Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/h-YNMPYuWy1o5GqwyMkM1NJmUSM.roa
File: h-YNMPYuWy1o5GqwyMkM1NJmUSM.roa (raw, json)
Hash identifier: us18JsIOMphnH0kNot1ftkzW7XzyNG9dxD+IeSBCYOM=
Subject key identifier: 87:E6:0D:30:F6:2E:5B:2D:68:E4:6A:B0:C8:C9:0C:D4:D2:66:51:23
Certificate issuer: /CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Certificate serial: 019C761BB54DC27BE876C19FDE73834981CE
Authority key identifier: 94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/h-YNMPYuWy1o5GqwyMkM1NJmUSM.roa
Signing time: Thu 19 Feb 2026 13:34:13 +0000
ROA not before: Thu 19 Feb 2026 13:34:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213069
IP address blocks: 91.192.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 19:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:76:1b:b5:4d:c2:7b:e8:76:c1:9f:de:73:83:49:81:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f8bf9f305527521508697e2eaa3be1c7a18454
Validity
Not Before: Feb 19 13:34:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87e60d30f62e5b2d68e46ab0c8c90cd4d2665123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e9:a2:20:4d:b9:46:03:52:a6:96:8f:dd:3f:
3c:cf:2e:ca:9e:6f:49:78:64:64:b5:59:71:78:03:
2b:df:35:e4:c4:c9:6d:64:82:48:40:fe:ef:72:88:
cd:27:fe:79:70:b3:14:e4:05:8c:79:29:5b:b9:e8:
7f:00:51:a0:cd:13:ad:c8:5b:0c:7f:b7:13:18:5b:
64:05:f5:8e:4b:37:d9:1d:39:d8:14:b8:e3:63:7b:
f4:a4:6e:45:d6:a3:ce:46:84:eb:7c:1f:68:fc:f4:
85:cc:4c:ff:f0:b5:f8:b8:ce:f7:23:db:ec:fc:42:
76:6f:23:9d:1e:54:e4:89:5b:80:ef:bf:fa:13:d6:
3a:57:fc:2b:1b:d0:da:b6:5d:31:b3:8c:e4:95:31:
72:67:3c:bb:5a:52:f5:82:6c:8c:8c:56:81:0f:7f:
d5:89:4f:7f:6e:bf:72:26:2f:09:14:77:bd:76:34:
07:9b:92:0b:db:2b:f8:83:2d:c9:fd:1e:ec:ca:e9:
8d:07:4c:36:40:2c:e3:c6:f3:4a:b2:72:d3:70:0e:
b7:85:21:82:9b:52:76:d5:e8:ec:6f:7a:d3:d3:69:
fb:13:9b:44:f3:e4:a0:4c:64:ba:c9:e6:cb:e9:2c:
e0:a5:a5:df:d2:ec:6c:1c:e3:9a:cc:b1:3c:3b:c4:
5b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E6:0D:30:F6:2E:5B:2D:68:E4:6A:B0:C8:C9:0C:D4:D2:66:51:23
X509v3 Authority Key Identifier:
keyid:94:F8:BF:9F:30:55:27:52:15:08:69:7E:2E:AA:3B:E1:C7:A1:84:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/h-YNMPYuWy1o5GqwyMkM1NJmUSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e73e95-c3c9-49ae-a2d9-a7b85460f366/1/lPi_nzBVJ1IVCGl-Lqo74cehhFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.160.0/24
Signature Algorithm: sha256WithRSAEncryption
15:40:df:d7:d0:ed:61:70:2d:60:28:2a:ac:ba:3e:3d:bf:42:
b6:3a:ce:cb:cb:94:3b:69:3c:fa:12:cf:5d:14:7c:1f:f6:1c:
93:38:fa:92:99:56:38:0c:98:35:a1:0d:06:6e:c9:ff:7a:0e:
ea:0a:ef:c2:ed:99:a1:58:16:a3:61:46:2f:8a:52:84:bb:5f:
4a:f8:3f:7a:74:e6:84:71:83:30:c4:7c:00:96:32:96:30:01:
d9:f1:cb:08:2f:f3:55:f9:1c:93:f0:ea:06:2e:fd:ec:f3:05:
a6:76:db:6f:82:9c:b4:d2:71:6b:7b:fb:3c:23:9c:9c:eb:ab:
86:d9:5a:91:1e:14:c0:a8:1e:2e:b3:ad:ee:39:08:21:cd:08:
24:d8:b1:cf:1f:6e:34:9f:e7:df:69:df:2a:2a:fc:09:bc:3f:
ea:ce:fe:26:e0:b9:8b:98:b9:bc:bc:d4:7e:f6:86:9a:55:54:
ff:d6:b4:e5:5e:9e:c3:71:67:63:fa:a1:8d:73:81:fe:64:71:
53:56:03:b0:d4:2a:90:3e:a3:c7:50:51:0f:01:d2:b0:d1:95:
36:ef:34:b7:4a:13:5c:a2:e2:71:72:4d:ee:0d:a1:85:b0:13:
c5:d1:9e:cf:5c:4c:62:f3:6e:c3:8e:48:70:d9:12:6b:ae:c8:
67:25:f5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:57:08 2026 by rpki-client