Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/hYVqkrvIsjb2mA84Thi0hIWdE_I.roa
File: hYVqkrvIsjb2mA84Thi0hIWdE_I.roa (raw, json)
Hash identifier: bIGRKUxgZlKcay6HazV4E5FCIEHkxDiDElQJfP8xDRs=
Subject key identifier: 85:85:6A:92:BB:C8:B2:36:F6:98:0F:38:4E:18:B4:84:85:9D:13:F2
Certificate issuer: /CN=b63a3094439cac0f555701286cd54373bce6cb50
Certificate serial: 019DCF5F700468D063C9660252DAFFE26D9C
Authority key identifier: B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/hYVqkrvIsjb2mA84Thi0hIWdE_I.roa
Signing time: Mon 27 Apr 2026 14:37:11 +0000
ROA not before: Mon 27 Apr 2026 14:37:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211995
IP address blocks: 91.191.194.0/24 maxlen: 24
91.191.195.0/24 maxlen: 24
91.191.196.0/24 maxlen: 24
91.191.197.0/24 maxlen: 24
91.191.198.0/24 maxlen: 24
91.191.199.0/24 maxlen: 24
91.191.200.0/24 maxlen: 24
91.191.201.0/24 maxlen: 24
91.191.202.0/24 maxlen: 24
91.191.203.0/24 maxlen: 24
91.191.204.0/24 maxlen: 24
91.191.205.0/24 maxlen: 24
130.0.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:5f:70:04:68:d0:63:c9:66:02:52:da:ff:e2:6d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b63a3094439cac0f555701286cd54373bce6cb50
Validity
Not Before: Apr 27 14:37:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=85856a92bbc8b236f6980f384e18b484859d13f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:27:32:42:8a:70:ba:2c:02:ea:7d:24:9b:a2:
55:e6:69:6c:9b:d8:24:e3:0f:a2:41:16:86:a1:11:
d6:ab:b5:12:42:51:e6:b0:23:fb:b8:69:ba:a2:7b:
a2:22:c1:be:b4:f0:45:89:d6:00:7b:36:13:e1:0f:
40:9c:93:15:d9:e6:7d:61:25:cc:d5:f8:b1:4e:3e:
d1:be:76:79:5b:cc:47:83:4a:ec:de:64:dd:29:cf:
08:d5:be:94:b7:5a:c5:bb:50:f3:aa:c5:01:c4:74:
33:b1:ef:0b:25:89:8c:6b:ce:b9:79:b8:2a:05:a9:
e2:18:83:fb:78:2e:05:87:7e:15:11:31:bd:23:47:
3c:5b:15:12:97:9e:cc:01:4c:0d:15:58:c9:05:75:
5f:0e:05:3b:d0:95:6d:15:77:47:e6:9b:dd:c4:55:
fb:b3:22:11:e5:81:19:17:dc:4d:5f:31:71:43:b7:
b3:cc:2c:d8:72:2a:54:4e:af:f9:30:71:49:d5:ec:
89:61:03:22:a8:7c:02:f3:48:c0:70:63:bc:d7:37:
2f:50:a6:50:d2:ad:2a:ac:10:07:65:03:5b:a7:f2:
03:70:a1:f1:e9:6f:e7:35:e8:d4:84:6c:66:c9:4b:
d0:45:3d:15:7d:3d:48:82:c1:de:58:53:43:ad:da:
77:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:85:6A:92:BB:C8:B2:36:F6:98:0F:38:4E:18:B4:84:85:9D:13:F2
X509v3 Authority Key Identifier:
keyid:B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/hYVqkrvIsjb2mA84Thi0hIWdE_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.191.194.0-91.191.205.255
130.0.11.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:b4:8d:f3:37:81:98:33:92:6e:e0:1b:d8:43:fb:1f:25:39:
2d:54:a8:3e:08:a0:0d:64:b8:f9:e2:27:f1:dc:c6:59:8a:65:
5c:27:84:55:10:b4:24:de:fd:9d:f3:e8:6d:1d:d6:79:81:69:
df:fc:37:b1:36:6b:35:97:3b:30:a4:38:81:9d:62:83:36:32:
4d:13:a8:64:66:d9:74:99:80:34:dd:97:74:fa:75:e6:95:fb:
a2:f8:ee:8f:fb:56:e1:57:1a:80:50:55:0a:6d:10:1c:db:99:
aa:4f:71:ce:a7:f2:9b:60:cd:28:d6:42:65:31:c1:f9:52:af:
df:9f:34:82:52:df:17:36:f5:5c:1a:86:08:37:67:fa:84:ef:
50:7a:4d:69:1c:3a:88:c6:09:64:e0:0b:82:ab:31:c9:aa:17:
df:60:e0:a5:2a:69:24:34:33:f1:2b:50:d8:b4:ed:c7:ba:1c:
89:ef:33:2c:55:bb:da:ec:c8:40:00:8f:f1:22:63:1c:8c:59:
d7:0a:89:bc:1b:e1:ef:3f:d5:5b:76:f8:a3:78:a8:69:6e:85:
1e:94:a9:96:d9:52:13:11:16:17:b6:cf:f7:eb:ba:d5:84:f8:
2b:39:a4:8b:c2:7f:05:d6:59:c0:99:01:00:ee:eb:d5:e2:d6:
e0:f1:2c:fc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 08:25:10 2026 by rpki-client