Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/tWGRv_hyhjidgeuLulUyTvlUkno.roa
File: tWGRv_hyhjidgeuLulUyTvlUkno.roa (raw, json)
Hash identifier: NcCoTVI9n6Tvs7iCSV8u+GLSUpE0fTg++nuaEsIMvIs=
Subject key identifier: B5:61:91:BF:F8:72:86:38:9D:81:EB:8B:BA:55:32:4E:F9:54:92:7A
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 01A13E8756B8A208079F4AF9C69203696985
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/tWGRv_hyhjidgeuLulUyTvlUkno.roa
Signing time: Thu 15 Oct 2026 07:46:59 +0000
ROA not before: Thu 15 Oct 2026 07:46:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 18978
IP address blocks: 91.102.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:87:56:b8:a2:08:07:9f:4a:f9:c6:92:03:69:69:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Oct 15 07:46:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b56191bff87286389d81eb8bba55324ef954927a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1f:70:c3:79:04:03:1d:c0:d9:c7:1e:42:85:
69:f2:1f:14:e9:fe:7d:25:bb:bb:7d:97:84:a2:34:
94:30:75:40:11:cc:35:ab:30:9a:8f:26:38:b3:68:
11:4f:e5:0a:b5:10:a3:70:da:25:5d:e3:c0:f8:e2:
7f:f8:2c:e2:70:21:4c:2d:f1:9f:54:e3:d7:7c:4e:
79:dc:0f:46:c4:b2:12:5e:75:81:00:9e:9f:a0:71:
3d:63:53:a7:1a:14:80:a7:e4:51:68:33:e6:1a:26:
ec:e5:85:52:58:bf:7a:cc:c5:bb:5a:7e:34:3e:5e:
fd:5c:8c:c3:e8:08:b1:1d:03:2d:ce:50:67:02:e8:
1a:9b:49:10:cd:cf:ad:97:06:62:e3:72:c6:8e:27:
6c:f6:45:3c:fc:66:1f:22:a5:8f:43:f7:fd:d6:20:
79:be:7a:5d:07:ef:e0:68:7c:0f:b1:21:5e:4f:38:
6d:d7:70:07:1f:01:45:f3:19:65:3a:ef:e1:9d:52:
7d:68:17:60:6a:fd:6c:5d:cd:19:31:09:d7:7b:12:
4b:1f:b3:e3:a5:06:0e:fb:cd:c5:18:9f:03:c7:71:
62:c4:96:78:f1:ac:36:77:b4:19:82:70:dc:a7:82:
c1:36:06:6e:26:6c:7b:48:78:65:6d:74:60:2a:cf:
a0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:61:91:BF:F8:72:86:38:9D:81:EB:8B:BA:55:32:4E:F9:54:92:7A
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/tWGRv_hyhjidgeuLulUyTvlUkno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.166.0/24
Signature Algorithm: sha256WithRSAEncryption
28:a0:92:5a:c1:3d:cf:b1:82:34:1d:87:16:ee:fc:72:e5:fa:
50:93:5c:a6:50:c7:20:5a:df:25:4e:15:ea:12:a6:86:2b:05:
ed:b9:e7:b6:16:6e:49:c2:f8:fc:55:35:c4:44:e9:81:e4:b9:
87:1b:33:59:25:e0:ab:b7:01:75:90:51:6b:32:9a:25:5b:af:
74:bc:94:64:b9:73:62:d5:7c:c5:98:e1:d6:23:56:04:7f:e8:
fc:4e:c2:3c:a0:32:70:b6:cb:bc:7d:e6:a7:e7:83:73:d3:24:
d2:fa:47:fd:e8:2b:f8:52:2f:61:16:12:ee:8b:f8:de:fc:7d:
2a:fa:63:6a:c8:05:a2:04:93:e3:24:7a:90:3f:a5:a9:98:b6:
36:fc:f3:b5:94:74:00:3f:3d:a5:03:1c:af:f9:4f:68:45:42:
f4:68:86:88:b2:85:3f:5c:b2:74:a7:b3:54:7b:f8:66:27:66:
5b:72:ad:49:12:ca:e0:44:e2:f7:7e:5e:e0:1a:8c:1c:38:1e:
19:b4:20:2c:0a:cb:c9:af:a9:b6:4b:d0:02:20:cd:9a:3f:e2:
fc:97:00:bc:68:d3:c3:81:73:49:22:bc:1a:8c:31:53:67:29:
83:6f:b1:55:56:79:64:2a:49:b7:35:81:7d:01:1f:dd:4c:b6:
c5:4a:ba:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 22:52:23 2026 by rpki-client