Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6b8285-6e63-4e78-a2c3-ce010d3760c6/1/qHCpijfdc8k5y0Zn9AxU7VJ5dr4.roa
File: qHCpijfdc8k5y0Zn9AxU7VJ5dr4.roa (raw, json)
Hash identifier: 7b7QR3OS+ILGRcJ7amN0EllvwZEFj+J1VkU+kfBrkF0=
Subject key identifier: A8:70:A9:8A:37:DD:73:C9:39:CB:46:67:F4:0C:54:ED:52:79:76:BE
Certificate issuer: /CN=61862fb06f1c293045760ce98f5d2002e35deb38
Certificate serial: 019F37F6B7D47C0E27C4DDCB63E61B784BB1
Authority key identifier: 61:86:2F:B0:6F:1C:29:30:45:76:0C:E9:8F:5D:20:02:E3:5D:EB:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYYvsG8cKTBFdgzpj10gAuNd6zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6b8285-6e63-4e78-a2c3-ce010d3760c6/1/qHCpijfdc8k5y0Zn9AxU7VJ5dr4.roa
Signing time: Mon 06 Jul 2026 15:05:43 +0000
ROA not before: Mon 06 Jul 2026 15:05:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49556
IP address blocks: 91.206.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6b8285-6e63-4e78-a2c3-ce010d3760c6/1/YYYvsG8cKTBFdgzpj10gAuNd6zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6b8285-6e63-4e78-a2c3-ce010d3760c6/1/YYYvsG8cKTBFdgzpj10gAuNd6zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYYvsG8cKTBFdgzpj10gAuNd6zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:f6:b7:d4:7c:0e:27:c4:dd:cb:63:e6:1b:78:4b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61862fb06f1c293045760ce98f5d2002e35deb38
Validity
Not Before: Jul 6 15:05:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a870a98a37dd73c939cb4667f40c54ed527976be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4a:32:43:0e:75:82:0f:78:ed:d0:12:4e:9e:
88:3f:d6:e2:35:6f:91:61:d3:97:0a:4b:20:99:53:
ef:1d:86:fe:19:d5:78:af:ca:77:f3:c6:e2:f0:b4:
18:7f:9a:6a:a4:39:de:9d:a4:0f:33:f7:05:88:ee:
79:0c:02:ca:7b:ef:18:ef:61:27:1d:6c:11:44:d4:
4d:63:bc:c4:35:ff:2d:b6:ee:fa:28:b2:2e:24:50:
bc:3e:ba:fe:c0:dc:5d:de:de:f0:51:f1:d3:c3:0e:
ad:ea:f8:5a:9c:9c:21:b5:87:27:d9:16:ab:1b:45:
7f:b1:f3:ef:e3:b8:50:ad:0f:87:76:d6:5f:21:8a:
ac:6a:31:4d:21:0c:4d:78:14:c4:ef:1c:ba:cd:b8:
14:65:99:a1:2b:34:11:96:3c:51:ad:11:9d:47:13:
35:cf:bc:01:0a:5a:ae:c3:d8:1e:b6:b4:96:d8:2d:
9d:e7:01:33:41:e8:b9:18:91:31:5b:09:52:62:ca:
58:05:e5:a9:7e:7e:06:f3:fd:fc:8d:e0:8b:50:d5:
f4:55:db:30:51:0e:b5:f9:7f:4c:81:33:ad:cc:23:
63:ae:0b:6b:a8:76:76:57:c6:91:d4:95:8f:0a:b6:
e4:b2:92:48:45:a6:a2:88:74:ff:19:4a:72:c4:e7:
95:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:70:A9:8A:37:DD:73:C9:39:CB:46:67:F4:0C:54:ED:52:79:76:BE
X509v3 Authority Key Identifier:
keyid:61:86:2F:B0:6F:1C:29:30:45:76:0C:E9:8F:5D:20:02:E3:5D:EB:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYYvsG8cKTBFdgzpj10gAuNd6zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6b8285-6e63-4e78-a2c3-ce010d3760c6/1/qHCpijfdc8k5y0Zn9AxU7VJ5dr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6b8285-6e63-4e78-a2c3-ce010d3760c6/1/YYYvsG8cKTBFdgzpj10gAuNd6zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.28.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:4c:cf:70:05:20:7c:49:6f:3f:9e:29:04:f7:02:30:2a:2a:
fe:f8:ec:a9:0a:ed:e4:a2:5c:5a:2f:5c:50:b5:6e:06:70:b5:
5e:9c:08:2a:1b:e9:a6:15:b6:a2:76:7b:11:81:f1:51:39:74:
8b:99:6a:86:97:62:18:c1:ca:ec:ad:6f:c8:51:19:e7:f8:62:
a2:ea:71:c5:4d:28:e1:ea:a0:c7:5b:21:a2:9c:4a:33:e1:61:
c8:31:53:52:11:93:2b:4a:7b:bb:b6:e7:20:e2:e3:2c:7e:fe:
7c:f3:07:c8:84:22:e2:6d:40:aa:07:60:a1:4c:94:98:a9:0b:
85:36:62:f3:aa:43:0f:2a:03:f5:65:53:f1:4f:51:cd:f8:96:
e5:97:47:89:f5:d1:d8:7e:9b:31:7c:a2:7b:3c:f7:1b:7b:6d:
96:f5:78:83:5f:f8:b8:6f:56:d4:84:c1:8f:00:ee:f4:af:f2:
7e:13:75:39:5b:79:60:20:7b:b4:05:a1:6f:8a:f0:6b:c2:aa:
8a:ff:b3:a7:46:cd:da:22:84:c5:74:57:52:82:2c:21:1a:83:
58:64:ff:a6:56:bb:02:de:71:e1:68:1e:56:ff:17:e1:a7:c3:
05:b8:04:17:8b:c8:81:9b:b4:49:89:76:f1:2c:e3:17:10:e5:
f1:19:e6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:34:11 2026 by rpki-client