Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/zRX49tmJAdaGhaSwlC20v5C1y1M.roa
File: zRX49tmJAdaGhaSwlC20v5C1y1M.roa (raw, json)
Hash identifier: zxokrlpERmb2O5s52Pr/l/EU3mgyz8SOyXjooOdftYE=
Subject key identifier: CD:15:F8:F6:D9:89:01:D6:86:85:A4:B0:94:2D:B4:BF:90:B5:CB:53
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 019D901A304BFE38611B36A50638658C9892
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/zRX49tmJAdaGhaSwlC20v5C1y1M.roa
Signing time: Wed 15 Apr 2026 07:45:28 +0000
ROA not before: Wed 15 Apr 2026 07:45:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209104
IP address blocks: 91.221.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:90:1a:30:4b:fe:38:61:1b:36:a5:06:38:65:8c:98:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Apr 15 07:45:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd15f8f6d98901d68685a4b0942db4bf90b5cb53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d6:69:2c:83:e0:19:cb:e8:6c:a5:8a:4c:41:
86:c3:a2:8a:60:bb:37:c8:67:0d:be:b4:cd:51:f7:
3b:27:57:a6:aa:58:8a:2a:3b:c4:fe:ac:b7:f7:cb:
89:bc:ad:96:38:ed:81:5b:83:6d:b1:f5:01:69:c0:
a9:57:80:3e:b4:4c:db:5c:40:c8:f6:e1:5a:83:85:
71:da:ae:dc:3f:a5:66:f9:33:03:92:9c:e8:e2:76:
6f:5b:7c:bb:25:d8:1e:0c:ea:2e:3b:13:1e:da:0b:
77:dc:ab:19:c1:c2:b0:f0:93:a3:93:57:4a:d6:f7:
d7:41:3c:66:26:32:c8:11:12:e8:ae:89:c4:9f:fc:
37:d5:1f:bb:c7:05:2a:ba:c0:cd:6d:69:32:60:8b:
01:49:f0:aa:1c:16:de:ba:56:a6:99:68:15:7d:89:
1e:a5:fe:c8:59:b1:69:77:1d:93:99:74:66:85:a3:
a5:33:9b:4c:9e:2f:49:4e:e9:f1:12:39:a9:74:06:
db:90:18:d9:c5:ea:31:c5:19:32:f5:54:3d:b2:51:
83:5b:fc:02:b5:3f:bd:42:94:3c:96:a6:88:43:f2:
d3:47:b9:65:2a:58:a0:2a:c8:80:c2:f4:da:e8:3d:
04:bf:58:87:1c:4f:35:25:d6:f1:b7:3f:98:c5:18:
3a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:15:F8:F6:D9:89:01:D6:86:85:A4:B0:94:2D:B4:BF:90:B5:CB:53
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/zRX49tmJAdaGhaSwlC20v5C1y1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.116.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:4c:56:e5:85:67:4e:fb:d6:8b:ee:3f:81:c1:2b:fe:54:94:
d6:85:d8:ff:0e:89:ac:54:fd:7e:8d:03:cd:9f:7a:da:59:b8:
7c:f1:38:69:7c:74:38:10:d6:48:bf:f9:7a:4e:05:d1:60:1e:
88:b7:8b:45:87:9f:d9:a8:36:8f:04:5c:21:08:bc:1a:2d:c1:
88:75:9b:20:8c:4d:93:e0:7e:d3:f9:08:ff:f6:4d:67:e4:9f:
5b:04:48:fc:d3:25:cd:09:14:e2:cf:e3:60:c4:4b:70:b5:3f:
09:b1:ba:52:06:dd:2d:aa:65:f4:b3:ec:ed:cb:32:5c:19:08:
73:2d:9e:0b:7c:7d:b1:e7:29:77:27:75:06:27:60:23:58:e2:
0e:f1:16:6e:8e:5c:cd:bd:f6:f5:d0:f7:f9:0d:37:33:99:a0:
0b:15:ca:42:e2:58:36:a4:0c:da:24:ec:8d:7a:d6:4f:f1:74:
70:41:e9:5f:1d:c4:f9:08:85:b5:14:44:20:56:e0:89:e3:d9:
08:d4:c7:ea:17:60:33:15:a6:67:d3:1c:6c:94:77:66:ef:50:
09:ea:f4:db:de:46:de:bc:f3:05:8e:bb:fd:e5:82:fc:d8:1d:
8f:2b:dc:6b:e0:73:6e:25:a8:37:5b:dc:8e:a6:90:7d:c7:af:
47:2d:39:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:33:41 2026 by rpki-client