Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/v94NxlhLC5JfK0F3wlDeGhiXIaM.roa
File: v94NxlhLC5JfK0F3wlDeGhiXIaM.roa (raw, json)
Hash identifier: t3kxnuazBFVu5n7erK9ZnDyudXKzRMRhXRP6VbC6QIE=
Subject key identifier: BF:DE:0D:C6:58:4B:0B:92:5F:2B:41:77:C2:50:DE:1A:18:97:21:A3
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 019C12B6B7CF78F9014D1037EDB6533C2634
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/v94NxlhLC5JfK0F3wlDeGhiXIaM.roa
Signing time: Sat 31 Jan 2026 06:21:30 +0000
ROA not before: Sat 31 Jan 2026 06:21:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135391
IP address blocks: 91.221.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 18:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:12:b6:b7:cf:78:f9:01:4d:10:37:ed:b6:53:3c:26:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Jan 31 06:21:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bfde0dc6584b0b925f2b4177c250de1a189721a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8d:b4:39:b6:fa:b1:55:78:3b:0c:58:47:b5:
e2:91:fd:65:96:f8:51:10:76:61:e2:ae:d0:2e:ac:
3f:e6:05:b0:f7:53:6f:98:f3:42:18:a0:90:9e:d8:
22:9e:00:81:55:bf:da:e7:95:bf:e2:50:90:a3:50:
ff:2e:bb:e8:6b:a9:99:a4:f4:d6:71:ed:cb:60:e6:
05:fb:2d:66:b9:66:62:93:41:b2:cc:5c:0f:52:94:
cd:49:b2:8c:6b:51:bc:a9:97:79:aa:4b:2d:0d:c4:
66:9b:a0:28:9b:e3:2e:38:7f:d0:fb:5a:86:76:77:
c0:59:8b:c1:4f:ee:d2:bd:cb:64:59:a2:67:20:fd:
85:63:a6:b0:32:20:b0:1f:09:2b:7d:1a:9f:b5:39:
c7:fe:4c:8f:52:44:67:7b:b5:09:f7:71:43:13:9f:
62:1e:96:4b:9a:3a:fe:01:7b:1c:3b:69:e5:30:38:
d9:71:f3:f5:3a:4d:7f:95:14:27:bd:56:20:f6:b7:
8d:1b:82:ce:14:0a:6d:60:41:8f:cf:88:e9:8c:6e:
e7:09:0c:c9:d2:99:53:e0:a7:c5:44:6f:8b:76:78:
e7:f4:13:af:46:82:7c:e0:09:96:db:7b:3a:e0:fe:
11:bb:d5:4d:c1:9d:99:d4:75:7f:81:06:29:01:fc:
8c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DE:0D:C6:58:4B:0B:92:5F:2B:41:77:C2:50:DE:1A:18:97:21:A3
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/v94NxlhLC5JfK0F3wlDeGhiXIaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.117.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:28:9a:7f:57:c0:3d:85:a0:b0:fc:52:e0:13:20:17:b3:5d:
e6:98:5a:d8:e6:96:92:5f:a4:38:88:c6:86:67:29:ec:86:36:
08:cc:d6:99:ef:cc:23:c0:c2:55:94:ca:17:78:74:f9:a2:fd:
95:2f:ca:6a:81:3e:9d:9b:58:de:22:86:f9:8b:74:ff:eb:a3:
d7:64:1e:49:6f:d5:94:8a:a7:a8:59:96:6d:9e:8d:6c:7d:53:
35:13:80:09:8b:67:0f:10:7f:67:92:62:13:f2:45:16:13:96:
fd:0a:e6:5f:f2:df:c0:86:30:ef:6f:63:87:37:62:fe:f6:58:
06:61:5e:a3:ad:ae:7e:7f:9b:07:83:29:b6:46:8d:51:7e:6d:
65:60:59:d5:44:49:3a:a0:1b:87:a1:e4:f6:95:b3:b6:ea:e3:
74:f6:20:76:28:7a:c7:cc:b8:fa:fc:ad:ca:8b:5d:6e:e2:2e:
e0:04:4b:e2:69:04:f3:c9:ea:42:09:27:d6:9a:55:a2:d2:db:
35:2d:11:a2:8b:7f:c4:9a:a8:fc:67:c6:df:8c:93:46:86:8a:
02:aa:dc:8d:7b:45:7f:3a:a8:9b:14:fd:64:9c:b3:85:c9:bc:
51:2d:b8:ad:32:c0:20:e1:5f:34:4c:f0:19:da:34:a9:39:6f:
68:92:91:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:40:27 2026 by rpki-client