Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/fhhcB1HegWeR7KLSofrY7U0ya1M.roa
File: fhhcB1HegWeR7KLSofrY7U0ya1M.roa (raw, json)
Hash identifier: DyMNRB2e0HLbmKlN1Ms8WYEAc3uOgoEDv09pPyY1qC8=
Subject key identifier: 7E:18:5C:07:51:DE:81:67:91:EC:A2:D2:A1:FA:D8:ED:4D:32:6B:53
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 019FBBA9316F89520E7EE9DC886E33EFA68B
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/fhhcB1HegWeR7KLSofrY7U0ya1M.roa
Signing time: Sat 01 Aug 2026 04:50:55 +0000
ROA not before: Sat 01 Aug 2026 04:50:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 91.221.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Aug 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:bb:a9:31:6f:89:52:0e:7e:e9:dc:88:6e:33:ef:a6:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Aug 1 04:50:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e185c0751de816791eca2d2a1fad8ed4d326b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:46:2f:11:8d:8a:2a:b2:e2:d3:df:54:e6:eb:
3d:2e:a3:81:87:3a:f6:57:33:34:82:8b:be:ba:25:
ab:93:e3:f3:af:ab:fc:01:e4:ae:42:d5:04:19:64:
c5:db:7f:a2:36:7d:82:da:8e:c3:d2:32:bf:ef:75:
90:42:06:23:9e:07:f2:11:6d:3f:12:49:d7:f0:a1:
5c:ec:e8:b8:98:e2:c6:3c:4b:98:d5:18:2a:5c:40:
a9:2d:26:a3:e7:0b:d5:ca:f0:a2:e6:d7:6c:39:40:
85:84:6e:64:83:ac:87:71:6d:8f:80:9a:76:60:b7:
68:b2:36:12:c4:9a:e8:94:22:c8:8c:75:99:b2:92:
f7:a6:4f:34:2b:a3:21:76:49:c4:41:12:84:a4:f0:
c7:e9:f4:2c:9b:d1:3b:57:fd:5a:ff:1f:20:73:cc:
db:c7:97:0c:2f:4e:e1:d9:4a:95:6a:16:15:3d:12:
10:5e:86:a7:5c:77:16:a9:d8:da:3a:f9:e6:cf:63:
f9:70:65:df:f7:8b:dc:28:91:9b:10:14:77:1b:8e:
b9:9c:4a:37:41:ad:dc:ea:d2:d3:64:55:b6:e4:65:
ab:bd:72:b7:d7:96:30:83:36:c0:ab:01:1c:68:a3:
50:52:74:66:98:fe:f3:da:39:17:c3:8d:58:52:1a:
e3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:18:5C:07:51:DE:81:67:91:EC:A2:D2:A1:FA:D8:ED:4D:32:6B:53
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/fhhcB1HegWeR7KLSofrY7U0ya1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.116.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:ce:cf:5e:dd:01:c9:54:cc:89:11:29:9c:aa:f0:fa:12:2d:
14:26:cc:c2:5c:07:f8:8f:d0:2b:cc:10:32:60:02:38:7b:fc:
60:93:c1:b1:76:c0:17:92:36:c9:bf:73:56:15:d9:cd:c1:7e:
bf:a5:f9:45:c3:d8:cc:23:52:6b:2f:8b:ad:f5:e8:e7:fe:a2:
5f:04:9f:12:83:e5:b9:01:3a:e7:0d:6b:89:01:a2:2c:e7:2b:
48:a9:91:83:57:b5:cb:3c:3c:d5:23:35:91:a6:e1:7f:b8:da:
ed:49:6c:7f:02:88:06:64:a2:f5:9e:38:d3:a9:53:30:f1:e2:
59:b7:fb:f5:c2:6f:f4:39:0b:87:82:1f:ed:34:06:0f:65:70:
6f:a8:8e:c7:28:d9:fa:31:c5:08:57:27:dc:3c:00:a3:43:a7:
87:58:36:20:f5:e3:0d:cf:1a:c8:1e:5a:09:6b:7d:d5:0e:12:
25:46:fc:ce:4d:da:83:c9:bb:c9:fc:2b:7f:2e:8e:41:2e:cc:
aa:2d:00:33:29:ca:5d:f2:2b:58:ac:e5:11:b7:78:a1:32:92:
30:a8:ce:b3:cd:77:61:f8:2c:94:66:05:04:4f:42:b5:76:b8:
4e:56:d7:0a:52:91:d7:b8:ac:5f:f6:f0:62:c5:2f:f6:fd:e1:
ed:45:e9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 06:34:55 2026 by rpki-client