Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/218945-673f-4162-9909-72a1f5616110/1/jX662fY9jlqaT9uZG8QQHpkgchs.roa
File: jX662fY9jlqaT9uZG8QQHpkgchs.roa (raw, json)
Hash identifier: 6v0o0Bi1FCZ1H1g65saK2X6mdzev6P+1j47pTU86t5I=
Subject key identifier: 8D:7E:BA:D9:F6:3D:8E:5A:9A:4F:DB:99:1B:C4:10:1E:99:20:72:1B
Certificate issuer: /CN=6cce6bd5ebbee61b5286c6bdfa0f4741a939595b
Certificate serial: 01A0EC9FE96E502461F59316F45F352FBE86
Authority key identifier: 6C:CE:6B:D5:EB:BE:E6:1B:52:86:C6:BD:FA:0F:47:41:A9:39:59:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM5r1eu-5htShsa9-g9HQak5WVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/218945-673f-4162-9909-72a1f5616110/1/jX662fY9jlqaT9uZG8QQHpkgchs.roa
Signing time: Tue 29 Sep 2026 10:04:58 +0000
ROA not before: Tue 29 Sep 2026 10:04:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30848
IP address blocks: 91.245.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/218945-673f-4162-9909-72a1f5616110/1/bM5r1eu-5htShsa9-g9HQak5WVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/218945-673f-4162-9909-72a1f5616110/1/bM5r1eu-5htShsa9-g9HQak5WVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM5r1eu-5htShsa9-g9HQak5WVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:9f:e9:6e:50:24:61:f5:93:16:f4:5f:35:2f:be:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cce6bd5ebbee61b5286c6bdfa0f4741a939595b
Validity
Not Before: Sep 29 10:04:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d7ebad9f63d8e5a9a4fdb991bc4101e9920721b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0e:cf:70:a3:1f:8d:a6:7a:b0:96:0d:e1:74:
1c:3e:0b:40:f7:f3:fa:25:34:01:85:f4:be:45:c7:
9e:c0:d8:aa:01:f9:31:c2:d7:52:0d:89:b1:c0:eb:
d5:80:9b:28:38:8d:60:4f:45:f7:2e:36:f0:60:94:
63:a3:63:62:01:39:9c:3e:42:50:7e:4c:a3:b2:56:
ca:c2:9d:b0:ef:15:b8:f1:11:50:ed:01:4f:9f:b6:
7c:25:8e:a9:c1:99:c8:76:70:97:b7:96:46:55:e4:
f5:a5:94:f1:0c:ad:e5:a8:14:17:85:13:60:c3:63:
03:42:9b:c3:eb:64:6c:3a:ce:ee:fb:ca:26:5f:dd:
02:95:26:0a:17:9e:f9:54:57:43:0b:2c:60:26:a4:
11:97:6e:2c:78:cb:2d:e1:5c:b7:a3:8c:1a:57:46:
07:fc:1e:83:50:b3:59:47:58:d8:55:7e:75:4e:36:
34:3c:c9:b9:3c:51:f4:a4:60:27:59:9b:d3:c1:14:
52:ba:ba:bf:13:f1:77:e7:29:bd:b7:94:89:12:9d:
66:fd:c1:03:dc:e7:45:cd:5b:0a:07:80:76:20:84:
b2:5e:fa:35:d5:e5:79:4c:c9:88:58:0f:67:ed:cc:
f6:6e:03:c2:62:2a:a4:0a:dc:0b:25:bb:cb:3c:1f:
ab:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7E:BA:D9:F6:3D:8E:5A:9A:4F:DB:99:1B:C4:10:1E:99:20:72:1B
X509v3 Authority Key Identifier:
keyid:6C:CE:6B:D5:EB:BE:E6:1B:52:86:C6:BD:FA:0F:47:41:A9:39:59:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM5r1eu-5htShsa9-g9HQak5WVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/218945-673f-4162-9909-72a1f5616110/1/jX662fY9jlqaT9uZG8QQHpkgchs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/218945-673f-4162-9909-72a1f5616110/1/bM5r1eu-5htShsa9-g9HQak5WVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.213.0/24
Signature Algorithm: sha256WithRSAEncryption
90:96:4f:5e:55:09:89:2e:23:03:fa:e2:db:00:c7:00:07:e2:
ce:da:a1:06:2b:3d:a4:d6:fc:51:32:35:67:88:f3:d3:88:3a:
12:0e:99:e0:c2:ee:6a:0c:f5:f6:a6:92:81:cf:15:ba:af:90:
9b:c7:b0:6d:f4:09:88:d3:3f:d8:af:a0:03:d0:b3:41:a2:81:
7f:54:8b:ab:4a:00:15:72:cb:89:19:7e:e7:eb:fd:da:a4:8e:
95:d7:ba:fd:59:2d:9d:ac:d5:cb:53:20:6b:6d:f5:f8:fb:74:
6d:7c:b3:86:74:6f:35:1f:15:d4:98:26:83:0f:df:d2:c7:72:
25:92:47:44:2d:f6:07:27:7e:74:80:e5:7c:2b:c6:89:bc:c7:
31:0f:65:db:92:3f:67:2b:e0:37:86:69:ea:d7:3a:2a:6a:fc:
10:7f:ea:92:70:e9:87:06:a3:79:13:7f:69:2e:8d:1d:13:2b:
0d:1d:71:8e:bf:6b:d8:b9:c5:60:e4:ba:ae:a0:bd:3b:77:95:
3f:13:01:05:42:af:b3:2d:b1:b9:04:16:0e:93:7d:27:7c:d8:
23:5c:56:49:29:5d:7d:0b:af:59:af:8b:64:9f:f2:e9:8b:66:
46:2e:2e:2a:47:99:d7:db:dd:be:a5:9b:03:06:86:3f:3f:a7:
63:42:35:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:40:57 2026 by rpki-client