Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/nYzmu5Mu67b3nOfjI7AnlWUe1RA.roa
File: nYzmu5Mu67b3nOfjI7AnlWUe1RA.roa (raw, json)
Hash identifier: HUxHKo/Q8v3KIv8CGuS4MzSdG9gmRYG9CV801LmEvVw=
Subject key identifier: 9D:8C:E6:BB:93:2E:EB:B6:F7:9C:E7:E3:23:B0:27:95:65:1E:D5:10
Certificate issuer: /CN=8c9103d1a934251bb98b11f169cb8b2bdec6a239
Certificate serial: 019F2368DCFCDD9E8334CE5995FBB771702F
Authority key identifier: 8C:91:03:D1:A9:34:25:1B:B9:8B:11:F1:69:CB:8B:2B:DE:C6:A2:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJED0ak0JRu5ixHxacuLK97Gojk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/nYzmu5Mu67b3nOfjI7AnlWUe1RA.roa
Signing time: Thu 02 Jul 2026 15:18:22 +0000
ROA not before: Thu 02 Jul 2026 15:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42402
IP address blocks: 91.189.56.0/21 maxlen: 21
91.189.56.0/22 maxlen: 22
91.189.60.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/jJED0ak0JRu5ixHxacuLK97Gojk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/jJED0ak0JRu5ixHxacuLK97Gojk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jJED0ak0JRu5ixHxacuLK97Gojk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:dc:fc:dd:9e:83:34:ce:59:95:fb:b7:71:70:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c9103d1a934251bb98b11f169cb8b2bdec6a239
Validity
Not Before: Jul 2 15:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d8ce6bb932eebb6f79ce7e323b02795651ed510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:84:bb:f5:2d:0a:74:fc:62:e4:b2:88:42:c9:
00:77:f9:90:b6:fa:fe:25:a5:4a:4b:28:a2:1e:50:
bd:ee:05:cc:9e:6a:b0:d3:08:2d:1f:55:f2:2e:ea:
d0:4d:b1:72:5f:0f:c5:bc:03:cc:11:ab:bb:78:75:
73:24:71:d5:bf:ba:19:6c:29:eb:4e:30:0d:57:6f:
dd:f9:7e:03:4a:7f:32:bb:b9:55:72:55:6e:1b:06:
8b:1e:21:59:a6:d4:0d:c5:60:88:cc:c9:a1:f2:95:
4b:88:c6:0e:d0:3d:cf:e6:24:b5:4c:77:65:76:64:
4b:49:85:84:dc:77:e0:87:94:ab:21:82:e4:c2:df:
50:54:8d:61:ae:58:35:86:08:01:8c:5c:47:24:ac:
2d:3e:e1:b3:ec:75:4c:8b:61:38:36:50:05:94:86:
f1:f2:14:01:03:c9:a1:b5:b6:13:7e:8e:a1:5b:a1:
e8:60:05:8d:e1:f1:8d:3d:b5:40:ca:c8:90:09:8f:
eb:a0:1e:ac:1e:5e:77:4a:c0:6f:46:0f:09:67:82:
d5:d2:f6:9a:19:19:1d:62:43:fb:d4:0a:10:ab:c6:
82:83:1f:d9:9b:64:46:67:64:8d:50:36:1a:19:39:
2e:85:fd:07:74:2e:00:43:2f:b6:d9:2c:35:e0:c7:
e0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8C:E6:BB:93:2E:EB:B6:F7:9C:E7:E3:23:B0:27:95:65:1E:D5:10
X509v3 Authority Key Identifier:
keyid:8C:91:03:D1:A9:34:25:1B:B9:8B:11:F1:69:CB:8B:2B:DE:C6:A2:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJED0ak0JRu5ixHxacuLK97Gojk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/nYzmu5Mu67b3nOfjI7AnlWUe1RA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/jJED0ak0JRu5ixHxacuLK97Gojk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.189.56.0/21
Signature Algorithm: sha256WithRSAEncryption
69:dd:5d:3d:db:af:28:ec:6b:5a:ba:43:0d:df:fc:91:8c:8f:
cd:78:f8:a2:47:f4:e7:3b:2e:c8:90:7e:8a:1b:55:76:fd:11:
c5:fa:a5:f6:16:3b:8c:e7:dc:0d:94:b8:67:ac:8d:d4:34:06:
fd:11:0d:96:0b:93:aa:b4:d0:1e:7e:ae:13:8a:52:08:08:c2:
b8:db:60:ad:18:29:b7:41:5d:bd:a4:ca:26:40:f0:1f:d3:00:
0e:39:73:51:d9:f0:b8:fa:d1:d7:3d:5f:3b:b6:c5:28:08:d1:
79:c7:e3:31:fb:f0:df:89:21:2f:3d:4e:9c:a1:44:e6:3a:bc:
30:da:b8:f2:b7:68:f6:21:76:36:c8:09:f3:f2:2b:13:3e:57:
82:c7:6b:a6:95:9d:1c:b7:e4:98:12:9a:00:50:53:32:7b:49:
47:b3:e7:da:d5:05:2d:c3:20:3d:11:51:be:7c:c2:10:37:39:
31:32:b5:8e:9d:0c:42:46:3e:09:91:48:04:a5:6d:35:4c:95:
95:13:9f:48:86:72:8a:a1:ca:e2:48:e1:3b:99:93:c8:13:0e:
a3:c6:e8:86:85:4a:fe:77:48:d6:f0:4a:ec:c8:1d:e5:4f:1e:
2e:30:ab:b4:a0:a6:81:51:fb:54:3f:13:0b:62:4d:58:53:5a:
b0:56:34:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:49 2026 by rpki-client