Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/7dead1-c9ec-4cc6-84c4-e30ca0720ea1/1/HGygdQ-Y-gCZzdzCa6B6oIjdjFM.roa
File: HGygdQ-Y-gCZzdzCa6B6oIjdjFM.roa (raw, json)
Hash identifier: sd3DHouChJiiWx6aUYWxL5mwg+5RY2ZI/mpyAHXQkl4=
Subject key identifier: 1C:6C:A0:75:0F:98:FA:00:99:CD:DC:C2:6B:A0:7A:A0:88:DD:8C:53
Certificate issuer: /CN=d6bb132027fe6550476ccac43e92f8ad813f0f30
Certificate serial: 019F430046723F132E9F063D2A4787ECC42E
Authority key identifier: D6:BB:13:20:27:FE:65:50:47:6C:CA:C4:3E:92:F8:AD:81:3F:0F:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1rsTICf-ZVBHbMrEPpL4rYE_DzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dead1-c9ec-4cc6-84c4-e30ca0720ea1/1/HGygdQ-Y-gCZzdzCa6B6oIjdjFM.roa
Signing time: Wed 08 Jul 2026 18:31:59 +0000
ROA not before: Wed 08 Jul 2026 18:31:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51746
IP address blocks: 91.220.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dead1-c9ec-4cc6-84c4-e30ca0720ea1/1/1rsTICf-ZVBHbMrEPpL4rYE_DzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/7dead1-c9ec-4cc6-84c4-e30ca0720ea1/1/1rsTICf-ZVBHbMrEPpL4rYE_DzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1rsTICf-ZVBHbMrEPpL4rYE_DzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:43:00:46:72:3f:13:2e:9f:06:3d:2a:47:87:ec:c4:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6bb132027fe6550476ccac43e92f8ad813f0f30
Validity
Not Before: Jul 8 18:31:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c6ca0750f98fa0099cddcc26ba07aa088dd8c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1d:c6:de:ad:c0:8d:79:97:c5:76:1b:fc:16:
dd:4f:5d:69:f7:18:e3:63:fb:2c:d8:43:5f:ee:2e:
17:26:55:03:02:10:02:3a:08:3d:e2:3b:5f:6f:d3:
70:da:78:cc:bd:65:5e:e2:f3:49:2e:ee:8b:83:10:
e6:fe:01:25:54:4f:6e:17:16:22:08:c9:9d:f7:f2:
55:1a:e6:17:db:3a:fa:f2:7f:04:2b:07:77:da:01:
12:31:53:e2:55:25:65:94:f8:1b:5b:53:a7:2a:0a:
d5:4e:29:1e:f4:4f:ed:12:03:b4:04:9b:3b:aa:ad:
bf:3c:5a:54:c5:9d:30:d1:99:82:50:2d:80:6a:fc:
c9:f6:7c:15:47:62:9a:18:98:3b:dc:65:92:a0:80:
8d:b3:a5:72:24:03:6b:d6:10:67:e8:53:a5:2d:37:
e1:c7:2b:45:20:85:4d:88:91:a6:9f:25:57:8b:54:
be:d1:a0:e2:e7:2a:99:93:b8:b6:dd:90:2c:6c:07:
a1:c1:ec:42:52:1a:ce:d9:95:91:fa:fd:4c:59:5d:
78:2b:7e:96:a1:92:6e:60:2c:1a:25:11:78:1f:b0:
2e:83:a4:bb:26:fa:c1:3a:e2:b9:70:4c:bd:27:e7:
f2:eb:a9:b3:75:c2:ab:2d:42:6c:2c:02:b8:5e:23:
1c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:6C:A0:75:0F:98:FA:00:99:CD:DC:C2:6B:A0:7A:A0:88:DD:8C:53
X509v3 Authority Key Identifier:
keyid:D6:BB:13:20:27:FE:65:50:47:6C:CA:C4:3E:92:F8:AD:81:3F:0F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1rsTICf-ZVBHbMrEPpL4rYE_DzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dead1-c9ec-4cc6-84c4-e30ca0720ea1/1/HGygdQ-Y-gCZzdzCa6B6oIjdjFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dead1-c9ec-4cc6-84c4-e30ca0720ea1/1/1rsTICf-ZVBHbMrEPpL4rYE_DzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.86.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:87:7a:d2:0b:fd:7a:3f:77:df:fc:c7:95:31:42:46:76:f6:
ae:2d:7d:d3:53:6b:16:8c:e6:3b:f9:8b:cf:bb:83:fb:eb:7d:
30:1d:f9:19:07:42:bd:9d:7a:44:81:26:08:a9:b4:44:8d:30:
95:3e:e6:f9:3c:79:31:27:b9:3b:03:0e:3f:20:d1:67:11:f6:
b4:e1:cb:d7:ee:2d:62:61:60:7c:c7:6f:42:85:42:6c:9c:a6:
8e:e1:b4:41:c3:03:bb:95:3b:8d:e4:e2:29:69:ac:74:08:2c:
e8:7a:e7:c3:75:b9:20:ea:d1:8e:44:90:05:7f:ad:5e:e0:c7:
df:4a:41:82:b4:34:96:5d:34:2e:2f:97:c5:f8:ad:cb:39:e7:
ba:e1:ae:3f:1a:d9:8f:b2:bf:ea:4a:7c:6e:c7:18:0c:c2:35:
fe:67:30:f0:7b:ca:80:db:41:78:e6:c7:a8:d7:b1:f7:f9:1c:
d5:33:0d:88:34:d4:6b:b1:b3:5e:88:4a:b9:ad:2e:c7:cc:89:
26:74:4b:dd:5c:1a:d4:15:27:a2:bc:74:3f:4a:37:5f:bc:27:
1b:ff:69:fe:22:c3:6f:58:c7:31:63:fc:a3:49:d7:0c:74:67:
fa:ed:a0:d2:5e:1b:73:50:ee:56:b5:db:b0:32:4d:e8:60:71:
7a:d3:21:35
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9DAEZyPxMunwY9KkeH7MQuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YmIxMzIwMjdmZTY1NTA0NzZjY2FjNDNlOTJmOGFkODEz
ZjBmMzAwHhcNMjYwNzA4MTgzMTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzZjYTA3NTBmOThmYTAwOTljZGRjYzI2YmEwN2FhMDg4ZGQ4YzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx3G3q3AjXmXxXYb/BbdT11p9xjj
Y/ss2ENf7i4XJlUDAhACOgg94jtfb9Nw2njMvWVe4vNJLu6LgxDm/gElVE9uFxYi
CMmd9/JVGuYX2zr68n8EKwd32gESMVPiVSVllPgbW1OnKgrVTike9E/tEgO0BJs7
qq2/PFpUxZ0w0ZmCUC2AavzJ9nwVR2KaGJg73GWSoICNs6VyJANr1hBn6FOlLTfh
xytFIIVNiJGmnyVXi1S+0aDi5yqZk7i23ZAsbAehwexCUhrO2ZWR+v1MWV14K36W
oZJuYCwaJRF4H7Aug6S7JvrBOuK5cEy9J+fy66mzdcKrLUJsLAK4XiMcqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBxsoHUPmPoAmc3cwmugeqCI3YxTMB8GA1UdIwQY
MBaAFNa7EyAn/mVQR2zKxD6S+K2BPw8wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXJzVElDZi1aVkJIYk1yRVBwTDRyWUVfRHpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi83ZGVhZDEtYzllYy00Y2M2LTg0YzQt
ZTMwY2EwNzIwZWExLzEvSEd5Z2RRLVktZ0NaemR6Q2E2QjZvSWpkakZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi83ZGVhZDEtYzllYy00Y2M2LTg0YzQtZTMwY2EwNzIwZWEx
LzEvMXJzVElDZi1aVkJIYk1yRVBwTDRyWUVfRHpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9xWMA0G
CSqGSIb3DQEBCwUAA4IBAQB7h3rSC/16P3ff/MeVMUJGdvauLX3TU2sWjOY7+YvP
u4P7630wHfkZB0K9nXpEgSYIqbREjTCVPub5PHkxJ7k7Aw4/INFnEfa04cvX7i1i
YWB8x29ChUJsnKaO4bRBwwO7lTuN5OIpaax0CCzoeufDdbkg6tGORJAFf61e4Mff
SkGCtDSWXTQuL5fF+K3LOee64a4/GtmPsr/qSnxuxxgMwjX+ZzDwe8qA20F45seo
17H3+RzVMw2INNRrsbNeiEq5rS7HzIkmdEvdXBrUFSeivHQ/SjdfvCcb/2n+IsNv
WMcxY/yjSdcMdGf67aDSXhtzUO5WtduwMk3oYHF60yE1
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:28:10 2026 by rpki-client