Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/1-hb19mdI_t8mKtuNbtby2D1HE0E.roa
File: 1-hb19mdI_t8mKtuNbtby2D1HE0E.roa (raw, json)
Hash identifier: jcOYD7AE0FqD3JKvlPPueqZV5Q+Nu1NLlSwe5Glm784=
Subject key identifier: FA:16:F5:F6:67:48:FE:DF:26:2A:DB:8D:6E:D6:F2:D8:3D:47:13:41
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 01A076385EE5461D5B1A11147EB2F606205C
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/1-hb19mdI_t8mKtuNbtby2D1HE0E.roa
Signing time: Sun 06 Sep 2026 10:16:40 +0000
ROA not before: Sun 06 Sep 2026 10:16:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2856
IP address blocks: 91.221.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 10:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:76:38:5e:e5:46:1d:5b:1a:11:14:7e:b2:f6:06:20:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Sep 6 10:16:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa16f5f66748fedf262adb8d6ed6f2d83d471341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:63:bf:29:75:d4:4c:64:be:c7:8f:be:bc:4b:
bc:27:a1:9e:79:2a:52:4b:5c:2d:8b:23:e1:5c:54:
53:ad:fa:29:e6:58:7a:5c:23:26:32:df:33:c8:da:
a5:db:6b:70:8a:bc:39:c0:df:bd:d1:b9:51:85:c8:
c7:e8:b4:55:83:e8:67:20:b6:13:37:b7:65:e5:b3:
ab:0f:b6:c5:08:e4:d8:f2:d3:47:bc:88:5c:05:a8:
62:e1:28:4d:25:10:bb:15:02:c5:7d:8d:0b:0e:55:
ff:52:7a:f7:9f:f2:1f:bb:b4:87:38:78:ad:54:ce:
df:74:4f:54:25:d6:a3:1f:f3:97:0c:6f:29:af:4b:
14:5c:7a:c4:e3:0c:e9:d2:2b:7f:70:f8:5c:3d:23:
99:ed:a2:d2:3a:cc:8b:b5:04:1d:36:c6:49:0b:34:
76:42:9c:2f:a4:8b:c0:c4:4d:44:ae:f6:db:36:f0:
c2:a1:8b:92:69:c5:7c:c9:5e:32:e9:a5:df:64:6a:
67:de:09:9c:99:b2:64:e3:a9:67:c8:93:73:12:52:
3e:b5:e3:fb:22:12:f0:36:01:4c:47:c2:18:eb:27:
38:70:6c:d3:e7:3e:13:a9:d7:a4:bc:e3:52:78:ab:
97:8e:87:13:aa:17:aa:44:b4:80:7f:3f:cb:db:39:
93:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:16:F5:F6:67:48:FE:DF:26:2A:DB:8D:6E:D6:F2:D8:3D:47:13:41
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/1-hb19mdI_t8mKtuNbtby2D1HE0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.116.0/24
Signature Algorithm: sha256WithRSAEncryption
31:7d:19:28:5f:89:68:a0:aa:8d:c9:f4:c5:32:88:b0:48:5f:
d2:a5:6d:2c:7b:1c:62:52:58:ec:60:12:5c:b1:de:72:d7:c2:
fd:a8:36:22:08:74:78:4c:c3:00:72:e2:76:d1:96:fa:8f:6e:
24:bb:16:d0:f1:96:ad:7e:a7:b0:f9:88:7c:f1:fc:b1:a9:2d:
bb:20:b3:ca:9d:d3:d5:42:a5:a2:83:19:a7:56:e7:b8:a4:14:
04:93:ad:92:ff:80:5d:f1:24:19:66:93:cd:58:83:11:b9:d1:
e9:4c:4d:78:75:2f:1c:98:ef:95:7c:ae:79:ae:8a:4a:8e:8b:
a1:5b:9f:62:97:63:ba:60:31:bb:b1:54:59:40:6a:ff:e1:2e:
5c:86:c3:c0:43:64:b1:d9:6e:6f:f9:d8:da:e6:a5:e0:fe:25:
70:89:c2:a0:b9:76:07:27:c0:82:0b:5b:ec:8d:2b:b5:16:e5:
a9:b6:e9:e1:bc:67:ac:22:26:ac:a3:1f:94:f6:4c:dc:6b:a8:
07:8d:29:0b:c0:a9:83:86:59:36:28:0d:0c:93:83:a3:82:b3:
e1:db:dc:1f:e6:ba:c8:9c:f0:9e:be:bd:40:27:32:71:0f:4e:
55:66:c0:7e:15:d5:b1:af:db:04:95:3a:00:ab:00:e5:b0:40:
29:6d:66:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 19:47:10 2026 by rpki-client