Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/IyHLg3suZFaQuVarnDT09yy0X2o.roa
File: IyHLg3suZFaQuVarnDT09yy0X2o.roa (raw, json)
Hash identifier: 6+BW/hTb1umKDUBp2nCuMYA44iYB5QhDbwWwEQM2hgQ=
Subject key identifier: 23:21:CB:83:7B:2E:64:56:90:B9:56:AB:9C:34:F4:F7:2C:B4:5F:6A
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 01A0DCB21983023C9864675164C6687954AD
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/IyHLg3suZFaQuVarnDT09yy0X2o.roa
Signing time: Sat 26 Sep 2026 07:50:54 +0000
ROA not before: Sat 26 Sep 2026 07:50:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216169
IP address blocks: 91.217.166.0/24 maxlen: 24
2a05:9080:13::/48 maxlen: 48
2a05:9080:14::/48 maxlen: 48
2a05:9080:15::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:b2:19:83:02:3c:98:64:67:51:64:c6:68:79:54:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Sep 26 07:50:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2321cb837b2e645690b956ab9c34f4f72cb45f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f9:54:c1:8e:a0:32:4f:2e:c6:6b:16:8b:ff:
2e:4e:b9:12:f5:0f:7d:f2:9a:41:96:e3:b7:11:5d:
67:3d:be:13:7d:1d:58:4d:e8:02:17:b6:f4:4c:a1:
70:a4:fa:7b:ff:e8:67:c2:60:f8:c1:9e:08:fc:dc:
06:f5:1e:e8:35:52:95:cb:35:02:bf:e6:a5:5b:02:
e7:52:28:70:09:d4:e1:de:9a:71:ce:78:1e:ca:ff:
30:dc:a5:16:36:2a:79:ac:fe:38:5f:01:b1:76:4f:
f2:aa:ea:61:01:82:d8:d6:dd:44:f8:33:a6:22:7c:
1d:ab:13:7b:99:b8:3c:68:f4:19:b8:db:a8:7b:bb:
55:91:96:01:2e:d9:59:4f:48:60:fd:ba:53:43:b9:
fe:36:2d:da:c3:1b:15:4c:68:5e:a2:8c:42:03:4f:
d1:b8:c5:f0:76:35:c1:59:d8:08:85:de:cc:e5:76:
6c:f8:50:3f:3b:50:11:c2:e5:69:f0:10:e0:e2:f8:
48:a1:fc:29:f2:d7:b0:9b:d8:0a:e9:94:12:53:a8:
93:80:f2:d5:54:09:ed:b3:3f:08:45:3b:58:67:bb:
e3:a0:24:79:2f:b6:f8:25:af:a7:e2:0a:9c:5b:95:
aa:1c:d8:12:7d:61:6c:90:81:64:88:b2:38:46:76:
05:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:21:CB:83:7B:2E:64:56:90:B9:56:AB:9C:34:F4:F7:2C:B4:5F:6A
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/IyHLg3suZFaQuVarnDT09yy0X2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.166.0/24
IPv6:
2a05:9080:13::-2a05:9080:15:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
45:e2:a1:a3:47:4b:8c:c1:ef:ee:b9:f8:fc:e5:5b:1c:5d:f2:
d1:b2:53:a2:56:8b:cc:53:2d:f4:6a:dc:e0:33:ee:23:99:38:
a3:7d:79:56:10:42:1c:15:6d:ec:32:2a:c8:16:aa:d6:33:6b:
96:89:95:6a:1a:ab:5e:11:22:aa:8f:9f:2d:4e:45:00:c2:c3:
c8:84:0c:d3:dc:fb:5c:fc:7b:7b:a7:7b:1d:e4:ca:25:e0:50:
3c:cb:41:ca:63:04:5c:af:7d:9d:77:55:cd:04:95:ab:7a:38:
8f:35:aa:4f:bc:a4:80:aa:e7:75:f8:33:4d:70:0f:21:39:ff:
8c:02:db:01:ca:3d:bf:aa:74:39:c7:fc:81:0d:32:e1:c0:d0:
80:fd:e7:1b:92:97:a0:3c:18:15:63:33:0d:36:41:4e:e9:41:
81:88:46:50:98:22:49:e2:19:17:8e:bf:2f:0c:40:dc:22:cc:
7d:9f:bf:89:39:21:b6:93:b8:83:29:b0:95:55:c4:33:ab:c5:
25:26:9b:8b:bc:25:41:36:e4:16:73:e4:d3:65:10:1a:53:28:
ba:c1:71:ba:a5:cf:c3:45:08:02:a7:08:47:33:17:c9:25:52:
cd:5d:7e:f7:a5:d3:88:19:09:eb:e4:e3:3c:cf:7f:44:30:b3:
35:68:3f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:26:55 2026 by rpki-client