Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/Y90GxDj9Pz7Mj76iv6IwSBIpG3c.roa
File: Y90GxDj9Pz7Mj76iv6IwSBIpG3c.roa (raw, json)
Hash identifier: hM4Ux+5ohpBCeVeDoPoewRhRIuVdO/nkUHbbnfNL4Xw=
Subject key identifier: 63:DD:06:C4:38:FD:3F:3E:CC:8F:BE:A2:BF:A2:30:48:12:29:1B:77
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 01A13AC55524C949E8E56936249E720F85D1
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/Y90GxDj9Pz7Mj76iv6IwSBIpG3c.roa
Signing time: Wed 14 Oct 2026 14:16:13 +0000
ROA not before: Wed 14 Oct 2026 14:16:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 91.108.244.0/24 maxlen: 24
91.108.252.0/24 maxlen: 24
193.106.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:c5:55:24:c9:49:e8:e5:69:36:24:9e:72:0f:85:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Oct 14 14:16:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63dd06c438fd3f3ecc8fbea2bfa2304812291b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:94:f7:dd:68:24:07:e3:1f:bb:81:13:c2:ff:
8d:88:9d:90:ab:80:74:47:eb:a7:2d:2a:f2:0d:3d:
4b:d8:e2:82:26:ec:7a:f7:12:31:10:00:c1:72:07:
a6:2b:cc:3c:2f:ba:8f:6f:02:f5:74:93:9e:0d:95:
f9:6a:7f:da:5c:90:55:94:c3:c5:87:28:26:4f:3d:
ba:74:09:98:f0:c3:b8:5e:cd:39:62:d3:33:d2:f5:
b2:61:15:4a:7d:76:4d:69:df:24:3a:ca:79:8e:ab:
0b:46:1d:a6:64:ee:c8:da:d9:84:40:44:dc:ed:52:
8c:ba:95:1a:c1:3d:f5:b4:cf:f9:55:24:6e:cc:83:
3f:8b:e4:6d:b6:90:86:ba:8a:a0:17:d8:e9:a0:8b:
6b:ae:b4:12:54:49:2f:39:42:e7:68:82:6a:11:96:
19:88:1d:4d:4b:3a:cd:58:9e:e7:25:65:6f:16:e0:
b2:45:d5:26:24:e5:94:e5:f9:70:4a:11:76:99:dc:
6d:4d:74:4e:71:46:f8:c5:91:88:12:65:d7:ee:bc:
84:ac:14:40:2e:db:f7:0a:00:ac:07:d6:cb:55:f4:
1e:da:b7:d1:fb:7b:18:c0:ca:67:eb:f6:dc:82:11:
86:5c:66:ed:8b:5d:3b:db:a0:06:b2:ef:d1:d1:b7:
de:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:DD:06:C4:38:FD:3F:3E:CC:8F:BE:A2:BF:A2:30:48:12:29:1B:77
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/Y90GxDj9Pz7Mj76iv6IwSBIpG3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.244.0/24
91.108.252.0/24
193.106.198.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:76:93:37:a4:d2:1d:cb:32:35:f5:51:82:d2:33:f8:ce:c8:
dc:0d:52:b2:49:98:1b:59:29:42:59:4b:2c:b5:6c:b4:66:61:
39:0a:30:51:02:a7:12:e6:e4:c2:53:98:52:07:3d:18:3b:62:
cc:14:22:2e:85:23:4c:8a:05:8c:28:f1:a2:0b:7f:5e:65:7c:
15:cf:24:c1:b2:58:c2:24:fb:73:0a:e6:cb:55:f4:56:9e:8d:
a7:e3:b6:ca:f6:83:6f:f8:c1:a7:a9:33:8e:8c:ee:87:01:ed:
04:f4:d5:2e:ff:78:7a:be:f8:91:36:ec:ae:bd:cf:48:d3:85:
20:54:06:e6:99:36:d0:a8:9d:0e:88:d9:38:c1:37:73:83:bd:
30:63:e7:71:1e:d8:b0:c7:a0:6d:56:8f:dd:10:a7:6c:0e:08:
32:77:1f:9d:de:c2:fe:34:69:95:98:2e:95:bf:76:70:95:10:
0d:c0:98:9c:11:d8:9d:9b:2e:93:85:ba:29:3b:28:43:b0:e0:
08:b1:ee:0e:19:8e:a2:a2:21:b9:84:f6:ca:21:04:bd:d9:39:
f8:5f:fb:e1:b5:bf:db:02:d4:3f:a3:cf:f8:ae:66:85:e5:72:
41:da:1f:57:24:4f:25:e6:65:72:97:bb:c1:96:85:48:a0:3c:
d3:4f:b7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:53:53 2026 by rpki-client