Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/RoHY_TyCIKuHKcf5bTdo2OERIzA.roa
File: RoHY_TyCIKuHKcf5bTdo2OERIzA.roa (raw, json)
Hash identifier: 6PxAk9JiYie0v9omHCCyuwhuUyZa8JMY8KEd6K84EZk=
Subject key identifier: 46:81:D8:FD:3C:82:20:AB:87:29:C7:F9:6D:37:68:D8:E1:11:23:30
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368DAA330D86E7F0312C12618E9A6D0
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/RoHY_TyCIKuHKcf5bTdo2OERIzA.roa
Signing time: Thu 02 Jul 2026 15:18:21 +0000
ROA not before: Thu 02 Jul 2026 15:18:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210703
IP address blocks: 91.103.252.0/23 maxlen: 23
94.142.136.0/23 maxlen: 23
185.94.164.0/23 maxlen: 23
185.233.202.0/23 maxlen: 23
193.124.188.0/23 maxlen: 23
2a04:5201:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:da:a3:30:d8:6e:7f:03:12:c1:26:18:e9:a6:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4681d8fd3c8220ab8729c7f96d3768d8e1112330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5c:26:bd:8d:4d:aa:a6:86:52:72:49:4d:15:
c5:93:36:ab:d1:fc:04:49:03:4e:59:52:f4:87:34:
8f:47:4e:c6:31:b6:ea:d1:4c:15:02:9a:fe:f7:db:
f6:b9:ec:05:68:5d:d2:99:d0:c2:be:64:f3:db:06:
ff:1d:38:32:6d:c4:2b:2a:67:82:64:e1:15:41:75:
c1:fc:e2:9e:12:2a:28:48:a3:57:66:e8:f6:be:a0:
70:83:00:86:59:d1:76:a5:99:de:74:56:49:91:57:
d7:f3:de:08:ae:8c:a9:21:28:f4:fc:06:7e:94:96:
ec:b9:bc:fc:bd:37:97:87:66:b4:70:7c:7a:0e:aa:
7b:bf:59:1d:be:80:f6:52:2b:a7:fb:c7:84:11:8e:
a4:a4:34:80:33:29:bf:f4:38:bd:3a:da:5c:71:e4:
74:a6:e5:df:03:bf:a0:b0:cc:a1:b4:56:93:7e:99:
c2:e2:34:d4:1c:5e:e7:12:d4:32:89:29:03:02:7d:
df:47:3e:90:04:b8:95:1f:f5:ce:b8:24:9c:dd:c5:
70:0a:76:d9:0f:95:89:ff:90:cf:fb:cd:65:39:19:
19:29:af:06:97:10:3f:c4:16:74:89:9c:33:ee:11:
5a:04:d7:09:5b:65:22:d2:0a:44:41:dd:1a:ce:5f:
9c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:81:D8:FD:3C:82:20:AB:87:29:C7:F9:6D:37:68:D8:E1:11:23:30
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/RoHY_TyCIKuHKcf5bTdo2OERIzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.252.0/23
94.142.136.0/23
185.94.164.0/23
185.233.202.0/23
193.124.188.0/23
IPv6:
2a04:5201:7::/48
Signature Algorithm: sha256WithRSAEncryption
2b:bc:e2:f5:f4:9b:6a:81:d4:f9:63:00:9e:4e:30:14:86:56:
f4:1a:15:fd:18:50:35:0f:3c:19:2a:47:83:f9:2d:57:1b:58:
db:f0:8e:db:4a:f8:a3:ae:4b:37:57:f7:b8:ee:32:ec:8e:0c:
71:91:45:49:53:1e:1a:ad:76:97:73:c3:ff:10:55:0f:2d:53:
da:b0:fa:28:7a:dc:ae:f2:c9:1f:69:fa:59:ea:cd:c2:97:9f:
7b:61:e9:c8:ae:b9:bf:c5:f8:4f:f5:a3:15:76:ca:22:14:2f:
71:56:87:7e:aa:3d:9e:2d:b5:74:3e:15:0f:82:95:8d:02:74:
bf:3b:24:f5:a9:60:f8:94:64:9e:ed:a9:20:0f:b8:fb:b8:e9:
e0:9d:17:35:63:75:b4:7a:d8:5c:75:e3:79:bb:c2:c7:a1:da:
b2:06:d8:92:49:44:ab:14:8d:1b:03:30:6b:48:5b:b8:e7:6d:
04:33:c6:50:3b:54:20:24:b2:69:6f:63:7e:44:64:f6:c1:c0:
8f:69:ac:cd:26:c5:bf:9b:42:56:c5:bb:13:2f:32:cd:5d:48:
e0:32:3d:6f:41:a5:09:c0:a9:19:45:5d:54:6c:c4:12:11:15:
ac:c0:6b:b4:53:d9:7b:84:e5:f3:bf:c8:4d:f1:91:0f:7a:1c:
6f:63:60:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:56:57 2026 by rpki-client