Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/1-REYCxfHPdAVD7tNS5ps5sxn9Fo.roa
File: 1-REYCxfHPdAVD7tNS5ps5sxn9Fo.roa (raw, json)
Hash identifier: kldVBPNFiYtgeus8NuesmoUqa0jcFirszlkfKnDmJ4U=
Subject key identifier: F9:11:18:0B:17:C7:3D:D0:15:0F:BB:4D:4B:9A:6C:E6:CC:67:F4:5A
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 01A042008EE2B60381DA45B0E37314F78145
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/1-REYCxfHPdAVD7tNS5ps5sxn9Fo.roa
Signing time: Thu 27 Aug 2026 06:55:27 +0000
ROA not before: Thu 27 Aug 2026 06:55:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 91.193.252.0/24 maxlen: 24
141.105.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 00:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:00:8e:e2:b6:03:81:da:45:b0:e3:73:14:f7:81:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Aug 27 06:55:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f911180b17c73dd0150fbb4d4b9a6ce6cc67f45a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d0:4d:a0:4e:60:01:c3:a3:f0:36:fa:2e:90:
ae:3a:02:df:b3:43:6e:16:42:30:6b:45:8d:f4:8e:
7d:c6:83:45:7f:b7:91:8b:90:b1:20:44:f0:25:84:
1c:75:bc:16:29:f0:5a:1d:3d:79:cb:39:32:73:23:
69:56:d8:e6:e7:f6:09:c2:ff:6a:77:19:c7:3d:43:
0e:34:b8:8e:ec:56:55:55:d3:0a:8c:64:30:d4:9f:
dd:57:c1:03:e2:8c:a7:3f:61:0f:6b:d9:50:fb:a0:
5f:82:17:1b:e5:3b:52:22:95:4f:ec:90:02:48:c8:
19:b7:4c:d1:76:1a:03:68:6a:e0:45:21:bd:c5:13:
99:a0:6c:87:aa:48:22:23:b6:a4:7f:bf:81:19:53:
f5:d6:4c:bb:2d:75:2f:3d:6c:4b:e3:63:f2:eb:28:
72:b7:6c:8e:95:20:39:9c:f9:3c:85:ed:cb:bb:c5:
88:4b:5a:0b:5b:f0:d7:e1:5b:a9:09:40:4c:cb:a3:
03:ba:05:65:d9:d3:85:7e:b2:1c:a1:39:3c:f1:ab:
f1:c0:f4:0b:aa:9b:26:b1:d8:2d:3b:50:6c:75:c0:
84:97:43:02:96:bb:d4:d7:e7:1f:9b:d0:8e:41:3f:
ac:ed:c2:74:c4:29:9c:d1:ff:30:cb:90:d6:21:07:
49:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:11:18:0B:17:C7:3D:D0:15:0F:BB:4D:4B:9A:6C:E6:CC:67:F4:5A
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/1-REYCxfHPdAVD7tNS5ps5sxn9Fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.252.0/24
141.105.141.0/24
Signature Algorithm: sha256WithRSAEncryption
89:36:16:8d:2d:88:08:35:fa:c4:2b:17:cd:1a:a0:17:55:36:
d3:44:fd:f8:2e:89:25:67:0b:d3:67:ef:83:cc:f6:a5:3b:0d:
cf:fc:15:49:4c:74:de:f3:54:3f:2a:41:dd:87:1d:17:7e:e2:
a7:e3:07:7e:86:a3:83:05:e5:2c:de:af:bb:51:bb:fe:4f:02:
e2:59:13:e0:08:93:23:eb:2d:bf:85:7e:41:92:04:5a:6a:0a:
51:86:4c:25:c4:40:14:fd:63:26:91:a0:a1:2e:1e:ab:c4:67:
52:82:b9:7b:ca:8c:30:92:41:e9:65:cf:b7:d5:66:11:e5:c2:
85:9d:dc:33:9e:a7:f5:61:8e:a2:89:f3:e2:5d:a9:88:61:b6:
0a:e4:08:b9:c7:79:9d:00:84:84:d2:cd:a7:b6:3f:43:9a:4c:
43:4b:66:f8:0b:b0:38:98:72:36:ed:7e:22:27:9d:f8:b2:c8:
09:a3:26:11:b1:34:ae:e0:b4:de:da:35:05:db:b9:c5:66:4e:
49:ba:f8:62:09:01:f4:bf:77:bb:49:45:4d:e6:0d:22:4a:cb:
97:f8:4d:97:39:00:42:b4:63:a5:bd:e2:a1:68:8b:0e:bb:bd:
f7:0e:58:4d:60:3b:6a:db:02:5c:c3:58:b5:18:75:00:a0:9d:
49:5e:8e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:21:59 2026 by rpki-client