Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/yLDI05DHrOeaX6ii6878CuRRTU4.roa
File: yLDI05DHrOeaX6ii6878CuRRTU4.roa (raw, json)
Hash identifier: 4oNVYzhNYx0P9TBjHoCa/qlg6gb1ePfdWkrrIU05JyY=
Subject key identifier: C8:B0:C8:D3:90:C7:AC:E7:9A:5F:A8:A2:EB:CE:FC:0A:E4:51:4D:4E
Certificate issuer: /CN=845de8732b1017138f87032b70fa3b7b8776ef71
Certificate serial: 01A0D7DF0DD8D1924955DC3871E6FE9C6986
Authority key identifier: 84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/yLDI05DHrOeaX6ii6878CuRRTU4.roa
Signing time: Fri 25 Sep 2026 09:21:54 +0000
ROA not before: Fri 25 Sep 2026 09:21:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31424
IP address blocks: 91.213.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:df:0d:d8:d1:92:49:55:dc:38:71:e6:fe:9c:69:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845de8732b1017138f87032b70fa3b7b8776ef71
Validity
Not Before: Sep 25 09:21:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8b0c8d390c7ace79a5fa8a2ebcefc0ae4514d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a2:a6:f6:20:bb:85:21:ab:63:ca:55:c0:4c:
50:8a:b4:e0:15:62:74:3a:c4:56:84:bf:4e:f9:05:
bd:68:e4:9c:34:94:be:65:ca:54:ff:6d:23:22:52:
1c:cf:55:7b:7a:38:cf:12:80:01:8a:53:62:7c:f6:
81:73:32:45:17:79:fd:52:3e:f6:1d:95:9c:9c:bc:
98:25:23:29:a9:99:d0:c4:7a:bb:3f:c1:b9:2e:1e:
79:6c:dd:b2:cb:e1:12:60:29:d1:e9:e2:25:0c:1b:
03:ae:9f:a7:41:ed:88:eb:39:47:8d:50:c2:d2:3a:
97:e2:40:54:fa:52:4f:56:1b:54:e4:00:94:d3:f4:
3a:85:68:ae:79:c4:e4:dc:3f:09:c3:f5:34:97:fb:
d0:bd:a6:c9:57:c5:4a:06:a5:17:02:b4:6e:c2:47:
4e:fe:ad:db:47:b6:0d:d5:98:3b:83:ae:31:6a:a8:
24:2e:8d:82:58:93:c4:24:95:b3:0e:b4:87:c5:6c:
e7:72:c5:80:ef:e1:75:dd:22:55:8f:f0:6e:6f:c6:
25:00:85:93:b0:51:5c:19:c5:35:10:a5:cc:43:4c:
42:78:bd:3b:ab:ba:e6:a3:ee:4c:bf:23:37:f1:2b:
84:0b:55:12:6e:01:5c:bc:fb:e1:80:74:34:a6:5a:
8e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B0:C8:D3:90:C7:AC:E7:9A:5F:A8:A2:EB:CE:FC:0A:E4:51:4D:4E
X509v3 Authority Key Identifier:
keyid:84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/yLDI05DHrOeaX6ii6878CuRRTU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.133.0/24
Signature Algorithm: sha256WithRSAEncryption
84:a5:02:8d:6a:a4:0f:0d:46:92:bf:c6:63:4e:79:69:87:71:
28:6d:23:41:36:41:c1:7a:a0:82:9b:a4:b9:8a:88:3b:41:8e:
29:3c:0b:0b:85:1f:5f:39:e7:0c:87:40:4f:ec:8d:2c:5d:eb:
31:d7:67:e5:ab:3e:93:d4:67:f7:94:91:73:43:9d:bb:0f:99:
6c:20:b3:97:86:3c:22:73:f5:28:10:1d:cc:59:52:af:a9:25:
bc:a6:5d:8b:da:e0:26:f5:79:33:67:f4:ad:97:cc:94:a7:3c:
21:a0:ab:82:f2:5d:54:64:a6:1f:a6:57:06:b7:23:a2:b8:8b:
e6:82:eb:4d:f6:58:5d:de:0c:0b:36:0d:ec:09:c4:af:9e:e3:
cb:1a:74:45:0f:f1:f4:c5:c8:e2:00:c1:1c:93:26:ec:db:da:
86:e1:39:83:d4:5f:49:02:22:0c:8c:05:d4:70:c8:80:69:6c:
f2:d0:1f:c8:3f:f4:0f:e6:87:69:8e:b0:d0:46:c3:73:3f:19:
14:43:a3:a4:b7:34:0b:9e:88:14:ba:50:9f:e5:b3:65:40:a8:
41:99:94:a8:c1:1e:dc:73:17:e0:2b:5d:52:29:8f:ee:5c:b7:
c8:e3:6d:9b:9a:f3:6d:26:be:91:ef:1a:16:db:0f:2e:2a:90:
a9:eb:a8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 21:24:10 2026 by rpki-client