Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/9YTD0v4Pt02y4exV-MpBb-Wfh1k.roa
File: 9YTD0v4Pt02y4exV-MpBb-Wfh1k.roa (raw, json)
Hash identifier: YbLvfyBoLoqzM19hDuxZK6dYyx9mo5iP+7ERQ+VwX54=
Subject key identifier: F5:84:C3:D2:FE:0F:B7:4D:B2:E1:EC:55:F8:CA:41:6F:E5:9F:87:59
Certificate issuer: /CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Certificate serial: 01A0FBBA12B70F6452ADC62DB44F4EF352DD
Authority key identifier: 44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/9YTD0v4Pt02y4exV-MpBb-Wfh1k.roa
Signing time: Fri 02 Oct 2026 08:27:50 +0000
ROA not before: Fri 02 Oct 2026 08:27:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44788
IP address blocks: 91.199.242.0/24 maxlen: 24
91.212.98.0/24 maxlen: 24
178.250.0.0/21 maxlen: 24
185.235.84.0/24 maxlen: 24
185.235.85.0/24 maxlen: 24
185.235.86.0/24 maxlen: 24
185.235.87.0/24 maxlen: 24
2a02:2638::/32 maxlen: 48
2a02:2638::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 20:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fb:ba:12:b7:0f:64:52:ad:c6:2d:b4:4f:4e:f3:52:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Validity
Not Before: Oct 2 08:27:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f584c3d2fe0fb74db2e1ec55f8ca416fe59f8759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0b:a4:73:17:1e:43:aa:a9:c8:42:97:84:52:
0a:a0:37:2f:c2:3d:e8:05:0f:69:af:08:29:ff:dd:
44:2a:11:b4:bc:c0:a1:ee:43:44:6d:5f:6a:af:95:
c3:68:44:7a:d7:2f:8b:ba:c5:dd:90:b1:da:bd:a3:
c5:95:91:1d:9b:07:bd:14:95:19:b6:1c:86:80:b7:
ba:f1:a6:9c:5a:62:47:31:ac:b8:d7:b6:53:c7:3b:
03:64:fb:9f:dd:b5:ac:bf:9b:ba:3f:85:45:47:af:
3d:aa:05:35:2a:94:ef:d2:41:fd:33:5b:d9:9e:33:
13:a4:1e:09:c4:e3:7a:df:95:0b:bd:fd:60:25:f3:
00:43:09:ef:37:37:40:fe:ca:ec:81:b8:19:67:88:
b5:38:37:51:7e:0b:be:b3:f6:f1:e1:54:f2:80:68:
58:2a:81:e7:c4:d5:25:ff:08:60:46:e3:b5:d4:0a:
43:97:14:f5:1e:96:50:46:de:5a:8c:94:3a:97:77:
95:da:76:2d:f5:ad:e1:82:88:6a:fe:19:b3:ad:cc:
b1:4d:ce:fb:4c:88:a1:bb:d2:56:99:3f:d8:cf:a6:
08:d5:05:61:e1:63:4f:7d:08:ac:29:25:8d:9e:49:
2b:57:6f:53:0d:03:c7:b7:f1:89:42:2d:97:37:d2:
33:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:84:C3:D2:FE:0F:B7:4D:B2:E1:EC:55:F8:CA:41:6F:E5:9F:87:59
X509v3 Authority Key Identifier:
keyid:44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/9YTD0v4Pt02y4exV-MpBb-Wfh1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.242.0/24
91.212.98.0/24
178.250.0.0/21
185.235.84.0/22
IPv6:
2a02:2638::/32
Signature Algorithm: sha256WithRSAEncryption
17:49:54:56:df:83:7a:97:d6:eb:c1:fc:94:31:e0:d0:68:cf:
71:45:ce:5c:db:ac:64:72:f5:86:27:bf:93:46:6d:fb:3e:10:
a4:bc:06:5a:f6:25:cc:b6:16:9d:c5:cb:1f:df:93:b7:68:59:
87:14:c0:54:18:bd:9a:0e:3e:48:73:51:14:74:67:b2:37:54:
a3:3b:f3:a4:c9:e6:fd:a8:b7:8b:91:39:38:ff:77:4f:67:f3:
3c:0d:21:0f:86:68:42:67:d5:40:da:62:09:dc:ba:cb:5f:61:
32:65:57:2d:1c:3a:94:af:27:f8:18:a0:30:f5:6b:6f:b1:db:
69:69:cb:44:12:84:88:24:59:51:09:4f:50:0b:17:7d:6b:1e:
14:79:fd:06:ac:00:ce:19:69:9a:26:48:c8:68:4a:f7:98:8a:
4f:4c:12:28:37:bd:bc:47:7f:cd:2f:69:c8:42:20:24:4b:9b:
03:1c:29:23:fd:51:a6:5c:52:d1:d1:10:e0:ed:39:d7:64:7f:
72:36:9d:d7:67:71:7c:f9:21:25:38:3c:ba:b8:ea:eb:d7:ee:
46:73:50:e0:08:41:63:27:05:7c:8e:fc:42:42:a0:5a:fe:5f:
8b:1e:4f:26:42:ac:a7:c0:71:8d:ef:90:92:a7:47:10:ea:33:
29:f9:22:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:12:43 2026 by rpki-client