Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/CG_RbAAY7iX9Zy9HbkOKWAZZaQ4.roa
File: CG_RbAAY7iX9Zy9HbkOKWAZZaQ4.roa (raw, json)
Hash identifier: xeqybNdNDUhTz+vqC7eFdYvvA3AqqR+6Az4dsTt8u+E=
Subject key identifier: 08:6F:D1:6C:00:18:EE:25:FD:67:2F:47:6E:43:8A:58:06:59:69:0E
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 019ED16AC886E5BDEC1E4A42973728E897C2
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/CG_RbAAY7iX9Zy9HbkOKWAZZaQ4.roa
Signing time: Tue 16 Jun 2026 17:11:36 +0000
ROA not before: Tue 16 Jun 2026 17:11:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62014
IP address blocks: 91.108.16.0/22 maxlen: 22
91.108.16.0/23 maxlen: 23
91.108.18.0/23 maxlen: 23
91.108.56.0/23 maxlen: 23
91.108.56.0/24 maxlen: 24
91.108.57.0/24 maxlen: 24
149.154.168.0/22 maxlen: 22
2001:b28:f23f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 09:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d1:6a:c8:86:e5:bd:ec:1e:4a:42:97:37:28:e8:97:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Jun 16 17:11:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=086fd16c0018ee25fd672f476e438a580659690e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c7:89:e5:4e:61:0e:3c:da:1c:51:5b:f5:83:
64:0d:c3:f1:5e:1e:74:e8:9f:09:b2:5b:17:cd:cd:
7d:d0:b9:37:94:73:a4:dd:21:57:39:c5:b7:be:f3:
23:13:d2:4a:2a:75:29:15:c8:79:3c:54:88:86:1c:
c2:b1:dd:b0:29:48:10:ce:f0:a6:52:f2:7a:62:b6:
b9:dc:11:b9:30:ca:d2:11:fd:37:b6:c0:ad:7a:5c:
23:e5:c7:7a:71:a9:03:e2:b1:11:81:62:12:d2:27:
39:40:35:76:13:4a:d0:d8:89:af:0f:e6:96:e1:1e:
66:0c:b2:22:2d:56:e4:fc:d3:6b:36:c1:c0:e2:2a:
b3:aa:f7:e7:5a:75:81:6e:e3:37:21:a5:2c:32:79:
12:a0:0c:4d:d5:a4:de:81:4e:db:80:e3:32:17:be:
fc:74:69:3e:d2:36:3a:78:97:1e:3e:f5:0d:51:1a:
05:07:0c:76:9a:83:95:05:58:8e:fd:2b:d7:34:b1:
64:42:a3:05:52:76:52:20:dd:8b:2b:50:9f:b3:44:
db:ba:b3:10:40:e0:56:00:f3:5f:1b:19:b1:c6:10:
af:ad:e9:96:74:18:6d:51:c4:c6:90:cf:5c:38:89:
9d:53:fe:fc:8f:7f:1a:d6:13:df:a2:bf:dc:7c:93:
b2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6F:D1:6C:00:18:EE:25:FD:67:2F:47:6E:43:8A:58:06:59:69:0E
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/CG_RbAAY7iX9Zy9HbkOKWAZZaQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.16.0/22
91.108.56.0/23
149.154.168.0/22
IPv6:
2001:b28:f23f::/48
Signature Algorithm: sha256WithRSAEncryption
5b:01:46:8f:7b:56:34:1b:ed:56:6f:df:a3:ae:04:62:99:34:
69:e6:36:1a:e0:9b:8f:6d:6b:a7:9b:9e:6b:5e:e7:d7:33:87:
e6:a1:c6:ce:89:9b:0e:a2:28:26:43:76:8f:65:1c:4a:6e:09:
09:40:9b:57:b1:07:d0:e6:06:86:fc:18:41:69:e6:34:2a:69:
bc:9c:08:d8:36:bc:b0:bb:2f:39:77:9e:ed:15:2d:74:ea:b2:
ee:8a:67:c2:6a:64:ac:5a:41:78:92:aa:6e:a9:6a:2f:15:1f:
5a:13:9d:27:a8:ae:87:33:d9:98:f0:2f:1d:bf:e2:4a:d2:99:
5b:36:b2:d7:8f:be:2e:cf:45:ce:a2:b7:57:3a:7e:57:19:a1:
8b:69:bc:09:6b:9b:1a:44:71:a9:36:59:20:49:bc:7b:93:73:
c1:ad:8e:d4:ca:76:db:c8:69:ef:97:5f:09:a6:5e:ed:88:13:
69:ba:0c:96:38:62:59:30:46:e6:15:bb:b9:bf:d1:73:93:2c:
07:71:9a:b0:8f:1c:2e:94:bd:02:10:c4:dc:5e:18:c6:53:52:
96:a7:34:5b:7d:f0:a9:df:48:34:c5:67:a7:d4:ca:cb:5f:ca:
a7:78:df:09:41:43:a2:2a:f0:9a:85:74:7a:69:c5:12:95:3a:
e5:48:1a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 16:30:52 2026 by rpki-client