Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/P-ygUlow62dRgj3KwI1qyzkMeOA.roa
File: P-ygUlow62dRgj3KwI1qyzkMeOA.roa (raw, json)
Hash identifier: O8MOfZwhLY2ZIpxWmwXD5U4weem+XHHwGlte/rosmFs=
Subject key identifier: 3F:EC:A0:52:5A:30:EB:67:51:82:3D:CA:C0:8D:6A:CB:39:0C:78:E0
Certificate issuer: /CN=186b8e24fc2fe078ece377b640785a872577d74f
Certificate serial: 019F2368C4F8E5BE53ED299768A5DAC11D4A
Authority key identifier: 18:6B:8E:24:FC:2F:E0:78:EC:E3:77:B6:40:78:5A:87:25:77:D7:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GGuOJPwv4Hjs43e2QHhahyV3108.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/P-ygUlow62dRgj3KwI1qyzkMeOA.roa
Signing time: Thu 02 Jul 2026 15:18:16 +0000
ROA not before: Thu 02 Jul 2026 15:18:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43638
IP address blocks: 91.197.152.0/22 maxlen: 22
91.197.152.0/23 maxlen: 23
91.197.154.0/23 maxlen: 23
141.138.160.0/21 maxlen: 21
141.138.160.0/22 maxlen: 22
141.138.164.0/22 maxlen: 22
2a01:9380::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/GGuOJPwv4Hjs43e2QHhahyV3108.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/GGuOJPwv4Hjs43e2QHhahyV3108.mft
rsync://rpki.ripe.net/repository/DEFAULT/GGuOJPwv4Hjs43e2QHhahyV3108.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c4:f8:e5:be:53:ed:29:97:68:a5:da:c1:1d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=186b8e24fc2fe078ece377b640785a872577d74f
Validity
Not Before: Jul 2 15:18:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3feca0525a30eb6751823dcac08d6acb390c78e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:21:1d:34:54:6f:1f:c6:3e:d8:7e:17:39:5e:
ab:bb:bd:bd:43:d0:76:df:ed:4c:81:40:4e:bd:10:
01:ee:32:16:93:ec:c8:02:b9:dc:8a:b0:a8:a7:fc:
f6:7c:f0:9b:47:30:c5:63:25:f7:46:9d:3c:f6:6f:
d0:8e:4e:e9:e2:62:2f:50:57:8a:59:47:7a:74:61:
fd:65:c0:1e:a1:ea:33:10:31:f9:61:3c:b1:69:66:
2a:9c:3c:e1:f5:85:3f:65:a5:db:61:d9:5c:0d:a2:
48:73:b2:90:00:b5:9e:2a:6e:30:3e:e6:1f:74:11:
77:1c:b0:ad:3d:06:c7:71:2b:f3:b8:ce:8f:ce:8a:
d5:1f:27:88:3b:ab:84:7e:1d:f5:df:f5:e6:8f:70:
3e:75:8a:79:80:c8:c7:ab:4d:f2:e7:06:d9:c6:7d:
97:07:a4:17:9d:d3:b4:d8:05:ef:53:ce:9a:50:98:
2b:e0:83:a6:d6:55:ac:f9:7c:c1:d3:ca:10:29:d1:
38:b7:4e:88:71:56:0d:b9:f6:11:86:04:fc:13:ea:
a5:b6:2b:ed:d3:9a:22:b6:b6:03:66:77:ab:3b:aa:
47:16:d6:c1:94:25:0c:59:84:4d:91:62:9d:4e:26:
c7:47:d0:52:63:b5:10:eb:0e:19:6e:08:9d:f1:1e:
c1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EC:A0:52:5A:30:EB:67:51:82:3D:CA:C0:8D:6A:CB:39:0C:78:E0
X509v3 Authority Key Identifier:
keyid:18:6B:8E:24:FC:2F:E0:78:EC:E3:77:B6:40:78:5A:87:25:77:D7:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGuOJPwv4Hjs43e2QHhahyV3108.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/P-ygUlow62dRgj3KwI1qyzkMeOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/GGuOJPwv4Hjs43e2QHhahyV3108.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.152.0/22
141.138.160.0/21
IPv6:
2a01:9380::/32
Signature Algorithm: sha256WithRSAEncryption
72:ad:d1:76:5c:0f:fe:62:54:14:82:ac:35:99:30:81:b7:2e:
59:80:8f:8e:6a:0f:24:df:2d:42:f1:f3:fb:d1:51:2b:a5:9e:
db:94:43:9c:1c:50:22:ff:f2:4c:3a:20:dd:4f:76:fe:4e:b4:
db:28:86:86:3c:66:aa:bf:52:33:07:6a:3b:25:9d:f4:16:86:
ed:44:61:ad:49:6d:3a:51:23:f8:ae:5d:9e:3f:a2:55:27:1c:
e4:71:47:74:43:b5:4b:c0:18:53:9f:81:01:ac:0f:08:87:2b:
ea:cb:40:fb:16:d4:df:c0:85:f0:01:c7:81:a6:cb:5c:79:23:
46:58:8c:d7:64:9e:a7:4c:cf:1b:9c:e3:57:04:43:43:a5:01:
08:cf:e1:29:19:50:b0:24:c2:1d:83:15:21:9d:87:09:19:0b:
75:7b:54:29:22:f1:5a:54:4b:23:e0:fb:1a:45:0a:3f:2c:ba:
4a:11:95:3f:af:eb:92:55:0c:89:41:6e:bd:5e:48:8a:08:fb:
9c:c4:90:f1:aa:e5:aa:f0:c4:02:50:54:e9:94:d3:f4:0f:c0:
29:95:81:62:a8:50:01:6b:0c:f0:d9:1d:c4:2c:3e:32:66:d3:
4c:a2:a3:9f:3e:7a:f3:d1:d4:cd:c1:59:e5:f4:70:74:fe:70:
bd:a6:21:bc
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZ8jaMT45b5T7SmXaKXawR1KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NmI4ZTI0ZmMyZmUwNzhlY2UzNzdiNjQwNzg1YTg3MjU3
N2Q3NGYwHhcNMjYwNzAyMTUxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZmVjYTA1MjVhMzBlYjY3NTE4MjNkY2FjMDhkNmFjYjM5MGM3OGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSEdNFRvH8Y+2H4XOV6ru729Q9B2
3+1MgUBOvRAB7jIWk+zIArncirCop/z2fPCbRzDFYyX3Rp089m/Qjk7p4mIvUFeK
WUd6dGH9ZcAeoeozEDH5YTyxaWYqnDzh9YU/ZaXbYdlcDaJIc7KQALWeKm4wPuYf
dBF3HLCtPQbHcSvzuM6PzorVHyeIO6uEfh313/Xmj3A+dYp5gMjHq03y5wbZxn2X
B6QXndO02AXvU86aUJgr4IOm1lWs+XzB08oQKdE4t06IcVYNufYRhgT8E+qltivt
05oitrYDZnerO6pHFtbBlCUMWYRNkWKdTibHR9BSY7UQ6w4Zbgid8R7BfwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFD/soFJaMOtnUYI9ysCNass5DHjgMB8GA1UdIwQY
MBaAFBhrjiT8L+B47ON3tkB4Wocld9dPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0d1T0pQd3Y0SGpzNDNlMlFIaGFoeVYzMTA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iZWM0MWEtZDlmOC00NTQ1LThlNDgt
NjczNjQwMjMzNjY1LzEvUC15Z1Vsb3c2MmRSZ2ozS3dJMXF5emtNZU9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9iZWM0MWEtZDlmOC00NTQ1LThlNDgtNjczNjQwMjMzNjY1
LzEvR0d1T0pQd3Y0SGpzNDNlMlFIaGFoeVYzMTA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCW8WYAwQD
jYqgMA0EAgACMAcDBQAqAZOAMA0GCSqGSIb3DQEBCwUAA4IBAQByrdF2XA/+YlQU
gqw1mTCBty5ZgI+Oag8k3y1C8fP70VErpZ7blEOcHFAi//JMOiDdT3b+TrTbKIaG
PGaqv1IzB2o7JZ30FobtRGGtSW06USP4rl2eP6JVJxzkcUd0Q7VLwBhTn4EBrA8I
hyvqy0D7FtTfwIXwAceBpstceSNGWIzXZJ6nTM8bnONXBENDpQEIz+EpGVCwJMId
gxUhnYcJGQt1e1QpIvFaVEsj4PsaRQo/LLpKEZU/r+uSVQyJQW69XkiKCPucxJDx
quWq8MQCUFTplNP0D8AplYFiqFABawzw2R3ELD4yZtNMoqOfPnrz0dTNwVnl9HB0
/nC9piG8
-----END CERTIFICATE-----
Generated at Mon Jul 27 11:27:51 2026 by rpki-client