Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/1-wesv5oJOa1qah4Sb1Y_SMZgZeY.roa
File: 1-wesv5oJOa1qah4Sb1Y_SMZgZeY.roa (raw, json)
Hash identifier: I96sy1nSgMQZUYzweUrVRc61uzxlUOwBWi3rfbik/bs=
Subject key identifier: FB:07:AC:BF:9A:09:39:AD:6A:6A:1E:12:6F:56:3F:48:C6:60:65:E6
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 019FBBA84742B8C3473596EDEDFBE8B12D8E
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/1-wesv5oJOa1qah4Sb1Y_SMZgZeY.roa
Signing time: Sat 01 Aug 2026 04:49:55 +0000
ROA not before: Sat 01 Aug 2026 04:49:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 91.221.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:bb:a8:47:42:b8:c3:47:35:96:ed:ed:fb:e8:b1:2d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Aug 1 04:49:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb07acbf9a0939ad6a6a1e126f563f48c66065e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ae:36:07:c0:17:6a:bd:cd:8e:90:9d:7c:6f:
5d:40:b5:9a:4b:08:c5:ed:10:96:fe:70:88:30:db:
01:6e:e6:be:f5:d8:4f:e6:ff:c3:72:44:e5:7a:7c:
c6:71:bb:62:16:aa:5f:7b:ab:b3:ba:5d:45:06:c7:
58:03:e3:2c:7d:47:c4:a5:d1:a5:7d:97:6a:0f:50:
ce:2f:1b:d3:bb:dc:5e:18:04:a3:a8:a9:49:ca:3d:
25:ac:1b:81:2a:b2:a5:f5:31:df:0b:10:63:ad:44:
fd:47:f9:b7:6a:82:af:05:07:f2:39:89:40:dc:9b:
0a:e1:11:cd:35:3c:27:27:8a:ce:e3:66:5a:98:1b:
d6:9e:56:d7:03:dc:64:23:55:04:54:84:43:09:94:
5d:81:39:7c:c5:7d:9e:94:6e:5a:43:eb:59:f5:97:
eb:26:21:0e:b3:85:79:f9:10:42:08:1b:a3:3c:ba:
d3:8c:6b:19:88:7e:ce:25:62:da:c2:c0:e7:09:a7:
26:09:1d:7e:c4:27:18:bd:9c:72:0d:1a:dd:33:70:
92:f0:4f:e7:65:55:cb:1a:1f:6b:24:95:55:19:28:
70:cf:5e:3b:64:dc:a4:2c:4f:81:53:9c:19:1a:a0:
e6:7e:14:8e:db:d3:61:e5:b1:b5:e1:de:61:cd:22:
87:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:07:AC:BF:9A:09:39:AD:6A:6A:1E:12:6F:56:3F:48:C6:60:65:E6
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/1-wesv5oJOa1qah4Sb1Y_SMZgZeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.117.0/24
Signature Algorithm: sha256WithRSAEncryption
79:67:fc:a5:21:70:21:3d:9e:f8:41:cb:c0:46:b2:ab:ae:fb:
06:04:1d:f8:10:a6:7f:99:5d:e9:10:26:2e:7d:b4:a0:56:21:
6d:71:81:29:e2:ce:6f:4b:68:02:b4:c6:66:c5:d3:c4:ac:21:
13:a1:a9:f8:58:19:3e:77:18:99:23:b7:3b:8b:8b:a0:96:8e:
ca:85:41:a1:c1:95:3e:e0:a9:18:f7:1e:f7:09:0f:57:91:c1:
dc:ce:d1:7a:dd:18:31:36:ef:38:d0:3c:e6:bd:e9:82:18:94:
86:24:8e:97:d0:07:44:b3:a7:45:37:7d:f0:92:7c:ae:bc:26:
d0:aa:85:9c:b0:19:c7:f0:0b:5c:94:72:e5:27:85:13:51:c5:
b1:e4:13:3d:8d:c1:6a:de:bc:01:d0:b9:cf:02:cc:34:ed:5e:
34:6f:1a:57:12:26:39:8f:81:c2:d6:64:59:a4:9e:c8:97:09:
00:6a:1f:e0:82:ff:f8:b5:c9:b8:d0:71:5c:c2:11:d8:66:4c:
5d:db:c5:4b:fa:4f:66:79:1b:40:75:94:ec:4c:eb:eb:62:72:
fe:92:91:a3:a4:1b:84:e1:03:33:c8:cc:e5:95:c0:49:a9:5e:
b9:f3:05:28:e2:c0:39:17:96:a2:05:08:bc:27:f3:c8:bc:48:
1a:dc:fd:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:18:54 2026 by rpki-client