Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/vY_Y2rXzdf11VrMeTl5FVuF7Wcg.roa
File: vY_Y2rXzdf11VrMeTl5FVuF7Wcg.roa (raw, json)
Hash identifier: K8iieu6LpRNKFrHbCk+qEiKWtP8c1OcOi1kq2jJqsAI=
Subject key identifier: BD:8F:D8:DA:B5:F3:75:FD:75:56:B3:1E:4E:5E:45:56:E1:7B:59:C8
Certificate issuer: /CN=64f873adb6a1f3e81b3343c74998947526c43dcf
Certificate serial: 019CE1BC77A0A8D39BCDE918270E6E10A5ED
Authority key identifier: 64:F8:73:AD:B6:A1:F3:E8:1B:33:43:C7:49:98:94:75:26:C4:3D:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/vY_Y2rXzdf11VrMeTl5FVuF7Wcg.roa
Signing time: Thu 12 Mar 2026 11:09:10 +0000
ROA not before: Thu 12 Mar 2026 11:09:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209564
IP address blocks: 91.198.224.0/24 maxlen: 24
194.37.255.0/24 maxlen: 24
194.145.224.0/24 maxlen: 24
195.190.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 20:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:bc:77:a0:a8:d3:9b:cd:e9:18:27:0e:6e:10:a5:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64f873adb6a1f3e81b3343c74998947526c43dcf
Validity
Not Before: Mar 12 11:09:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd8fd8dab5f375fd7556b31e4e5e4556e17b59c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:eb:0a:cb:fe:5f:81:71:a5:c4:5a:bf:ce:37:
f0:b0:fd:c3:a9:56:8b:e3:34:d1:82:29:e3:74:b2:
25:8d:7b:d8:a2:3c:d9:c3:dd:7a:32:f1:d9:a5:a7:
d9:f8:97:7a:1c:8c:17:87:f8:aa:14:62:66:e4:0e:
fa:36:1f:0c:b5:48:ec:c8:43:a5:53:ac:ed:98:66:
48:fb:32:27:25:2f:50:58:f8:42:77:33:8f:20:4b:
ef:cf:67:43:d5:bc:1c:b2:8c:ed:a6:aa:b6:2b:a2:
4f:25:6e:be:e1:29:42:19:2d:b7:8f:c4:69:05:98:
66:8c:85:a8:38:4e:0e:35:54:f4:d5:b5:2f:da:e2:
0f:23:68:a1:1a:40:72:b2:4f:39:7f:df:33:ec:85:
3b:85:f3:dc:95:37:9d:b4:f3:64:38:b6:21:13:03:
c6:56:2b:b5:d5:36:00:7c:51:d4:99:a5:96:a1:e2:
a8:15:1e:be:8f:86:46:e0:47:06:07:ec:81:07:af:
24:f6:8e:4d:41:72:2d:69:7c:9d:e7:c9:0a:61:3a:
95:2a:a8:af:1e:29:69:62:51:70:40:ae:1e:7d:93:
85:0e:df:77:9a:a3:3b:93:1b:5e:45:10:9f:48:0e:
69:e1:d8:69:67:8d:a7:df:91:19:ab:03:93:a1:f5:
d5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8F:D8:DA:B5:F3:75:FD:75:56:B3:1E:4E:5E:45:56:E1:7B:59:C8
X509v3 Authority Key Identifier:
keyid:64:F8:73:AD:B6:A1:F3:E8:1B:33:43:C7:49:98:94:75:26:C4:3D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/vY_Y2rXzdf11VrMeTl5FVuF7Wcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.224.0/24
194.37.255.0/24
194.145.224.0/24
195.190.135.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:d2:dc:06:9a:ae:5d:d3:16:38:81:62:f9:c2:8c:95:24:0b:
59:87:c8:c2:68:a1:b8:4c:7c:e2:99:ed:a3:ee:45:c9:e9:2a:
14:5a:78:cf:5c:56:8e:fb:37:82:e1:00:46:5c:59:57:76:1b:
ec:8d:8d:3a:8d:80:9a:75:43:d2:b9:4a:43:2b:8a:a4:d6:86:
d3:27:48:9f:5c:0a:d9:b4:77:29:ac:1a:ff:9c:96:53:0c:22:
f4:46:48:ef:0d:28:2d:4f:25:06:30:80:b5:02:6a:dd:0e:b8:
dc:0f:15:73:00:98:6e:d8:2d:da:50:29:e8:b5:30:82:43:a9:
5c:98:05:bb:17:6f:00:1e:20:eb:30:cc:f3:7b:dd:0d:34:0a:
ec:0b:55:0f:1a:64:58:41:1b:20:80:4a:a6:a0:ce:ec:b5:e5:
4c:f8:57:20:11:11:01:3e:1d:7b:ea:29:03:d4:04:9a:81:aa:
bd:c1:99:1a:ce:1d:03:94:e6:ad:fd:8c:fe:5b:4b:98:31:33:
7d:63:3e:12:23:d9:38:f9:a2:8a:0d:ca:79:ad:88:c7:ce:35:
7a:bf:cc:4c:31:b5:63:d5:77:e5:8f:14:c2:f7:a2:af:ab:da:
f1:6f:db:b9:c7:05:9c:24:b5:23:2d:0f:16:1a:b6:94:72:36:
c9:20:c1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:46:18 2026 by rpki-client