Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/4yUmkXi2Yhwvo2XgV9gEu1kcXZA.roa
File: 4yUmkXi2Yhwvo2XgV9gEu1kcXZA.roa (raw, json)
Hash identifier: y8EJOpURiRvKAWQQcGwqnsV/KAbgKgITw/SY7eJQV4Q=
Subject key identifier: E3:25:26:91:78:B6:62:1C:2F:A3:65:E0:57:D8:04:BB:59:1C:5D:90
Certificate issuer: /CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c
Certificate serial: 01A0ECB98C5A26FF4C97BE54CE63E7D276C4
Authority key identifier: 36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/4yUmkXi2Yhwvo2XgV9gEu1kcXZA.roa
Signing time: Tue 29 Sep 2026 10:32:58 +0000
ROA not before: Tue 29 Sep 2026 10:32:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213683
IP address blocks: 91.239.6.0/24 maxlen: 24
91.239.7.0/24 maxlen: 24
157.173.39.0/24 maxlen: 24
203.12.28.0/24 maxlen: 24
203.30.219.0/24 maxlen: 24
2001:67c:fd0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:b9:8c:5a:26:ff:4c:97:be:54:ce:63:e7:d2:76:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c
Validity
Not Before: Sep 29 10:32:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e325269178b6621c2fa365e057d804bb591c5d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:72:c5:ba:82:ed:94:07:62:c6:7f:18:23:2a:
43:68:e3:61:e2:14:54:bd:60:46:e9:72:78:67:13:
4c:66:c7:68:ff:d3:67:c4:21:42:eb:3f:1a:6a:d1:
69:4c:2f:17:eb:f0:79:7c:ef:2c:ba:5e:55:62:0c:
80:3a:7d:98:77:83:75:01:35:66:70:c3:4c:6a:2c:
05:c1:0a:1a:e9:30:8a:27:fb:41:75:e0:bb:b5:6f:
8c:68:c0:29:01:36:64:a6:04:cf:ce:03:ec:5f:f5:
65:66:0f:23:87:28:8b:c0:9e:23:28:ef:64:47:9a:
75:07:f8:86:4d:20:db:e9:61:2a:fd:f1:f2:75:36:
b9:dc:d0:01:4d:68:2b:40:fe:0f:82:e5:eb:b6:a8:
b6:94:ad:b7:c7:50:61:7a:36:5f:b4:c4:99:f0:25:
fd:e4:43:bb:d0:07:dc:df:81:8e:2f:8b:30:f3:b3:
bb:3a:b4:30:ab:87:0a:ec:b9:98:95:0c:14:3c:4b:
5f:63:ee:a4:94:9f:7c:2e:09:0c:5a:30:63:dc:40:
92:9a:ee:53:b8:a1:91:51:9a:e3:c4:f4:ad:bc:87:
29:4e:d5:7f:a1:f4:59:0c:61:62:bd:e3:f3:5e:0e:
64:71:ae:c6:51:e3:cb:7c:94:1c:b2:64:4c:df:4f:
87:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:25:26:91:78:B6:62:1C:2F:A3:65:E0:57:D8:04:BB:59:1C:5D:90
X509v3 Authority Key Identifier:
keyid:36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/4yUmkXi2Yhwvo2XgV9gEu1kcXZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.6.0/23
157.173.39.0/24
203.12.28.0/24
203.30.219.0/24
IPv6:
2001:67c:fd0::/48
Signature Algorithm: sha256WithRSAEncryption
56:2a:c2:f0:e7:ab:11:01:be:c0:0e:52:a8:7f:8d:a6:9f:39:
22:d7:c7:1f:67:02:fa:18:ff:e8:63:87:2b:ca:f7:8e:e1:0f:
62:e5:4f:0a:ac:6d:76:42:2f:c5:06:58:cb:aa:4b:72:fb:4e:
6c:54:62:6c:c1:a9:c6:43:9c:5a:23:8f:11:83:c8:6a:83:7b:
99:ed:ae:c1:66:0f:30:6b:b1:47:74:a2:bd:4d:cf:f9:de:3e:
60:0a:00:0c:76:25:e5:3a:0c:9f:9d:d2:e5:42:33:e3:7d:0c:
eb:fb:ec:91:18:f3:39:f0:4c:37:5e:0c:0f:12:c3:a1:da:66:
f0:cf:e5:2e:22:63:90:23:f4:4d:1e:7b:5b:39:c5:f6:5a:cd:
fa:be:ae:e8:dc:f8:e1:00:69:e3:2d:84:93:47:0c:98:09:80:
af:07:d8:86:e7:5b:47:6c:b2:06:ee:2e:f5:c4:3f:55:88:94:
65:fc:ed:de:0b:69:90:fc:23:39:a1:c6:91:fa:81:5d:62:e4:
f1:14:1c:fd:2d:67:89:6e:d2:73:bc:bd:e5:c7:e2:4c:32:ad:
81:84:3d:fd:3a:5d:a3:74:96:54:9b:40:2c:75:f1:bf:0e:c9:
d0:a6:b1:49:d1:ad:01:11:7a:b7:b5:32:5d:b8:8d:ea:4a:d6:
ea:ec:66:b4
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAaDsuYxaJv9Ml75UzmPn0nbEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2M2NiNWM2YTA1Y2RkNDgxZjMwNGMwY2Q5NWU4NmQ3MjJk
OTZkM2MwHhcNMjYwOTI5MTAzMjU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzI1MjY5MTc4YjY2MjFjMmZhMzY1ZTA1N2Q4MDRiYjU5MWM1ZDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XLFuoLtlAdixn8YIypDaONh4hRU
vWBG6XJ4ZxNMZsdo/9NnxCFC6z8aatFpTC8X6/B5fO8sul5VYgyAOn2Yd4N1ATVm
cMNMaiwFwQoa6TCKJ/tBdeC7tW+MaMApATZkpgTPzgPsX/VlZg8jhyiLwJ4jKO9k
R5p1B/iGTSDb6WEq/fHydTa53NABTWgrQP4PguXrtqi2lK23x1BhejZftMSZ8CX9
5EO70Afc34GOL4sw87O7OrQwq4cK7LmYlQwUPEtfY+6klJ98LgkMWjBj3ECSmu5T
uKGRUZrjxPStvIcpTtV/ofRZDGFivePzXg5kca7GUePLfJQcsmRM30+H1QIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFOMlJpF4tmIcL6Nl4FfYBLtZHF2QMB8GA1UdIwQY
MBaAFDY8tcagXN1IHzBMDNlehtci2W08MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmp5MXhxQmMzVWdmTUV3TTJWNkcxeUxaYlR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8wMjA2ZmYtN2U4Ny00NGE2LTlhNTYt
YmEzYzY0ZTE0YTFkLzEvNHlVbWtYaTJZaHd2bzJYZ1Y5Z0V1MWtjWFpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8wMjA2ZmYtN2U4Ny00NGE2LTlhNTYtYmEzYzY0ZTE0YTFk
LzEvTmp5MXhxQmMzVWdmTUV3TTJWNkcxeUxaYlR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQBW+8GAwQA
na0nAwQAywwcAwQAyx7bMA8EAgACMAkDBwAgAQZ8D9AwDQYJKoZIhvcNAQELBQAD
ggEBAFYqwvDnqxEBvsAOUqh/jaafOSLXxx9nAvoY/+hjhyvK947hD2LlTwqsbXZC
L8UGWMuqS3L7TmxUYmzBqcZDnFojjxGDyGqDe5ntrsFmDzBrsUd0or1Nz/nePmAK
AAx2JeU6DJ+d0uVCM+N9DOv77JEY8znwTDdeDA8Sw6HaZvDP5S4iY5Aj9E0ee1s5
xfZazfq+rujc+OEAaeMthJNHDJgJgK8H2IbnW0dssgbuLvXEP1WIlGX87d4LaZD8
IzmhxpH6gV1i5PEUHP0tZ4lu0nO8veXH4kwyrYGEPf06XaN0llSbQCx18b8OydCm
sUnRrQERere1Ml24jepK1ursZrQ=
-----END CERTIFICATE-----
Generated at Sat Oct 3 20:09:54 2026 by rpki-client