Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0196fb-ae63-4f09-bac2-ec717865f07f/1/_GYRtRrE3o1gXliLdkCD1K39Pkw.roa
File: _GYRtRrE3o1gXliLdkCD1K39Pkw.roa (raw, json)
Hash identifier: MdvV5iINAnufC2VKyyJ2tO5THU9NvjiQkS7qbbRGAKM=
Subject key identifier: FC:66:11:B5:1A:C4:DE:8D:60:5E:58:8B:76:40:83:D4:AD:FD:3E:4C
Certificate issuer: /CN=639eaeef1f4ba2662d4589c69617c22234fc7fd5
Certificate serial: 019F79753CE92D584A7579254EEA672C7955
Authority key identifier: 63:9E:AE:EF:1F:4B:A2:66:2D:45:89:C6:96:17:C2:22:34:FC:7F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y56u7x9LomYtRYnGlhfCIjT8f9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0196fb-ae63-4f09-bac2-ec717865f07f/1/_GYRtRrE3o1gXliLdkCD1K39Pkw.roa
Signing time: Sun 19 Jul 2026 08:19:14 +0000
ROA not before: Sun 19 Jul 2026 08:19:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25233
IP address blocks: 91.212.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0196fb-ae63-4f09-bac2-ec717865f07f/1/Y56u7x9LomYtRYnGlhfCIjT8f9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0196fb-ae63-4f09-bac2-ec717865f07f/1/Y56u7x9LomYtRYnGlhfCIjT8f9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y56u7x9LomYtRYnGlhfCIjT8f9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:79:75:3c:e9:2d:58:4a:75:79:25:4e:ea:67:2c:79:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639eaeef1f4ba2662d4589c69617c22234fc7fd5
Validity
Not Before: Jul 19 08:19:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc6611b51ac4de8d605e588b764083d4adfd3e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4e:44:b0:30:96:e0:3a:15:28:6c:0e:6f:e4:
d5:59:a1:21:fc:16:53:c6:49:ad:24:39:42:9a:5d:
15:7d:9f:5b:25:20:b4:4d:8c:a7:c4:62:57:c3:94:
19:10:41:5f:9e:6b:0e:2f:38:5e:3f:a8:f0:cd:90:
aa:fb:59:ad:d1:53:9a:32:83:a7:02:88:92:74:15:
7c:77:dc:36:f5:ee:39:db:93:0e:ec:32:dd:6c:10:
f3:a4:f3:ed:af:29:ee:9f:a1:4e:4f:99:a4:79:17:
41:46:56:ee:2c:f0:0e:3a:9a:9d:dc:8c:78:db:5e:
5d:9f:59:cd:b8:14:63:eb:91:a7:84:81:6e:5b:a5:
db:3e:f1:78:60:21:2a:ba:f9:38:54:2f:18:e1:21:
64:54:92:66:59:6c:b3:3e:08:50:6b:de:65:f9:5c:
84:6a:3b:cb:5a:a3:9c:a6:0a:da:b5:69:f3:b1:9c:
dc:a5:67:73:b5:b3:61:74:de:ab:fa:51:7b:d4:af:
b0:19:ca:3e:04:12:f9:3f:ec:84:b6:2b:0f:20:78:
ac:79:1f:0d:fc:13:e9:62:93:aa:73:53:c8:9f:1a:
1c:5a:da:ae:91:52:e7:7e:bf:f3:ac:3d:e8:cf:4e:
25:df:72:72:53:c5:01:0e:1a:ec:9f:c6:e0:6c:9a:
be:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:66:11:B5:1A:C4:DE:8D:60:5E:58:8B:76:40:83:D4:AD:FD:3E:4C
X509v3 Authority Key Identifier:
keyid:63:9E:AE:EF:1F:4B:A2:66:2D:45:89:C6:96:17:C2:22:34:FC:7F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y56u7x9LomYtRYnGlhfCIjT8f9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0196fb-ae63-4f09-bac2-ec717865f07f/1/_GYRtRrE3o1gXliLdkCD1K39Pkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0196fb-ae63-4f09-bac2-ec717865f07f/1/Y56u7x9LomYtRYnGlhfCIjT8f9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.164.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:04:48:c5:d5:09:a9:51:39:5a:0b:99:4c:79:86:16:4e:c0:
d1:30:54:20:3a:a6:71:f4:19:da:c5:08:5c:d0:e7:bf:f0:61:
0f:ca:8c:cf:28:ee:7f:0d:ba:04:bb:1a:1e:21:53:44:b1:6e:
c2:1f:19:7a:dd:1a:cc:e3:31:31:92:d0:42:97:e2:c7:af:3c:
83:d8:28:47:bb:8c:a2:81:e1:99:58:a8:20:47:56:83:05:29:
fc:cc:69:f5:9b:58:3c:c4:cf:e4:98:e0:cf:16:0e:03:c7:56:
26:e5:6b:ee:ea:b6:9f:53:d6:72:0b:a5:59:b7:28:f9:aa:3a:
94:3a:b3:ff:8f:0b:a2:fd:63:5d:a6:1b:43:d0:9f:68:e3:d5:
e3:98:a9:8a:39:22:25:53:a3:8b:6b:94:36:7a:ff:15:87:62:
92:29:27:7a:b0:e7:73:65:69:99:20:90:3f:38:f4:41:40:ba:
19:9e:f5:93:d2:94:91:b4:fa:a5:1c:a9:00:49:4a:48:1e:d6:
eb:cf:98:fd:a5:76:34:04:89:01:4a:23:c1:d8:0b:de:74:e9:
ad:4a:fb:c5:96:00:a8:81:87:f3:9c:bc:5b:c2:dd:e8:c2:9b:
71:f9:c6:00:fa:92:61:44:d7:60:26:56:a4:27:a3:2a:47:2b:
cb:8d:0a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:53:40 2026 by rpki-client