Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Y743Ff_5Y203grtfUY6U2EsJ5k0.roa
File: Y743Ff_5Y203grtfUY6U2EsJ5k0.roa (raw, json)
Hash identifier: Doh7Q1IHy6968rUMrUmWGN+zQVN1+yBH3AxrMDeSH+Y=
Subject key identifier: 63:BE:37:15:FF:F9:63:6D:37:82:BB:5F:51:8E:94:D8:4B:09:E6:4D
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019EB06BC0C8C03D82264E46215C9F62DE8E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Y743Ff_5Y203grtfUY6U2EsJ5k0.roa
Signing time: Wed 10 Jun 2026 07:25:12 +0000
ROA not before: Wed 10 Jun 2026 07:25:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215068
IP address blocks: 91.132.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b0:6b:c0:c8:c0:3d:82:26:4e:46:21:5c:9f:62:de:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 10 07:25:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63be3715fff9636d3782bb5f518e94d84b09e64d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:83:a7:3c:11:6e:81:b8:0c:85:6b:ea:05:7c:
fa:63:ed:bf:9f:dd:48:90:b0:b5:59:cd:ca:8a:5e:
2f:50:46:75:ba:a1:9d:06:9f:47:ef:09:db:4b:4a:
64:25:49:60:26:77:7d:89:1d:c9:db:7a:50:48:70:
10:5b:e8:4d:5d:af:8d:9e:4e:a2:0c:b8:53:c4:05:
09:2f:44:85:28:3b:50:d3:94:11:85:26:12:a2:c1:
69:28:29:5c:a3:dc:e2:9c:d4:11:94:c1:3e:33:4a:
02:57:7f:e5:0e:11:7a:17:e5:08:c6:1b:a6:95:bb:
45:fe:6e:3f:4b:2b:b5:76:9d:ea:45:13:a1:89:fd:
9b:c0:24:61:a1:77:7a:3b:69:93:69:2f:23:4d:f4:
44:d5:f9:f6:3c:1d:75:ec:15:4a:72:95:c5:42:42:
65:7d:d5:7b:f2:50:d3:93:7b:49:e7:4a:45:ad:64:
80:d5:d1:42:d7:56:7c:4e:f0:fe:36:74:9d:83:7a:
c9:f4:e1:9d:ff:dc:ab:91:81:b6:de:0d:ba:70:58:
08:26:31:68:38:a9:3c:9e:cf:d5:f2:99:e9:91:01:
ff:fd:b6:54:eb:0e:cc:f7:78:71:ea:a9:81:3f:86:
e0:c6:f4:3d:6d:34:1f:73:ec:9a:13:f9:96:47:80:
23:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BE:37:15:FF:F9:63:6D:37:82:BB:5F:51:8E:94:D8:4B:09:E6:4D
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Y743Ff_5Y203grtfUY6U2EsJ5k0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.51.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:e3:df:1e:f8:46:9a:17:aa:4b:b5:78:38:7a:33:90:83:ae:
dd:e2:31:c8:70:e2:38:74:f1:fc:6f:2b:ea:9d:7c:bd:2c:1e:
9b:dd:0e:97:9c:75:43:ec:24:64:36:c3:01:10:3c:4a:5e:05:
07:fd:fb:63:ee:61:41:c6:e2:02:d8:4d:bb:58:27:f1:e0:56:
24:e5:b0:64:4f:04:14:5a:31:e5:f1:7d:3d:b1:15:77:e7:6c:
10:b6:f0:03:6d:d5:01:0b:b1:7e:f6:89:e2:ee:c1:b6:16:40:
5d:1b:66:38:b2:a0:32:54:0d:18:c8:a5:cf:9e:3b:3f:ea:5a:
fe:f6:95:35:47:18:1d:8d:c3:39:ce:c9:da:9e:a9:1d:d6:83:
54:ba:69:b8:22:19:c1:c4:6c:cb:f5:5a:c1:19:d2:46:00:66:
5c:d5:06:78:3b:21:94:e7:59:12:61:fb:4a:00:a6:0c:15:ca:
4c:90:cb:d7:6a:ba:d9:c9:4f:2d:7c:54:e4:87:eb:6a:22:0c:
9f:4e:73:2e:99:35:16:45:93:b9:1c:be:9b:f7:e0:7d:b9:c1:
db:79:89:83:41:7c:a6:ac:16:c7:ea:f9:3c:00:ec:d5:8a:45:
c0:dc:de:c1:48:85:93:71:41:49:50:6a:eb:78:2f:fa:01:76:
2e:bd:b6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 16:26:01 2026 by rpki-client