Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/Cy9jYxP5Is9qzAE4mjjJSQ84yn4.roa
File: Cy9jYxP5Is9qzAE4mjjJSQ84yn4.roa (raw, json)
Hash identifier: xIEo6Nx/rguZfayHdTwWZm/130WgWZDHXVk3DDFhWPw=
Subject key identifier: 0B:2F:63:63:13:F9:22:CF:6A:CC:01:38:9A:38:C9:49:0F:38:CA:7E
Certificate issuer: /CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Certificate serial: 019FD18330D171FE9007D86200210FE17EEE
Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/Cy9jYxP5Is9qzAE4mjjJSQ84yn4.roa
Signing time: Wed 05 Aug 2026 10:41:03 +0000
ROA not before: Wed 05 Aug 2026 10:41:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49418
IP address blocks: 91.209.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:83:30:d1:71:fe:90:07:d8:62:00:21:0f:e1:7e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Validity
Not Before: Aug 5 10:41:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b2f636313f922cf6acc01389a38c9490f38ca7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ae:a6:30:03:14:fd:95:4b:20:47:36:b4:c8:
48:37:8f:01:70:62:4b:ab:e7:d6:25:f9:b5:77:ac:
0a:40:f5:5c:5f:c7:35:e2:f3:96:a3:af:12:77:e5:
f9:1b:64:0d:7e:0f:ee:60:17:5b:e9:bd:6c:c5:d2:
8f:95:25:ae:6e:47:62:ad:de:56:fa:2b:7e:14:e7:
a0:48:f4:4e:f6:3b:2e:b6:87:46:66:1d:f8:6d:f7:
98:cf:cd:16:31:28:6a:dd:26:d6:d6:ee:4c:d7:12:
19:ee:93:ff:71:cc:7d:e6:16:0d:35:37:f2:47:88:
31:25:90:91:14:63:e5:21:a9:2d:36:b1:a6:33:82:
8e:d7:a6:c6:a2:75:bb:57:80:02:74:dc:66:1a:77:
90:63:ec:e4:54:60:9b:c3:b8:25:e2:86:f0:de:bf:
a9:1b:15:b8:05:51:04:60:39:50:ce:74:1c:d2:33:
ab:70:09:0d:15:a9:92:df:73:47:94:81:35:1d:d0:
2c:0b:cd:e2:36:59:e3:b6:9a:98:9b:c6:d3:eb:14:
25:2e:41:38:c6:ab:de:b9:47:4d:90:10:21:03:68:
f6:c1:4f:63:6d:fe:fb:1a:f2:ae:46:8e:83:58:4f:
71:68:ef:72:37:49:41:8c:d9:b0:a0:c1:01:bd:8d:
7d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2F:63:63:13:F9:22:CF:6A:CC:01:38:9A:38:C9:49:0F:38:CA:7E
X509v3 Authority Key Identifier:
keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/Cy9jYxP5Is9qzAE4mjjJSQ84yn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.135.0/24
Signature Algorithm: sha256WithRSAEncryption
47:ba:53:e5:96:ed:db:ac:20:f9:b3:f7:67:dd:a0:f4:ac:43:
2b:c7:1c:8c:14:7f:fb:11:f5:62:dc:ef:66:bd:cd:55:f8:f1:
c6:44:ba:eb:f6:12:d6:6d:00:9a:24:05:50:e4:d0:8a:51:82:
68:00:ac:b6:e0:d2:5b:24:b7:d7:ea:6f:62:66:f5:45:2c:07:
c8:7a:61:0f:da:a2:9f:94:31:a0:c5:7c:7b:13:dc:67:dd:08:
fa:84:62:c9:ae:1f:86:e8:3a:fd:c1:ee:83:aa:e4:52:ef:85:
34:c7:65:e7:b0:0a:a8:eb:9a:53:28:02:28:8a:6b:de:9c:2e:
97:6b:f0:d7:29:04:76:a1:af:07:81:6e:08:07:50:a7:1e:2a:
02:46:af:7b:0c:dd:1e:9b:d7:97:3c:08:9a:81:b1:fb:53:70:
86:37:06:9c:59:e8:5f:29:b0:9d:c1:9e:d5:7f:bf:fe:42:9b:
6d:c6:0c:56:bb:fb:a1:dc:49:99:33:a1:d9:fd:53:f1:00:5b:
d9:33:46:55:cd:94:90:d2:cd:48:f2:c0:6b:cc:c4:60:70:70:
d4:60:70:15:88:d5:e5:d3:96:df:20:fb:f8:a5:d6:53:17:54:
a4:38:33:e5:44:fe:44:a4:3b:1b:5d:89:c4:c0:9e:ff:ec:5e:
92:13:aa:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:29:39 2026 by rpki-client