Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/bYRPNTCOMEmRi6pRGIqF833I-9g.roa
File: bYRPNTCOMEmRi6pRGIqF833I-9g.roa (raw, json)
Hash identifier: 9Srf/yc4WPXYXqjKVX7LPywlcq8OAZ7JMmRdXXnb2oc=
Subject key identifier: 6D:84:4F:35:30:8E:30:49:91:8B:AA:51:18:8A:85:F3:7D:C8:FB:D8
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 019F604B1ECE2394820068915A1E260B85BC
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/bYRPNTCOMEmRi6pRGIqF833I-9g.roa
Signing time: Tue 14 Jul 2026 11:02:43 +0000
ROA not before: Tue 14 Jul 2026 11:02:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200590
IP address blocks: 91.237.164.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:4b:1e:ce:23:94:82:00:68:91:5a:1e:26:0b:85:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Jul 14 11:02:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d844f35308e3049918baa51188a85f37dc8fbd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f2:e8:49:2a:98:13:ce:97:6e:f4:96:0c:53:
78:a8:45:b6:7f:c4:7e:a6:68:43:ee:80:bd:be:e7:
31:36:a0:aa:91:6f:e2:08:ef:98:c9:4c:35:1f:dc:
89:51:5f:72:f9:9b:1a:2c:d2:cf:5c:fd:87:d8:11:
19:85:2e:a3:a0:5a:e8:3e:7a:0a:5c:f3:0d:b0:24:
58:4b:f1:14:0f:54:4f:7e:4d:4b:ee:f9:03:35:08:
7a:89:7c:eb:63:0d:74:4b:bb:37:08:a0:54:6c:26:
27:0e:e0:a3:e7:3f:3a:38:88:a5:27:fc:0c:6c:31:
46:b6:48:15:08:4e:63:30:81:60:84:94:82:ff:ac:
23:2e:16:72:8a:71:6b:1d:22:59:71:ec:94:16:8c:
1a:e2:b5:76:6e:11:41:3f:55:07:46:d4:b0:68:e9:
68:d4:52:66:14:e7:5b:31:59:6b:ab:41:c3:37:52:
6e:7f:1b:00:3e:f7:54:8a:7d:55:dd:f8:d2:fc:db:
80:c1:79:90:10:ba:81:8e:87:92:5a:28:b2:8b:55:
05:a2:b2:ee:6b:43:11:26:9d:56:2b:09:c2:16:74:
c7:5a:d7:02:1e:16:ee:db:f7:af:6b:a2:ac:fc:71:
80:d7:aa:ef:6a:d3:c0:da:3c:03:5f:9b:eb:e7:76:
74:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:84:4F:35:30:8E:30:49:91:8B:AA:51:18:8A:85:F3:7D:C8:FB:D8
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/bYRPNTCOMEmRi6pRGIqF833I-9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.164.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:32:de:20:23:6a:3e:22:5f:09:7b:4e:a6:b2:52:18:60:b3:
06:d4:22:39:88:bb:2f:c1:a7:48:78:2b:6c:ec:f9:26:16:0d:
05:ab:31:72:c1:91:66:9f:87:d8:94:66:0c:fb:49:86:ba:5f:
68:d4:d0:63:44:3b:01:4b:0f:93:16:d0:64:8a:94:e2:1f:e2:
3c:d7:53:ef:4a:09:33:3a:40:57:4e:11:35:73:db:dc:48:ba:
af:f4:aa:fc:ad:b1:bd:a7:7f:d5:3c:0f:96:8c:d2:fc:2b:94:
8c:29:7c:f9:fa:60:17:8f:0e:4d:17:2e:98:2f:86:55:64:cc:
f9:d0:08:e1:4e:32:f3:8d:ff:02:26:d7:df:ab:4f:0c:ab:db:
7d:b7:d5:50:ab:0b:ae:db:96:6a:e7:41:40:8f:9f:a3:72:4c:
f5:32:db:e7:34:83:6a:3a:48:73:ed:99:a1:1e:62:fa:88:47:
01:2e:59:cb:dc:ef:54:ce:bc:f0:3d:9b:6a:a8:c8:3b:c5:63:
43:38:02:18:8f:64:4e:0b:0a:f5:7a:38:73:26:2a:01:28:e3:
b3:d4:9f:4c:30:6a:6c:84:22:df:37:32:c2:e2:41:2b:82:81:
9a:b9:28:51:b1:40:61:dc:ab:15:6f:1a:2d:8a:41:97:d6:07:
a7:72:f1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:26:38 2026 by rpki-client