Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/f15a6a-ec60-4e09-b751-149b9cd0871d/1/ygXf8hK1RKOhHBEhcmwoTFpVCHA.roa
File: ygXf8hK1RKOhHBEhcmwoTFpVCHA.roa (raw, json)
Hash identifier: CaBIXIwQgshpLvMZR7qJkQJdxMsCM+N6vVNMJrPJCAU=
Subject key identifier: CA:05:DF:F2:12:B5:44:A3:A1:1C:11:21:72:6C:28:4C:5A:55:08:70
Certificate issuer: /CN=646416ca4bee1d152bed121bdd42043047092e75
Certificate serial: 01A17CC2389917AC204FCFB0EC5C6D2E886E
Authority key identifier: 64:64:16:CA:4B:EE:1D:15:2B:ED:12:1B:DD:42:04:30:47:09:2E:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGQWykvuHRUr7RIb3UIEMEcJLnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f15a6a-ec60-4e09-b751-149b9cd0871d/1/ygXf8hK1RKOhHBEhcmwoTFpVCHA.roa
Signing time: Tue 27 Oct 2026 09:47:45 +0000
ROA not before: Tue 27 Oct 2026 09:47:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33901
IP address blocks: 91.90.160.0/24 maxlen: 24
91.90.172.0/22 maxlen: 22
91.90.172.0/23 maxlen: 23
91.90.174.0/23 maxlen: 23
2001:67c:2fec::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f15a6a-ec60-4e09-b751-149b9cd0871d/1/ZGQWykvuHRUr7RIb3UIEMEcJLnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/f15a6a-ec60-4e09-b751-149b9cd0871d/1/ZGQWykvuHRUr7RIb3UIEMEcJLnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGQWykvuHRUr7RIb3UIEMEcJLnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:c2:38:99:17:ac:20:4f:cf:b0:ec:5c:6d:2e:88:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=646416ca4bee1d152bed121bdd42043047092e75
Validity
Not Before: Oct 27 09:47:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca05dff212b544a3a11c1121726c284c5a550870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:48:31:0a:4f:96:1b:3a:dc:54:8c:33:57:f4:
1f:af:96:fa:a3:84:0c:f2:35:09:2d:11:f5:55:92:
3c:12:0a:b1:77:76:76:8e:07:e4:84:58:f8:f0:73:
6c:8e:66:20:3d:b4:d5:38:60:fd:6e:5a:96:1b:ec:
17:46:ce:de:e8:39:0e:73:d7:18:c9:9a:c4:88:d9:
af:9f:a0:12:49:a5:5a:4a:38:92:a6:c1:db:b8:0d:
5b:d5:57:76:c5:3d:0b:60:94:11:69:67:06:36:38:
ab:34:67:01:3c:48:3f:47:67:d6:32:b8:eb:87:f6:
41:60:26:13:f6:ba:7e:a9:95:f8:74:9b:5d:ec:9a:
6b:37:df:b4:e7:97:4b:d3:b2:93:a0:a5:6a:f4:9f:
23:92:0f:fc:89:60:c7:59:e8:27:6a:8a:53:12:d0:
73:6a:4f:4b:fd:79:0f:45:fb:ac:f1:c4:84:9d:c7:
27:d3:66:66:0c:b5:3d:ac:b4:a1:20:58:48:59:e9:
1d:64:2a:56:de:dc:c3:d5:ba:e1:f2:dc:26:80:c1:
f4:20:25:30:76:7c:bf:5c:d6:5b:93:63:02:f6:fc:
bd:40:44:f5:c2:d0:4c:2f:9c:7e:4b:0a:dc:4f:58:
e4:e3:51:2b:63:a7:f0:3c:ad:0c:91:1f:68:60:35:
bc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:05:DF:F2:12:B5:44:A3:A1:1C:11:21:72:6C:28:4C:5A:55:08:70
X509v3 Authority Key Identifier:
keyid:64:64:16:CA:4B:EE:1D:15:2B:ED:12:1B:DD:42:04:30:47:09:2E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGQWykvuHRUr7RIb3UIEMEcJLnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f15a6a-ec60-4e09-b751-149b9cd0871d/1/ygXf8hK1RKOhHBEhcmwoTFpVCHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f15a6a-ec60-4e09-b751-149b9cd0871d/1/ZGQWykvuHRUr7RIb3UIEMEcJLnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.90.160.0/24
91.90.172.0/22
IPv6:
2001:67c:2fec::/48
Signature Algorithm: sha256WithRSAEncryption
7b:3f:f8:1a:67:8a:70:f1:e7:ca:7c:95:9a:84:48:cd:67:d0:
25:6b:43:e0:eb:13:e1:8f:1e:02:64:6e:29:89:23:3c:8b:be:
34:0b:8b:2b:ea:e7:0b:d9:16:7d:16:11:c6:b4:49:6e:c4:42:
5e:a3:cd:72:e3:c9:49:d5:cb:7c:94:72:ed:fc:bc:d8:74:b7:
0e:2a:b4:3b:90:e6:0c:de:ab:b5:5e:41:4e:38:92:3a:95:33:
03:06:88:68:15:02:aa:87:16:12:19:7b:c6:a5:75:59:d9:fc:
01:e3:26:69:18:f0:1e:00:65:d7:e8:f9:65:f9:ea:2a:6e:28:
11:19:89:c5:44:f8:c7:9d:c1:82:6f:d7:1b:6e:25:4a:c7:37:
3f:54:10:f4:9b:dc:77:2e:7b:8e:37:68:2e:7a:d8:d8:87:8b:
36:a3:27:52:2a:9f:d9:f7:a0:d1:6a:6d:8b:36:72:8a:f3:63:
cf:bd:50:06:c2:87:ad:28:aa:84:c1:d8:fa:6f:42:9f:63:4a:
65:4a:c4:83:df:5e:18:fc:5f:b2:de:f0:b6:d1:c9:1e:8d:97:
63:d2:03:8f:96:af:4e:71:09:aa:bd:01:a5:a8:24:db:87:a5:
c6:46:b2:21:3f:a8:39:5e:8b:65:67:35:7b:21:c4:43:1b:0a:
4b:3d:1d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:07:54 2026 by rpki-client