Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/f2fb22-3cac-444a-91d2-2141a8525e11/1/rYnIZXP7kictb-ZcjRpbQ2r5CKg.roa
File: rYnIZXP7kictb-ZcjRpbQ2r5CKg.roa (raw, json)
Hash identifier: A6WCoJo4mfbbDcrsB3Tt5p2MDahvttbSGUqh5ZGDRXA=
Subject key identifier: AD:89:C8:65:73:FB:92:27:2D:6F:E6:5C:8D:1A:5B:43:6A:F9:08:A8
Certificate issuer: /CN=12c5dddc1cb3cf4c2f6bfae85ae4e5505d00aa28
Certificate serial: 01A0B480AF766F870CB1B3FFC522E6FAEB61
Authority key identifier: 12:C5:DD:DC:1C:B3:CF:4C:2F:6B:FA:E8:5A:E4:E5:50:5D:00:AA:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsXd3Byzz0wva_roWuTlUF0Aqig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f2fb22-3cac-444a-91d2-2141a8525e11/1/rYnIZXP7kictb-ZcjRpbQ2r5CKg.roa
Signing time: Fri 18 Sep 2026 12:32:07 +0000
ROA not before: Fri 18 Sep 2026 12:32:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42991
IP address blocks: 91.196.36.0/22 maxlen: 22
91.204.188.0/22 maxlen: 22
91.204.189.0/24 maxlen: 24
91.204.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f2fb22-3cac-444a-91d2-2141a8525e11/1/EsXd3Byzz0wva_roWuTlUF0Aqig.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f2fb22-3cac-444a-91d2-2141a8525e11/1/EsXd3Byzz0wva_roWuTlUF0Aqig.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsXd3Byzz0wva_roWuTlUF0Aqig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:80:af:76:6f:87:0c:b1:b3:ff:c5:22:e6:fa:eb:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c5dddc1cb3cf4c2f6bfae85ae4e5505d00aa28
Validity
Not Before: Sep 18 12:32:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad89c86573fb92272d6fe65c8d1a5b436af908a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:45:e1:e3:bb:8b:3f:8b:73:ed:b1:01:5a:75:
2d:11:79:0f:46:06:43:07:ea:c8:77:da:e7:ef:93:
0d:29:05:4a:cb:be:e6:bd:63:9f:6c:2e:3a:a3:56:
f9:36:01:d5:c6:f2:17:c8:dc:75:c6:c4:7d:00:e4:
5a:b2:ae:93:e8:68:27:55:03:d1:1d:6a:03:36:36:
34:9f:d1:65:b1:5c:d0:ae:f6:f9:14:aa:ad:06:85:
bb:3b:53:81:87:b3:d5:d9:ad:ba:ed:51:e7:9e:a3:
51:29:9f:29:ce:ba:9e:b7:f4:f1:60:c0:06:3a:2a:
c3:a4:7d:48:bc:8a:6d:5a:2c:8d:f6:60:23:fa:3c:
aa:e8:3e:cf:f0:0f:48:83:f2:38:69:39:3e:a7:b7:
34:f0:95:84:3c:be:04:e2:e6:8d:5b:63:b7:d6:40:
6d:12:04:1f:5f:fd:7f:9f:98:24:f1:50:fe:e0:10:
ce:df:51:a3:f0:a9:36:35:3b:97:7f:2d:39:09:8e:
b5:ab:f2:a1:97:82:9e:a8:74:4c:4e:12:d0:b1:84:
96:45:41:bd:cc:4d:89:1e:60:94:d6:18:a4:0d:19:
86:45:14:9a:df:2a:08:aa:d0:55:e4:50:11:fa:30:
5b:8f:4a:07:07:9d:4a:ac:06:86:35:e0:b6:f3:18:
8d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:89:C8:65:73:FB:92:27:2D:6F:E6:5C:8D:1A:5B:43:6A:F9:08:A8
X509v3 Authority Key Identifier:
keyid:12:C5:DD:DC:1C:B3:CF:4C:2F:6B:FA:E8:5A:E4:E5:50:5D:00:AA:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsXd3Byzz0wva_roWuTlUF0Aqig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f2fb22-3cac-444a-91d2-2141a8525e11/1/rYnIZXP7kictb-ZcjRpbQ2r5CKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f2fb22-3cac-444a-91d2-2141a8525e11/1/EsXd3Byzz0wva_roWuTlUF0Aqig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.36.0/22
91.204.188.0/22
Signature Algorithm: sha256WithRSAEncryption
86:f6:9a:c1:40:8d:a9:6f:7f:27:e0:8d:36:ec:3f:0b:17:f5:
28:8d:06:63:88:05:8d:45:6c:73:21:4f:05:a0:d3:5d:f2:dd:
82:a9:ce:b9:eb:c4:19:eb:4a:9b:e4:ec:fb:24:be:92:01:4e:
4d:ef:fb:e4:2f:7a:47:1f:9c:99:b3:91:49:fc:ae:1c:ce:74:
e3:48:67:e8:74:d5:5f:df:29:08:ac:8a:cd:96:0c:26:e6:25:
1e:b3:26:dd:75:f0:4f:7f:4b:ca:92:26:c6:d3:f6:4f:fb:97:
3b:05:b0:a1:c3:64:dc:b4:61:c1:91:fd:a1:9f:fc:95:ec:74:
4c:61:91:1b:ae:9f:16:c2:5c:df:1a:31:89:9c:05:c7:50:42:
d4:c5:d0:fd:15:d7:83:5d:40:b5:c5:ec:e1:cf:22:41:b7:b8:
44:91:76:a3:b2:ef:dc:4c:fd:7b:6f:c6:23:be:f2:27:eb:6f:
e0:fd:be:57:cb:69:a3:7c:d2:64:53:b2:7a:38:3d:2f:79:f4:
34:fa:5e:fd:e5:fb:c6:6a:e4:da:ab:ed:2f:1c:f5:a6:42:e5:
27:27:72:0d:2a:f3:b2:c5:28:95:50:ca:60:13:af:fd:0f:1b:
e1:e0:cf:d2:9d:f9:d2:b8:76:10:9f:32:f7:d6:b6:24:7b:5d:
00:83:d4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 18:41:15 2026 by rpki-client