Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/4d9ae0-7b8f-46c3-a201-af39e9d6ea51/1/IQgUFXohTVi2Y4XfWtFJarOT0q4.roa
File: IQgUFXohTVi2Y4XfWtFJarOT0q4.roa (raw, json)
Hash identifier: J2MJLqrQ5YjNoDasd1MZixNZt0/WlW4h/Wdqx4ZC4tw=
Subject key identifier: 21:08:14:15:7A:21:4D:58:B6:63:85:DF:5A:D1:49:6A:B3:93:D2:AE
Certificate issuer: /CN=cc888aa66c8400a1e6409c5dcc50ebd7b8e4305d
Certificate serial: 019D86A9FC07D929203C7210AC9D094005C0
Authority key identifier: CC:88:8A:A6:6C:84:00:A1:E6:40:9C:5D:CC:50:EB:D7:B8:E4:30:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zIiKpmyEAKHmQJxdzFDr17jkMF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/4d9ae0-7b8f-46c3-a201-af39e9d6ea51/1/IQgUFXohTVi2Y4XfWtFJarOT0q4.roa
Signing time: Mon 13 Apr 2026 11:46:20 +0000
ROA not before: Mon 13 Apr 2026 11:46:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 91.201.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/4d9ae0-7b8f-46c3-a201-af39e9d6ea51/1/zIiKpmyEAKHmQJxdzFDr17jkMF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/4d9ae0-7b8f-46c3-a201-af39e9d6ea51/1/zIiKpmyEAKHmQJxdzFDr17jkMF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zIiKpmyEAKHmQJxdzFDr17jkMF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:86:a9:fc:07:d9:29:20:3c:72:10:ac:9d:09:40:05:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc888aa66c8400a1e6409c5dcc50ebd7b8e4305d
Validity
Not Before: Apr 13 11:46:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=210814157a214d58b66385df5ad1496ab393d2ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6c:a9:58:18:e2:75:5f:4f:7f:a9:9e:71:df:
ef:48:ac:06:d2:c4:ad:de:d0:64:a3:6a:97:9a:ad:
71:b1:c8:c0:e4:a5:07:92:18:b1:07:b0:7f:fb:69:
9f:0b:ac:69:34:72:ed:82:3d:03:6e:b5:8d:54:ca:
09:ec:40:86:db:fd:cd:60:33:5d:e4:85:24:e8:55:
67:bb:fd:ca:c1:ec:8c:72:6f:ca:93:b8:13:b2:a3:
2c:65:07:b0:b9:1e:18:d8:de:d0:8c:b0:19:8a:50:
dc:65:ca:61:1b:88:24:5d:6d:31:0c:18:df:6c:0e:
d4:bd:8d:e1:26:dc:48:82:78:4f:29:66:df:71:4d:
3d:1b:44:1a:d4:b6:e4:20:3d:d6:10:fb:36:49:08:
e0:23:b0:04:fc:4b:36:ee:99:cc:a7:8a:bd:1e:f0:
55:8e:9d:aa:b8:6b:b7:af:62:7c:28:bc:a7:54:b2:
b7:f6:58:80:bc:f2:6f:ce:a0:47:d1:74:20:cf:45:
26:40:c9:a0:fd:04:0f:7b:36:0c:2b:ad:24:28:8b:
56:95:3a:71:75:f6:bd:6b:80:53:03:99:91:3c:44:
10:66:97:c3:e1:4e:a8:50:03:32:1f:92:83:46:33:
72:fa:b9:7e:72:ff:a1:69:03:64:19:05:18:36:14:
15:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:08:14:15:7A:21:4D:58:B6:63:85:DF:5A:D1:49:6A:B3:93:D2:AE
X509v3 Authority Key Identifier:
keyid:CC:88:8A:A6:6C:84:00:A1:E6:40:9C:5D:CC:50:EB:D7:B8:E4:30:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zIiKpmyEAKHmQJxdzFDr17jkMF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4d9ae0-7b8f-46c3-a201-af39e9d6ea51/1/IQgUFXohTVi2Y4XfWtFJarOT0q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4d9ae0-7b8f-46c3-a201-af39e9d6ea51/1/zIiKpmyEAKHmQJxdzFDr17jkMF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.28.0/22
Signature Algorithm: sha256WithRSAEncryption
78:6c:91:83:5a:a6:de:a5:ee:8e:99:18:91:9a:57:e4:a0:93:
a4:79:01:ec:cf:aa:bb:08:f3:a3:44:57:7d:0c:8c:cc:41:1a:
af:20:fe:70:89:3e:07:af:ef:6e:f4:c9:35:d6:c9:f5:f0:6a:
20:20:d8:b9:a8:e5:26:3b:22:7a:a1:7f:fd:6c:81:9b:f1:80:
d4:a1:03:1c:0c:67:15:fb:e1:71:45:3f:b0:96:3c:b8:57:8e:
fc:f5:3c:c3:2a:4f:20:dc:25:dc:27:37:33:ec:26:62:2b:26:
ac:c8:99:f1:49:3f:75:a5:83:3e:9a:85:e8:c3:f9:44:41:95:
41:0e:79:e6:c5:f4:c5:92:7f:ad:74:e8:11:d1:44:99:f2:a4:
74:99:d7:69:c1:05:84:85:42:5e:c2:72:80:15:29:b2:02:ff:
12:30:9c:03:50:76:b7:d8:d8:ae:41:89:8c:02:22:71:b4:16:
70:ef:56:47:c8:61:a2:82:ac:ec:a4:65:72:4d:62:ae:c2:37:
f9:db:b9:c1:c3:f3:ce:4d:c3:bc:36:ae:a7:3a:61:c6:e2:ad:
9b:3d:5e:f7:51:b3:91:68:4b:7d:8c:59:cd:4b:65:d9:00:0b:
1d:b1:12:39:ee:47:84:f0:27:44:b6:b2:07:d6:46:68:5c:d5:
34:b4:90:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:41:44 2026 by rpki-client