Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/YYCTxNFkf1NnZwNt_F1X5uCrbi8.roa
File: YYCTxNFkf1NnZwNt_F1X5uCrbi8.roa (raw, json)
Hash identifier: iYSVXamwYKpgu/rv9EVrB2B5aR0dQI+gbn6OgKPXKuU=
Subject key identifier: 61:80:93:C4:D1:64:7F:53:67:67:03:6D:FC:5D:57:E6:E0:AB:6E:2F
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 01A0FDFADBEE8F76E23CDC46C0F507A183D5
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/YYCTxNFkf1NnZwNt_F1X5uCrbi8.roa
Signing time: Fri 02 Oct 2026 18:57:51 +0000
ROA not before: Fri 02 Oct 2026 18:57:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213541
IP address blocks: 91.108.200.0/22 maxlen: 22
91.108.200.0/24 maxlen: 24
91.108.204.0/22 maxlen: 22
91.108.204.0/24 maxlen: 24
91.108.216.0/22 maxlen: 22
91.108.216.0/24 maxlen: 24
91.108.220.0/22 maxlen: 22
91.108.220.0/24 maxlen: 24
91.108.224.0/24 maxlen: 24
91.108.228.0/22 maxlen: 22
91.108.232.0/22 maxlen: 22
91.108.236.0/24 maxlen: 24
91.108.238.0/24 maxlen: 24
91.108.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fd:fa:db:ee:8f:76:e2:3c:dc:46:c0:f5:07:a1:83:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Oct 2 18:57:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=618093c4d1647f536767036dfc5d57e6e0ab6e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:71:3c:8e:48:a6:ea:4d:f7:05:fa:af:ae:b5:
b9:d9:87:94:a8:5d:97:d2:53:c1:6c:44:d6:3e:9a:
a1:2d:60:75:4c:17:fa:ce:21:39:90:39:3c:93:13:
93:43:59:31:f4:37:98:e2:e0:59:af:2d:54:b3:0e:
1d:09:ba:d5:bf:97:82:4b:92:b2:59:4b:be:11:a6:
a9:47:25:cb:d9:ef:9f:9c:42:b6:fc:f8:c6:ae:06:
3a:36:c9:3d:45:df:12:9b:97:a7:29:19:d8:08:8f:
3a:4f:33:83:68:46:e6:ca:11:ff:e0:ee:08:09:2e:
63:f2:a0:1d:f2:cf:26:77:6d:40:b1:93:4e:f4:68:
a1:6a:74:3c:5a:6a:73:44:00:c8:2e:0a:03:59:59:
ec:ac:a8:16:4d:98:7e:7c:17:d5:41:6c:7c:27:3e:
c8:77:be:4d:1e:5f:d9:bd:22:7c:2a:17:b9:1a:b2:
a2:b5:4b:cf:da:81:b3:e1:ff:3d:1c:ed:73:68:7c:
31:d6:e4:8e:71:67:f0:d9:42:b1:ca:7d:ea:4f:17:
54:43:63:8b:2a:aa:0f:76:54:29:1d:5d:7f:ad:ec:
76:41:12:84:73:53:ff:c6:77:4d:9d:16:25:be:fc:
7d:51:f1:95:8e:3f:a9:ae:56:42:47:37:2a:f4:92:
1c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:80:93:C4:D1:64:7F:53:67:67:03:6D:FC:5D:57:E6:E0:AB:6E:2F
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/YYCTxNFkf1NnZwNt_F1X5uCrbi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.200.0/21
91.108.216.0-91.108.224.255
91.108.228.0-91.108.236.255
91.108.238.0/24
91.108.255.0/24
Signature Algorithm: sha256WithRSAEncryption
81:d5:ea:97:d6:90:93:f5:c4:bd:53:1f:e6:ff:7a:97:6f:45:
7a:2c:4b:fe:74:6f:0b:94:63:d5:58:96:8e:8b:65:32:23:d9:
81:8e:6d:28:4c:f4:da:ab:dd:1d:6d:34:9b:d2:c4:a2:99:e9:
70:08:64:99:1f:f0:20:6d:e5:f3:f8:42:3f:73:fe:94:21:7e:
96:15:33:5f:77:33:5c:9b:6d:9a:12:9e:e9:3c:35:88:ea:7c:
43:ad:8a:35:13:a4:23:57:ad:46:2b:41:d8:d1:dc:6e:09:0c:
04:cc:93:a1:8f:17:7c:95:3c:df:2c:7d:4c:fa:23:71:f9:e9:
9d:41:ea:7b:75:49:66:04:8c:c7:96:65:8a:82:46:c5:b2:a4:
3f:b9:5e:2b:df:e2:b4:06:a7:a0:09:ed:74:74:1f:ac:74:ba:
c5:bc:c2:0e:1e:6e:33:1b:1e:4c:a7:88:8d:55:49:ce:80:6a:
0f:51:91:c0:31:b9:cd:70:b9:a1:24:91:77:fb:69:8a:97:72:
4a:ab:ab:d7:22:38:e0:20:f5:45:58:6e:9b:26:50:c6:37:ea:
0b:f4:cd:7a:ad:09:15:a2:75:62:0c:82:d3:45:46:32:c1:c0:
0e:8c:cf:ea:78:22:e5:56:74:b8:5d:ed:c2:1c:02:e2:00:12:
85:54:13:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 04:51:22 2026 by rpki-client