Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/9q50kG_riEUPt-scfGdki5ASYkw.roa
File: 9q50kG_riEUPt-scfGdki5ASYkw.roa (raw, json)
Hash identifier: JxgNWnECobtZ+p3Ufnx5SSxYpaKvTy6RNLrzJM+LjPA=
Subject key identifier: F6:AE:74:90:6F:EB:88:45:0F:B7:EB:1C:7C:67:64:8B:90:12:62:4C
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 01A159C67A6CEE3AA5B6CE87825C2FA54353
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/9q50kG_riEUPt-scfGdki5ASYkw.roa
Signing time: Tue 20 Oct 2026 14:45:42 +0000
ROA not before: Tue 20 Oct 2026 14:45:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 91.221.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 20:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:c6:7a:6c:ee:3a:a5:b6:ce:87:82:5c:2f:a5:43:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Oct 20 14:45:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6ae74906feb88450fb7eb1c7c67648b9012624c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3f:77:d6:f2:1a:31:8f:40:e1:bd:16:3b:28:
96:65:b7:48:fa:8e:a6:4c:2d:ed:e4:d3:6e:b1:67:
a8:4c:0e:73:df:3b:eb:b4:b6:04:18:e3:52:f8:5c:
cb:78:ef:e7:eb:05:84:6a:74:95:c7:12:0c:a8:d8:
be:9e:98:48:00:83:40:fa:23:5a:72:f8:df:c7:a2:
b9:3f:ba:ce:bf:9b:bb:a6:11:e8:e7:07:57:2e:9c:
5f:e4:96:05:f1:04:06:1e:23:22:cf:66:db:4f:ba:
72:eb:ff:f8:05:37:a5:7d:03:b0:f1:de:8c:f9:fa:
e8:08:0d:71:0e:f4:62:f7:dc:08:c9:98:e5:e2:3f:
dd:fc:17:25:ae:86:49:4f:31:e6:49:fd:14:ef:34:
32:68:9d:2e:31:83:f0:56:3c:52:dd:71:b6:df:7f:
fb:d2:22:ae:d4:88:53:96:ad:44:a0:e8:2e:3a:f1:
41:83:9e:4a:29:bd:09:22:80:77:0b:e8:bf:e7:cd:
87:2e:f0:70:12:0f:19:2c:5e:50:9d:0f:52:9a:7e:
c6:a1:f8:b9:e7:4b:7b:4c:9a:3f:45:db:d5:96:92:
b7:5d:fc:49:c4:ad:5e:c9:de:7c:c4:0c:18:31:37:
ef:0d:b1:b6:16:ec:03:4f:cf:ee:6c:e2:c5:00:50:
8e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AE:74:90:6F:EB:88:45:0F:B7:EB:1C:7C:67:64:8B:90:12:62:4C
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/9q50kG_riEUPt-scfGdki5ASYkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.117.0/24
Signature Algorithm: sha256WithRSAEncryption
15:59:dd:16:3d:4e:0b:4f:6a:b2:7f:c7:f8:44:46:6d:e4:50:
95:0f:9d:af:16:b5:dd:18:5f:95:d1:2b:db:a7:9d:bc:95:ef:
c1:1b:05:9e:06:1e:0c:c4:b2:b4:fc:3e:ad:08:c4:f4:b8:c7:
74:71:a8:8f:e7:a1:db:97:f5:f0:75:75:32:f3:cc:97:5f:bc:
59:72:b4:0f:3d:d7:27:0f:79:97:cc:3b:e2:88:b3:54:05:2d:
50:c0:29:16:48:39:d5:3a:07:e8:20:3e:75:9e:fe:b8:32:7a:
87:40:67:85:be:f0:71:13:b2:78:e0:82:2f:9b:45:af:f5:d8:
7d:04:4f:f6:78:15:d2:14:e1:0b:e6:ae:9f:32:81:cd:bf:54:
d7:d1:fd:d2:9b:54:c8:0f:f9:fe:df:7e:4e:dc:77:48:ef:e1:
d4:cf:a0:23:84:45:e3:6a:2a:a8:56:3e:1a:0a:20:a9:c4:82:
46:a9:0d:ef:4b:5f:61:59:3e:85:ff:ec:c7:05:da:44:91:c9:
51:87:43:ab:a4:f1:b8:dc:f6:fb:90:99:94:04:4b:1b:f0:82:
4a:5d:8d:86:a7:ea:88:e8:6b:1a:67:68:27:87:5d:72:25:48:
c9:f6:c4:06:d6:88:eb:a3:5c:90:d9:ef:c6:36:91:16:54:7d:
41:4f:6a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:39:58 2026 by rpki-client