Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/_jyQypfJZvzwEBtd-UUJ7WFp16Q.roa
File: _jyQypfJZvzwEBtd-UUJ7WFp16Q.roa (raw, json)
Hash identifier: izhnazNeKvtnL76Htwicfo/+b153O8jjCPIw/x6B0CI=
Subject key identifier: FE:3C:90:CA:97:C9:66:FC:F0:10:1B:5D:F9:45:09:ED:61:69:D7:A4
Certificate issuer: /CN=86080263dc5703160d96ffef12ec5e8a5251eca6
Certificate serial: 019F2368CF1C9A1EC6608B0CFE7F3B4117E6
Authority key identifier: 86:08:02:63:DC:57:03:16:0D:96:FF:EF:12:EC:5E:8A:52:51:EC:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hggCY9xXAxYNlv_vEuxeilJR7KY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/_jyQypfJZvzwEBtd-UUJ7WFp16Q.roa
Signing time: Thu 02 Jul 2026 15:18:19 +0000
ROA not before: Thu 02 Jul 2026 15:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197662
IP address blocks: 91.223.240.0/24 maxlen: 24
185.74.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/hggCY9xXAxYNlv_vEuxeilJR7KY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/hggCY9xXAxYNlv_vEuxeilJR7KY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hggCY9xXAxYNlv_vEuxeilJR7KY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:cf:1c:9a:1e:c6:60:8b:0c:fe:7f:3b:41:17:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86080263dc5703160d96ffef12ec5e8a5251eca6
Validity
Not Before: Jul 2 15:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe3c90ca97c966fcf0101b5df94509ed6169d7a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c3:16:3f:14:58:ff:46:6f:58:69:12:d5:1a:
98:66:cc:d9:61:f7:cb:a8:53:30:e2:83:a2:a7:4f:
a6:02:92:f0:59:e2:3f:03:49:c3:29:c7:21:62:2e:
a6:ed:32:c8:1a:f0:52:6e:27:75:c1:75:c3:c5:d2:
26:51:40:fa:4c:8b:3a:97:4c:d9:eb:fc:73:78:1e:
60:fe:03:7e:14:b4:db:91:dd:eb:be:fc:cf:53:cf:
a3:a9:6c:f4:0e:fa:36:bb:45:72:8b:a5:9e:2d:c7:
d3:66:1c:77:cd:90:e0:62:02:f2:93:24:92:52:0e:
a9:a4:4e:b0:91:17:ce:6f:ab:cf:89:fd:df:95:4c:
9a:7a:a0:7e:ec:e4:77:30:c1:bc:6b:67:8f:8e:b1:
97:8f:af:0e:80:1f:d7:9a:b1:af:5c:1a:c4:03:3d:
01:f3:f2:e5:95:18:65:dc:3e:86:e3:ef:67:e0:5d:
7d:4a:b7:fc:13:91:0c:4f:34:42:73:31:30:b0:fb:
98:ff:30:46:71:0c:6d:25:39:84:e8:57:29:b0:71:
6c:b8:12:9b:01:c4:d3:b4:40:31:86:3b:e4:25:74:
24:3d:c9:67:6a:b2:1b:c2:ec:75:d5:e8:af:8b:9e:
09:e6:4e:72:cc:55:cb:31:e4:2b:d8:4c:e0:a7:68:
cd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3C:90:CA:97:C9:66:FC:F0:10:1B:5D:F9:45:09:ED:61:69:D7:A4
X509v3 Authority Key Identifier:
keyid:86:08:02:63:DC:57:03:16:0D:96:FF:EF:12:EC:5E:8A:52:51:EC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hggCY9xXAxYNlv_vEuxeilJR7KY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/_jyQypfJZvzwEBtd-UUJ7WFp16Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/hggCY9xXAxYNlv_vEuxeilJR7KY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.240.0/24
185.74.200.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:8e:a6:b2:f1:a8:2b:4d:99:cf:b2:b0:7c:e8:0c:28:64:53:
bb:58:4a:f2:8c:24:c5:88:79:09:8f:93:a6:4f:3d:54:76:d7:
7a:ee:15:42:5d:0e:03:01:06:59:dc:35:ec:38:e7:ba:96:ea:
97:d0:c8:93:17:a5:95:1e:44:fd:24:15:1f:8c:54:7a:84:a9:
ca:45:21:6f:8e:43:34:f0:aa:b5:41:34:78:e5:06:3e:e6:60:
40:56:f8:d9:d4:e3:0a:20:85:0e:36:ec:dc:f6:a4:97:94:2a:
a3:51:4c:d2:22:91:60:03:fa:a6:b7:2c:5a:8a:ff:35:01:70:
eb:1b:7e:35:df:dc:ef:38:81:a6:10:e3:ba:6b:2b:8f:ff:fb:
ac:2d:2a:f5:25:9f:2d:cf:8d:f3:8f:34:62:f5:b8:1a:d2:04:
fe:e7:26:75:26:28:cc:fb:26:18:5a:98:1b:e1:87:56:a3:b5:
e9:e9:a5:d3:49:93:b5:97:95:fd:96:eb:72:32:d8:9e:2c:40:
15:74:c0:89:44:75:55:5b:d4:4c:5d:bc:6a:b9:03:42:5e:da:
ed:43:34:08:3d:99:07:f7:0a:de:d5:06:28:bd:0e:b2:29:bc:
74:b7:31:6c:49:47:84:37:c0:32:0c:34:80:07:14:79:af:b8:
2d:12:05:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:08:03 2026 by rpki-client