Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/4d9ae0-7b8f-46c3-a201-af39e9d6ea51/1/Cj6_o8sOiBgjNnzgImvX4eLilBo.roa
File: Cj6_o8sOiBgjNnzgImvX4eLilBo.roa (raw, json)
Hash identifier: GWj4PVam61KpU/B7S3H1nczjNuFdlEmDrmCiC34iMTA=
Subject key identifier: 0A:3E:BF:A3:CB:0E:88:18:23:36:7C:E0:22:6B:D7:E1:E2:E2:94:1A
Certificate issuer: /CN=cc888aa66c8400a1e6409c5dcc50ebd7b8e4305d
Certificate serial: 019E92180BE5A67CB0BE6DE25C9023BB5649
Authority key identifier: CC:88:8A:A6:6C:84:00:A1:E6:40:9C:5D:CC:50:EB:D7:B8:E4:30:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zIiKpmyEAKHmQJxdzFDr17jkMF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/4d9ae0-7b8f-46c3-a201-af39e9d6ea51/1/Cj6_o8sOiBgjNnzgImvX4eLilBo.roa
Signing time: Thu 04 Jun 2026 10:05:09 +0000
ROA not before: Thu 04 Jun 2026 10:05:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203480
IP address blocks: 91.201.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/4d9ae0-7b8f-46c3-a201-af39e9d6ea51/1/zIiKpmyEAKHmQJxdzFDr17jkMF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/4d9ae0-7b8f-46c3-a201-af39e9d6ea51/1/zIiKpmyEAKHmQJxdzFDr17jkMF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zIiKpmyEAKHmQJxdzFDr17jkMF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:18:0b:e5:a6:7c:b0:be:6d:e2:5c:90:23:bb:56:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc888aa66c8400a1e6409c5dcc50ebd7b8e4305d
Validity
Not Before: Jun 4 10:05:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a3ebfa3cb0e881823367ce0226bd7e1e2e2941a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6b:5b:af:db:f8:b4:f0:66:34:77:6a:ac:87:
22:6b:be:4a:23:2e:43:3f:ae:e1:9c:df:35:cb:04:
6e:77:ca:52:2d:7a:bf:64:8d:9a:ae:04:34:63:27:
ec:90:f1:2c:ce:33:24:07:23:39:78:41:25:72:7d:
f6:51:c6:19:6a:5a:c0:52:0d:ff:e5:ae:2c:17:1b:
61:c8:f8:9f:1f:01:6d:89:19:75:9b:35:69:3f:ad:
e0:fc:c8:ec:83:a5:e0:a3:ab:b0:e1:0f:53:9c:96:
ac:0e:49:48:3f:c2:a7:83:3c:4e:49:45:51:34:3d:
8a:99:d8:cd:c7:0c:ad:85:cc:38:da:d3:93:94:fd:
1c:11:a6:92:c8:ea:39:7a:d1:81:9e:4a:b4:7a:2f:
bf:b3:0e:fc:3e:47:d9:e7:cf:03:01:71:93:2c:81:
0c:c5:7e:d7:22:0e:fe:30:1e:ec:26:a5:cf:99:0b:
33:a2:44:8c:44:89:fb:04:ff:4a:4c:41:26:b9:e5:
fd:d0:d7:be:1c:b2:63:3c:df:3e:66:d4:ea:67:46:
f2:90:65:ea:23:00:85:d8:4e:55:d9:fd:0e:01:87:
6c:85:e2:21:1d:72:d4:e9:ce:d7:3b:9f:ba:0e:c5:
01:5e:d3:32:47:2f:f8:28:82:d4:bd:18:ee:7e:30:
46:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3E:BF:A3:CB:0E:88:18:23:36:7C:E0:22:6B:D7:E1:E2:E2:94:1A
X509v3 Authority Key Identifier:
keyid:CC:88:8A:A6:6C:84:00:A1:E6:40:9C:5D:CC:50:EB:D7:B8:E4:30:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zIiKpmyEAKHmQJxdzFDr17jkMF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4d9ae0-7b8f-46c3-a201-af39e9d6ea51/1/Cj6_o8sOiBgjNnzgImvX4eLilBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4d9ae0-7b8f-46c3-a201-af39e9d6ea51/1/zIiKpmyEAKHmQJxdzFDr17jkMF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.28.0/22
Signature Algorithm: sha256WithRSAEncryption
03:e8:92:a8:d0:ca:9b:a8:7e:30:da:e5:e6:8c:d9:e7:14:07:
16:10:f6:26:72:dd:c8:04:de:5f:f9:02:20:7f:57:a6:55:d5:
32:09:d0:ec:49:50:db:a5:8e:03:10:92:b5:cf:49:92:18:2d:
ce:dc:17:5c:7c:c0:bc:5c:d1:d1:55:ad:76:3a:13:2f:ed:3f:
b3:52:ca:f1:a9:6d:a2:2d:26:5d:80:da:f6:da:38:e6:30:89:
cb:4c:34:7c:89:16:31:25:e3:3b:e7:46:9c:10:cb:86:09:3c:
0b:dd:49:50:39:ed:37:1a:09:c0:39:ef:9a:1a:b9:97:9a:68:
d8:e2:a3:31:ec:df:a5:b9:f4:c7:ed:23:ae:8c:8e:be:3c:4a:
7e:e9:0e:c7:03:3a:3a:21:68:c4:4b:7e:48:9e:7a:5a:20:28:
4e:6f:f6:6b:0d:c8:14:b6:f4:03:4a:60:26:13:09:1a:1d:34:
20:8b:b4:25:db:a4:54:46:91:93:c2:19:b5:4c:56:49:48:bb:
48:c7:49:ab:05:b6:0d:3c:64:3b:07:08:d0:a6:a5:75:a2:0c:
5b:18:1e:f9:bd:dc:b5:6d:f2:7d:fa:3e:c4:e1:de:e6:68:49:
ca:5b:ff:94:f8:ef:c0:55:ab:2c:f8:dd:c2:c2:6a:b7:fb:7a:
81:8d:71:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:45:35 2026 by rpki-client