Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/y8hhS6WAcShM8g1VF8d7iEptGM8.roa
File: y8hhS6WAcShM8g1VF8d7iEptGM8.roa (raw, json)
Hash identifier: QGPHljd/iJmNf8mAGKwr0X+/gQdNYGFQQHZFv3VTbHw=
Subject key identifier: CB:C8:61:4B:A5:80:71:28:4C:F2:0D:55:17:C7:7B:88:4A:6D:18:CF
Certificate issuer: /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Certificate serial: 019D68E403A6F883CC0FD2CCDB3FFB3C8645
Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/y8hhS6WAcShM8g1VF8d7iEptGM8.roa
Signing time: Tue 07 Apr 2026 17:01:06 +0000
ROA not before: Tue 07 Apr 2026 17:01:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48444
IP address blocks: 91.224.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:68:e4:03:a6:f8:83:cc:0f:d2:cc:db:3f:fb:3c:86:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Validity
Not Before: Apr 7 17:01:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cbc8614ba58071284cf20d5517c77b884a6d18cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ed:9a:ce:89:8a:37:47:6d:38:77:0d:61:8b:
ea:58:f3:df:18:af:38:af:c7:3f:bd:63:2e:ed:2c:
3d:14:fb:96:b2:ac:2f:5f:2c:6c:6e:78:68:24:1c:
73:65:e1:81:03:9e:24:7d:7e:f4:2a:69:c5:05:a3:
11:20:6e:e2:df:18:21:c5:bf:05:e0:d3:53:8c:d8:
79:c8:99:45:4b:39:48:58:53:cb:7c:2f:9c:f3:2f:
0b:bb:83:df:b8:e7:b4:e0:81:42:6e:e8:ed:54:20:
69:44:f8:70:6c:7a:e6:ec:b6:88:4d:a3:83:31:f2:
89:5d:cf:49:0d:99:f1:54:00:22:14:e6:f6:db:f0:
3a:1c:c9:9c:0a:c7:65:1c:4d:dd:06:ee:dd:32:31:
0c:5b:14:74:88:06:09:7f:ac:06:3b:78:b2:c1:e3:
dc:51:6d:90:12:15:4b:d0:59:38:c2:45:04:b5:29:
73:e3:d2:5f:aa:d7:7b:ef:7f:a7:9a:21:e8:51:73:
4e:eb:ae:ef:12:e6:a3:c0:ed:8c:4a:12:57:21:b9:
a7:c6:8a:fd:d4:03:d3:a1:c1:93:4e:94:d9:f4:bc:
89:ce:a5:ff:a3:3b:67:49:d9:b2:a0:b6:e7:7d:7a:
2b:ec:8c:af:b7:8b:18:87:45:3f:d2:a0:06:61:6a:
c1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C8:61:4B:A5:80:71:28:4C:F2:0D:55:17:C7:7B:88:4A:6D:18:CF
X509v3 Authority Key Identifier:
keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/y8hhS6WAcShM8g1VF8d7iEptGM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.109.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:6b:5c:c3:c8:1d:ec:3e:3b:71:34:7a:e6:41:6f:fd:05:50:
fd:7f:64:72:25:16:5d:45:40:29:79:ae:24:d1:30:ab:c1:cb:
67:cd:0b:b1:64:e3:22:12:05:2b:ab:63:1f:19:d1:d0:80:b2:
fb:09:1a:9e:89:62:2b:9e:da:17:f8:15:f4:1d:d1:63:26:ec:
31:2c:fd:60:9a:03:4b:6d:cd:5d:f2:6b:60:6e:b3:0e:77:1d:
00:ce:c7:7d:41:79:5a:1e:bf:e3:28:11:c2:4a:b1:df:68:77:
bf:86:68:2f:8a:33:00:dc:5a:bc:21:d6:0f:bf:b5:4a:68:bc:
12:f0:be:2e:7b:08:1e:8a:26:e8:c1:22:10:14:24:53:db:6e:
a2:62:a8:3d:c4:ef:d4:5e:47:ea:db:46:b4:11:38:89:f4:f2:
70:a4:fc:2b:e3:59:a5:5b:5a:2d:71:50:80:11:62:7c:1a:bd:
56:e8:fd:71:e0:ab:9d:89:4a:fa:59:f3:45:14:1d:4d:b4:ec:
13:df:38:bc:16:86:16:a9:f1:12:bb:d5:47:60:18:95:48:54:
53:16:e3:42:4f:6b:ca:01:f3:98:b4:96:76:49:b5:9b:92:5f:
08:d4:5a:60:6e:77:bc:03:f3:2c:10:82:6c:f4:8c:f5:8f:56:
91:b8:83:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:28:48 2026 by rpki-client