Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/sYAHM3dA9t7sL8KtPSRxfoaqowk.roa
File: sYAHM3dA9t7sL8KtPSRxfoaqowk.roa (raw, json)
Hash identifier: s0PVxl/MfJ/lQ4s/RbNRindGurEhHhc3J5Bljq8tw4M=
Subject key identifier: B1:80:07:33:77:40:F6:DE:EC:2F:C2:AD:3D:24:71:7E:86:AA:A3:09
Certificate issuer: /CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Certificate serial: 01A06CCBF2F1F406264BBD887815FF2DD7B0
Authority key identifier: 06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/sYAHM3dA9t7sL8KtPSRxfoaqowk.roa
Signing time: Fri 04 Sep 2026 14:21:40 +0000
ROA not before: Fri 04 Sep 2026 14:21:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21221
IP address blocks: 91.209.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 02:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:cb:f2:f1:f4:06:26:4b:bd:88:78:15:ff:2d:d7:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Validity
Not Before: Sep 4 14:21:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b18007337740f6deec2fc2ad3d24717e86aaa309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f2:fa:19:1d:c6:d7:7e:42:8b:fc:8d:b7:d3:
29:e8:d2:2e:65:1d:81:f4:57:8d:f0:1d:33:ae:c3:
2a:b7:bf:95:72:af:63:ae:23:4f:43:e0:5e:a8:ae:
af:87:ca:59:44:df:b5:57:86:a4:f6:df:40:76:51:
c0:cc:7f:48:2a:c5:8f:b6:11:9c:82:71:46:57:72:
f4:cc:35:64:4b:67:ba:4d:fa:f5:62:26:f6:46:38:
94:ab:ab:93:aa:4b:0b:4e:46:d5:0d:51:b6:a6:2b:
26:6a:ad:1a:c2:3f:9c:91:b7:ad:f0:1d:8d:c2:35:
a2:97:12:d1:dc:bd:71:9a:c4:ee:82:00:41:f0:6c:
9f:c3:9c:cb:39:f8:55:8c:f6:31:06:65:81:df:17:
ed:04:93:64:b6:75:13:58:fc:4d:0d:0a:3d:d9:63:
2c:ff:0f:2a:2a:1d:95:7b:8f:d3:59:a4:a3:83:67:
bc:46:2f:16:40:c9:7f:bb:34:03:63:88:02:f9:f7:
db:14:12:34:17:f8:d5:d8:2c:09:70:53:4d:b3:0d:
06:e8:76:a3:da:f2:ca:db:48:43:de:63:66:1e:fe:
88:92:5d:28:7d:df:59:91:04:5e:be:6c:6f:9b:92:
ff:f4:63:c2:fb:87:d5:65:e7:f4:6b:76:4b:51:e7:
69:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:80:07:33:77:40:F6:DE:EC:2F:C2:AD:3D:24:71:7E:86:AA:A3:09
X509v3 Authority Key Identifier:
keyid:06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/sYAHM3dA9t7sL8KtPSRxfoaqowk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.137.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:5f:da:c3:8c:30:c7:6e:af:e5:a8:40:ef:e0:df:e6:3a:e3:
b5:8e:4a:5c:bd:69:80:75:d1:2f:08:6f:db:31:1b:9c:b6:5d:
59:33:bd:62:bc:98:5a:48:a5:7f:4f:34:24:64:9a:88:96:9f:
e2:7f:50:95:9c:67:d0:fe:fb:be:04:cd:13:8b:d3:ac:25:6c:
e2:f6:a7:82:cd:23:25:af:7c:73:04:44:c4:7b:5d:b6:d4:69:
79:23:fc:c2:14:b0:df:41:06:b6:51:b2:59:90:af:5a:92:e8:
aa:52:76:44:76:92:59:16:19:e7:19:7b:ad:f0:a9:5a:3d:b7:
a3:79:cf:c6:5a:36:63:eb:45:29:4b:5a:31:87:37:0a:a9:6f:
55:0b:93:55:b5:b2:6d:38:03:ee:12:5d:65:d7:9c:9c:9f:52:
74:7c:1f:8a:0b:83:75:b5:9a:d3:43:0c:e2:09:6f:18:f4:84:
c0:f5:b0:c7:ab:68:d7:23:54:2a:43:3e:d6:e9:a1:42:86:4f:
b4:02:c8:72:f0:f2:0b:f4:82:3e:c4:e3:85:e5:4d:01:77:c3:
1f:47:e1:63:15:01:e2:0c:4b:7c:c8:dd:af:09:e3:d1:d1:7a:
60:b6:16:87:fa:34:14:e4:c0:af:5b:26:b4:68:ea:60:94:6a:
73:41:6a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 09:31:53 2026 by rpki-client