Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/yYqT80TS7hUmqPAkI33wHvWfQw8.roa
File: yYqT80TS7hUmqPAkI33wHvWfQw8.roa (raw, json)
Hash identifier: hsl4QQe8YWvGd+kwz5YbWHd6xUTEBjK95wxYmTZQgAg=
Subject key identifier: C9:8A:93:F3:44:D2:EE:15:26:A8:F0:24:23:7D:F0:1E:F5:9F:43:0F
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 019F3DA1D5D3A30AEC03EA0EAEAE79DC838C
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/yYqT80TS7hUmqPAkI33wHvWfQw8.roa
Signing time: Tue 07 Jul 2026 17:30:43 +0000
ROA not before: Tue 07 Jul 2026 17:30:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 91.108.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3d:a1:d5:d3:a3:0a:ec:03:ea:0e:ae:ae:79:dc:83:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Jul 7 17:30:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c98a93f344d2ee1526a8f024237df01ef59f430f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b9:d3:ac:f0:52:1f:37:aa:6d:b6:3f:80:bc:
a4:1b:8a:1a:39:fe:aa:79:68:ce:6d:80:25:50:3b:
8a:c5:45:72:52:3f:cf:f3:19:37:19:09:bb:0e:6b:
2a:3c:3c:c6:e6:50:a1:0b:61:e6:50:a1:4c:0d:76:
97:74:c3:e5:3e:a4:b6:c9:ee:8b:f1:54:6e:ab:d2:
39:d7:98:db:ed:fa:5b:26:75:87:6f:d3:d1:f1:68:
ca:d5:f2:a4:d2:c7:1a:dc:ca:a4:36:19:fd:1f:cf:
3c:e3:55:06:eb:39:0d:55:a2:ec:e4:15:c8:0b:6e:
68:ec:94:98:11:01:99:32:9c:ba:7f:db:4a:46:c6:
85:19:2a:ee:7c:bd:20:65:1f:95:f6:b4:85:e0:08:
b4:53:44:f1:7c:4f:fb:e7:0d:e5:83:a1:4c:ca:9e:
90:a9:6b:b2:30:49:ac:19:64:92:e0:8f:08:07:4c:
32:6b:c4:c8:77:cc:d6:7a:cc:42:b0:8f:68:0c:63:
82:c8:a3:bf:80:10:15:d8:d7:1d:b9:c9:6a:24:27:
9b:63:2e:62:64:07:84:75:bc:73:4c:62:65:b0:0c:
e5:01:b8:c7:35:75:50:1b:b3:c9:26:8f:fb:a0:cc:
50:14:94:8c:81:51:7b:87:c0:83:4b:81:03:86:30:
bb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8A:93:F3:44:D2:EE:15:26:A8:F0:24:23:7D:F0:1E:F5:9F:43:0F
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/yYqT80TS7hUmqPAkI33wHvWfQw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.83.0/24
Signature Algorithm: sha256WithRSAEncryption
41:b0:ee:c1:04:8f:ef:d5:20:9b:2d:4c:5c:14:df:a3:5d:05:
46:37:4c:f4:df:39:46:66:ef:70:50:e4:1f:66:7f:b9:c2:ef:
36:03:43:d0:31:64:b6:56:5c:e3:5b:fa:f4:75:6e:ed:f0:97:
eb:b1:3c:c7:7a:85:1e:7e:14:e4:a8:d3:b1:c7:e2:56:44:41:
32:cf:66:79:dd:10:19:45:d4:52:02:de:ce:0b:06:51:5c:fb:
41:4f:97:3e:7b:47:f2:ed:b5:76:27:d5:8d:7e:3b:0f:88:ad:
40:23:7c:85:f8:89:59:f2:85:3b:79:fb:18:98:0f:ca:3e:95:
56:50:26:8e:6f:e0:b8:c2:fd:fb:bf:54:6d:e7:2e:12:b8:03:
29:6a:16:ff:5f:41:5c:58:d9:d2:61:9c:68:60:90:a9:49:ef:
4d:a5:d2:29:bb:d3:e2:87:c1:6f:9a:6c:cf:fe:5c:af:96:2a:
07:df:7f:99:07:3a:ee:24:4b:f3:28:37:d5:1e:0f:cb:98:ad:
d4:9e:1c:83:80:d1:55:ce:22:a6:44:5c:f6:de:57:59:15:e1:
11:a7:c9:bb:f1:41:f5:84:45:d7:4e:18:8d:83:d0:96:e5:db:
72:fc:8a:2c:e1:d1:d4:cc:45:47:80:55:dd:68:f2:cc:d5:61:
95:03:e7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:55:36 2026 by rpki-client