Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/9GNJULiHerXMrZEUQ4iXS5c0poQ.roa
File: 9GNJULiHerXMrZEUQ4iXS5c0poQ.roa (raw, json)
Hash identifier: 5AM6hNbc8zX+Kgni42XJxN4NaPkDnj1J+EO7270Xp8o=
Subject key identifier: F4:63:49:50:B8:87:7A:B5:CC:AD:91:14:43:88:97:4B:97:34:A6:84
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 019CC23CC0A25327313BD302A66093862572
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/9GNJULiHerXMrZEUQ4iXS5c0poQ.roa
Signing time: Fri 06 Mar 2026 08:21:27 +0000
ROA not before: Fri 06 Mar 2026 08:21:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 91.221.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c2:3c:c0:a2:53:27:31:3b:d3:02:a6:60:93:86:25:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Mar 6 08:21:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4634950b8877ab5ccad91144388974b9734a684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5a:d2:16:89:11:8f:04:19:14:a6:a7:27:fd:
e0:d6:c8:cd:8a:f9:7d:fa:a8:46:d0:e5:72:24:4e:
91:1a:38:c1:ed:06:33:03:e1:ef:64:ca:e1:78:92:
8e:42:e2:d1:c7:fb:3d:bc:e6:3c:2e:cb:c9:66:d2:
6f:43:25:61:5e:41:27:db:8a:21:1f:24:5f:f9:4e:
4b:30:b7:d9:bc:0b:39:05:fb:d2:bd:98:cb:d5:dc:
2a:5a:8b:3d:a0:fe:fa:59:ba:76:93:3f:cd:2f:ed:
21:2f:78:2c:3b:8d:d8:03:f8:6a:69:f1:4e:c6:05:
73:7b:ac:8a:73:7f:9f:78:73:80:40:6d:80:cd:6d:
f8:f0:29:70:59:d7:fe:64:92:e7:25:41:88:6f:08:
fa:a3:7f:cd:ca:e7:50:9a:5e:6a:6d:01:a3:5e:7a:
e7:61:ac:a6:17:ac:2c:a5:64:ee:4c:23:52:62:4a:
d2:70:a9:5b:63:7b:50:15:bd:24:a1:d6:cd:07:14:
a8:3c:57:60:19:aa:55:39:21:a7:20:c4:62:14:bd:
f3:44:99:ea:e9:9f:98:7d:84:32:69:4d:e1:de:44:
a7:d9:1b:12:88:ae:92:e1:eb:ca:f3:dd:71:a8:55:
8c:cc:5c:73:0b:0a:f4:d8:22:c3:84:38:d5:9a:5d:
53:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:63:49:50:B8:87:7A:B5:CC:AD:91:14:43:88:97:4B:97:34:A6:84
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/9GNJULiHerXMrZEUQ4iXS5c0poQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.117.0/24
Signature Algorithm: sha256WithRSAEncryption
59:37:a4:23:28:41:18:69:79:91:de:c1:89:4f:70:5e:82:8f:
6c:de:72:54:1e:5b:a2:17:94:bc:4f:46:d2:4e:ee:6d:29:c5:
d3:c8:6d:9c:30:0a:47:8f:d9:42:3e:7a:f3:52:3a:04:58:a7:
e4:ec:b5:0f:d5:55:e6:af:a4:4a:6c:8b:bb:7a:0c:fa:a4:b4:
6c:67:e2:e3:08:81:2f:b6:4a:9b:b6:6f:cc:30:92:c6:8b:06:
13:15:b8:bd:76:63:b3:9b:ef:3b:26:f1:30:35:bd:50:fc:b9:
8a:94:90:42:5c:98:1a:30:79:b6:8b:07:85:31:98:c4:64:2d:
08:10:79:b9:5d:f8:f4:b9:d8:7c:83:b5:73:99:47:be:d6:e6:
e8:dd:26:20:3f:d4:92:81:62:7f:e9:ce:63:ed:4e:e5:36:0c:
fa:37:11:24:ec:2f:15:72:42:e4:ff:71:ce:6c:bf:6f:6c:c5:
13:63:12:84:fc:68:d3:c6:5f:69:8b:e8:3d:8a:32:67:bb:50:
07:6f:35:3f:9c:da:31:57:f9:c3:f4:af:68:c7:3b:02:d7:29:
02:05:d4:16:33:26:19:f5:29:ea:5e:9e:1b:96:1e:57:c4:71:
dc:f2:31:59:f7:cd:02:6b:3e:3e:ac:df:33:f6:f0:50:4f:38:
49:1d:11:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 10:56:53 2026 by rpki-client