Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/yzLkeKkf0tPb4Uv9fas37hJCz_k.roa
File: yzLkeKkf0tPb4Uv9fas37hJCz_k.roa (raw, json)
Hash identifier: zKoTcGPS0jd4ECkZ/lyLggMREJXF/+DGOW+cdF5eKoA=
Subject key identifier: CB:32:E4:78:A9:1F:D2:D3:DB:E1:4B:FD:7D:AB:37:EE:12:42:CF:F9
Certificate issuer: /CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057
Certificate serial: 019B7B35903513A98C750D352F19732803FD
Authority key identifier: 0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/yzLkeKkf0tPb4Uv9fas37hJCz_k.roa
Signing time: Thu 01 Jan 2026 20:17:46 +0000
ROA not before: Thu 01 Jan 2026 20:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44524
IP address blocks: 91.199.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 20:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:90:35:13:a9:8c:75:0d:35:2f:19:73:28:03:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aae1a6058bbdcd0835068e3b4f9de51f2bd9057
Validity
Not Before: Jan 1 20:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb32e478a91fd2d3dbe14bfd7dab37ee1242cff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:56:91:96:bd:e4:95:df:43:fb:7b:cc:bc:93:
4d:c5:d9:88:78:dd:cc:e3:41:98:b1:f0:27:a6:91:
11:4a:86:89:78:71:00:43:72:53:26:64:1b:10:47:
f8:87:1a:fc:bd:e3:e0:45:ce:5f:f7:99:bb:c0:70:
db:4f:f3:6f:4d:21:d6:0d:f8:b9:b0:82:4a:97:90:
e0:55:e1:8a:ac:ce:c9:be:c1:b8:e4:27:9b:8c:3d:
c1:fb:36:c4:f8:97:ef:9b:b0:23:f2:6d:b1:c2:fa:
87:ce:f1:71:39:12:5a:c0:19:11:3f:e4:93:54:5a:
67:f5:9e:88:8e:9c:19:02:94:e8:de:8a:ee:47:73:
06:f7:25:60:80:72:59:88:17:b3:69:34:56:30:58:
90:59:68:dc:dd:b8:24:26:ff:c3:4f:df:49:e9:7c:
50:ad:f0:58:8c:d9:7a:e9:53:32:4e:99:b7:d1:ad:
91:49:79:8f:2f:c1:c0:bb:8b:11:d5:55:1a:03:38:
7e:5f:ba:35:51:65:c2:9c:8a:0e:c6:2c:d3:bb:38:
c6:ca:d2:37:04:d1:6e:cc:c0:af:08:fb:a5:0a:ad:
c7:10:5d:48:a0:af:49:41:8f:e6:de:87:38:83:d1:
44:8b:09:ad:78:9e:9f:3b:1c:50:dd:a6:80:e3:13:
31:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:32:E4:78:A9:1F:D2:D3:DB:E1:4B:FD:7D:AB:37:EE:12:42:CF:F9
X509v3 Authority Key Identifier:
keyid:0A:AE:1A:60:58:BB:DC:D0:83:50:68:E3:B4:F9:DE:51:F2:BD:90:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cq4aYFi73NCDUGjjtPneUfK9kFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/yzLkeKkf0tPb4Uv9fas37hJCz_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9c0b2e-7be9-4bc4-9320-b2247b3a52d8/1/Cq4aYFi73NCDUGjjtPneUfK9kFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.142.0/24
Signature Algorithm: sha256WithRSAEncryption
28:fb:b8:80:29:18:69:e9:71:95:38:b1:96:e2:df:f0:03:f2:
08:1d:a3:e1:6b:c8:38:88:f0:31:dd:7e:3b:f0:52:b9:68:2c:
8e:eb:1c:11:ef:ad:4f:b7:98:00:c1:37:fc:9e:94:d7:0c:bd:
e0:77:4e:1f:0b:a4:cd:4f:3b:e3:bf:9b:73:1a:eb:85:4a:1d:
85:bb:dd:9e:89:44:d4:cd:35:a6:83:4a:bd:81:5c:75:dd:33:
d0:57:83:af:0d:3c:3f:5e:dc:95:ae:db:74:03:de:ea:a9:08:
06:f9:36:fc:d4:63:e8:11:0f:18:8c:17:48:46:a0:72:eb:53:
a1:7b:58:f3:b4:76:f4:d5:ed:b1:b4:c2:24:60:6e:62:6d:60:
0b:67:93:44:fc:51:74:0b:d7:b9:33:32:87:54:c9:c3:a5:52:
eb:75:00:01:0d:99:85:7e:28:e8:5b:bb:be:f9:7e:95:0b:92:
74:1a:23:2f:ef:e7:7a:36:e8:e0:97:96:60:43:03:2d:0a:e1:
90:02:df:89:18:9a:cb:f4:f4:fe:c2:9e:77:d4:22:19:60:70:
d8:c5:42:28:cc:28:aa:1f:aa:e7:95:b4:5d:69:79:5f:9e:89:
4f:87:87:2b:ae:c5:27:79:c1:70:58:55:0b:91:c1:99:40:b1:
0b:5d:df:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:57:44 2026 by rpki-client