issuer: /CN=a1020772f628b8fb51f3475136b77feb4b2698be
Certificate serial: 019EDA32935AB1D940831C9B43A378284C10
Authority key identifier: A1:02:07:72:F6:28:B8:FB:51:F3:47:51:36:B7:7F:EB:4B:26:98:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQIHcvYouPtR80dRNrd_60smmL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/hyDLxp-YatfS001VZEVLL1vX8oc.roa
Signing time: Thu 18 Jun 2026 10:06:48 +0000
ROA not before: Thu 18 Jun 2026 10:06:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 91.199.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/oQIHcvYouPtR80dRNrd_60smmL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/oQIHcvYouPtR80dRNrd_60smmL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oQIHcvYouPtR80dRNrd_60smmL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:da:32:93:5a:b1:d9:40:83:1c:9b:43:a3:78:28:4c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1020772f628b8fb51f3475136b77feb4b2698be
Validity
Not Before: Jun 18 10:06:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8720cbc69f986ad7d2d34d5564454b2f5bd7f287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9d:67:61:43:aa:0c:38:f3:a4:58:95:2b:6d:
ff:5e:13:91:f2:2d:ee:bf:20:8f:15:fd:58:a8:e1:
52:46:2c:8c:97:73:13:21:df:01:7b:33:0c:42:59:
ad:d7:69:a9:74:5d:eb:07:42:d0:6a:67:92:8a:4a:
b7:12:ae:db:39:63:19:7f:ac:93:51:fc:4f:3e:b8:
fb:35:34:5a:64:77:60:f1:ba:ea:ed:6a:1b:8a:20:
c1:b2:4c:49:e7:37:b9:42:82:94:b7:c4:bd:30:0a:
e1:37:0a:24:f8:9f:a7:dd:3b:b0:16:86:61:fc:d0:
70:14:b0:c0:fe:57:08:9f:22:9f:b1:9a:77:d7:98:
49:08:75:e4:dd:4d:b4:1e:17:64:ea:de:61:00:7f:
52:ac:ed:ab:47:b7:1b:24:62:59:47:37:28:26:e0:
66:63:2a:b0:07:61:4d:3d:22:f0:49:cb:44:35:5d:
0f:27:a8:10:7b:f4:2f:80:d3:98:36:72:24:2a:97:
7b:71:d8:37:16:1c:07:d0:d6:0c:6e:9e:aa:a9:8a:
d6:ce:97:2e:43:bd:4c:e6:93:a1:bd:ce:98:46:5d:
ea:7c:28:6d:e3:e2:5f:68:01:78:e9:21:d9:4f:61:
e3:b0:8c:f4:07:f0:3c:f2:05:18:23:32:23:3a:50:
c7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:20:CB:C6:9F:98:6A:D7:D2:D3:4D:55:64:45:4B:2F:5B:D7:F2:87
X509v3 Authority Key Identifier:
keyid:A1:02:07:72:F6:28:B8:FB:51:F3:47:51:36:B7:7F:EB:4B:26:98:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQIHcvYouPtR80dRNrd_60smmL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/hyDLxp-YatfS001VZEVLL1vX8oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/550431-6174-47d2-8bab-51af82965e33/1/oQIHcvYouPtR80dRNrd_60smmL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.83.0/24
Signature Algorithm: sha256WithRSAEncryption
89:ef:ec:e5:12:3f:c3:7d:08:67:49:c4:ac:79:89:26:87:1b:
b5:3a:4a:06:44:70:67:51:0a:86:34:ee:4c:d6:91:ad:b6:19:
e1:40:f0:a8:c7:0e:33:81:7e:b4:b5:24:2a:1b:a5:7c:ec:d4:
2b:7c:ad:5c:75:e6:db:e8:d0:a0:27:bf:27:05:b0:e9:49:5a:
81:61:05:12:6c:98:12:ee:58:d8:3b:b7:88:4b:ea:f4:27:44:
23:5c:78:19:0a:83:27:67:82:9c:36:a9:3c:37:72:fb:79:38:
bb:ad:74:8c:8d:da:1b:07:e2:6e:0e:34:ef:d4:b2:71:6e:13:
fe:10:2e:b5:b1:6f:7b:99:7d:c2:79:a7:7e:c8:6b:e8:03:f3:
b0:e8:4a:de:86:8e:17:c5:c0:f2:87:21:88:25:20:81:65:0a:
df:27:c7:df:ea:07:69:54:da:a4:fe:3b:59:3a:a9:ed:35:c3:
3d:ea:95:e3:40:6a:d8:02:b6:3e:f8:73:0c:1f:45:34:b3:09:
89:0a:5a:f7:1a:5e:a2:a7:b9:1a:32:ac:02:1c:ad:96:37:34:
24:da:4f:c2:51:97:6f:49:7a:24:4d:48:7c:56:1c:04:e2:fa:
15:dd:5b:c2:c9:41:c8:c6:88:02:78:c4:96:54:c1:b7:e2:d8:
36:b0:a1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:56:45 2026 by rpki-client