Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/cRoy5bgDIbo0tHnv4tgtYkF3qjY.roa
File: cRoy5bgDIbo0tHnv4tgtYkF3qjY.roa (raw, json)
Hash identifier: 1shpahuyjixHWI6Z3X/oGSNmNs/VZ/2i+HhPZ5UneNQ=
Subject key identifier: 71:1A:32:E5:B8:03:21:BA:34:B4:79:EF:E2:D8:2D:62:41:77:AA:36
Certificate issuer: /CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Certificate serial: 019D9A6A729ECD892908793CE0D0AE490083
Authority key identifier: 61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/cRoy5bgDIbo0tHnv4tgtYkF3qjY.roa
Signing time: Fri 17 Apr 2026 07:49:20 +0000
ROA not before: Fri 17 Apr 2026 07:49:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211796
IP address blocks: 91.188.248.0/24 maxlen: 24
91.188.249.0/24 maxlen: 24
91.202.244.0/24 maxlen: 24
2a0c:6ec0:1::/48 maxlen: 48
2a0c:6ec0:2::/48 maxlen: 48
2a0c:6ec0:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:6a:72:9e:cd:89:29:08:79:3c:e0:d0:ae:49:00:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Validity
Not Before: Apr 17 07:49:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=711a32e5b80321ba34b479efe2d82d624177aa36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f3:6e:b1:ac:83:7b:66:d1:2f:5f:7c:cd:b6:
e2:13:8a:3f:46:78:b9:14:d6:11:ab:66:85:cc:51:
b2:82:9f:a5:a1:86:62:8e:46:97:2d:7b:c1:60:b0:
50:36:31:df:9e:f4:7f:26:fb:bc:25:b2:d3:1d:53:
73:07:59:a9:a3:9a:cb:3c:21:47:b1:3a:24:24:80:
e4:2e:39:bf:ad:31:83:91:e3:15:99:02:e0:4e:00:
92:ac:87:10:84:31:76:b6:0b:33:68:01:6e:e5:4c:
02:5d:b6:ec:3f:0f:d8:69:a4:95:53:0f:a3:87:c7:
21:8d:aa:1e:af:b4:bc:ae:c1:fd:6b:28:ce:33:ea:
c8:ed:80:01:6d:1d:21:00:1d:2f:38:25:fb:32:1b:
cd:d4:18:48:bf:04:86:40:e1:cc:dd:63:0d:43:d9:
c5:07:6e:22:48:da:3b:d3:df:c0:cb:9d:ef:32:3c:
98:82:42:96:81:2e:80:3f:af:c4:f9:dc:f6:c0:d6:
09:df:6d:dd:9d:fd:c5:ac:83:71:df:33:22:cc:a1:
74:d6:0b:aa:6f:d0:20:ce:98:b4:88:51:0a:25:23:
1f:c0:d1:d4:37:73:8e:5b:0d:f0:79:4d:39:47:19:
b1:13:65:53:b2:2d:71:c6:34:d8:79:4f:d3:78:e5:
ed:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1A:32:E5:B8:03:21:BA:34:B4:79:EF:E2:D8:2D:62:41:77:AA:36
X509v3 Authority Key Identifier:
keyid:61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/cRoy5bgDIbo0tHnv4tgtYkF3qjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.248.0/23
91.202.244.0/24
IPv6:
2a0c:6ec0:1::-2a0c:6ec0:3:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
09:61:19:d0:2a:4b:f9:61:99:ea:60:54:fe:c4:a1:c9:f2:72:
ba:be:e6:12:01:07:1d:1a:43:de:f4:67:a2:2c:a4:d8:9f:fd:
0b:b7:40:3a:8d:7f:3d:b5:69:5c:ac:2f:37:f5:43:6c:ce:d7:
74:61:d7:10:3e:f9:40:76:8c:82:68:1d:23:7a:2f:43:42:9b:
ae:bd:9b:e2:a6:45:22:ea:06:5c:b7:b9:17:71:75:41:64:b3:
3b:b9:b1:1c:e2:a3:2f:f1:bc:ce:95:f0:36:9c:f0:78:ca:23:
73:fc:2c:b7:1f:72:50:2e:cb:a9:7e:d6:b6:92:e2:39:9a:0a:
4f:17:9f:a0:6c:77:91:58:7a:09:eb:44:0e:b1:6f:a1:06:ca:
6f:1b:ea:ad:54:13:f8:03:1b:54:cb:e4:04:9f:5f:88:40:e7:
00:d7:7f:59:25:9c:7d:91:1a:be:be:7e:e6:de:07:40:a8:a9:
3a:6c:d3:50:ab:6e:61:06:7d:56:02:f8:58:e5:c0:f1:41:13:
70:0a:d4:64:e1:81:11:41:e7:eb:e1:3c:c0:4d:71:61:2d:47:
c4:6f:70:cb:0f:4d:7f:25:a9:64:3c:0d:7f:99:4b:05:43:91:
5d:1c:17:a4:b2:0c:64:d9:5b:e4:cb:40:51:31:da:62:5c:5b:
f9:0b:13:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:10:32 2026 by rpki-client