Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/4d9ae0-7b8f-46c3-a201-af39e9d6ea51/1/wQGsS70JXw7EzI_ohYX-ZhN3HWk.roa
File: wQGsS70JXw7EzI_ohYX-ZhN3HWk.roa (raw, json)
Hash identifier: V9wby/6/IQHqv6ZSSWsMOjiXOYqBXSyK8u1dRZnHf0A=
Subject key identifier: C1:01:AC:4B:BD:09:5F:0E:C4:CC:8F:E8:85:85:FE:66:13:77:1D:69
Certificate issuer: /CN=cc888aa66c8400a1e6409c5dcc50ebd7b8e4305d
Certificate serial: 019D86A9FB7D8A91C9C6210F8EBE25A1E32C
Authority key identifier: CC:88:8A:A6:6C:84:00:A1:E6:40:9C:5D:CC:50:EB:D7:B8:E4:30:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zIiKpmyEAKHmQJxdzFDr17jkMF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/4d9ae0-7b8f-46c3-a201-af39e9d6ea51/1/wQGsS70JXw7EzI_ohYX-ZhN3HWk.roa
Signing time: Mon 13 Apr 2026 11:46:20 +0000
ROA not before: Mon 13 Apr 2026 11:46:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 91.201.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/4d9ae0-7b8f-46c3-a201-af39e9d6ea51/1/zIiKpmyEAKHmQJxdzFDr17jkMF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/4d9ae0-7b8f-46c3-a201-af39e9d6ea51/1/zIiKpmyEAKHmQJxdzFDr17jkMF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zIiKpmyEAKHmQJxdzFDr17jkMF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:86:a9:fb:7d:8a:91:c9:c6:21:0f:8e:be:25:a1:e3:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc888aa66c8400a1e6409c5dcc50ebd7b8e4305d
Validity
Not Before: Apr 13 11:46:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c101ac4bbd095f0ec4cc8fe88585fe6613771d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8e:84:cd:cd:84:d0:81:5f:32:63:f8:cc:7a:
9f:6c:a6:73:a0:c4:19:35:a3:17:b4:f5:e5:7f:29:
47:51:6c:1a:35:b0:8f:38:12:5f:ab:2c:39:21:3c:
bb:71:7c:65:8c:73:c5:7a:bb:08:5a:3e:62:6c:6a:
5d:f8:3e:1b:1a:00:07:d0:96:66:d2:ac:27:6b:ac:
b0:80:db:85:07:93:07:97:6e:ef:23:ec:1c:39:eb:
b4:05:a0:64:71:7a:41:59:62:15:68:f1:6d:ff:a6:
fc:80:fa:4d:a5:b5:5c:e7:d1:fc:01:1e:3d:39:11:
0d:3f:01:87:c7:93:8b:78:18:54:5d:84:91:d4:3f:
c3:05:8b:be:a1:cc:93:d7:21:6b:86:90:18:a5:98:
35:70:91:81:0e:2b:a8:dd:29:7d:91:5c:46:86:8f:
fb:67:c9:6d:f7:35:7d:ea:bc:c9:4b:d1:9d:0e:04:
32:9f:72:d7:26:39:49:a2:d9:5a:f3:bd:87:d1:4e:
f0:f3:d0:7c:2e:b1:5d:aa:fe:e7:53:86:b9:b0:22:
07:5c:06:64:e0:ab:13:4e:cf:ee:3f:cf:8f:71:5e:
72:36:fb:bb:c1:9f:5c:4e:98:24:fc:67:a2:68:cf:
15:9a:4a:6c:ba:65:fe:0c:05:48:bd:a8:78:3c:b5:
b6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:01:AC:4B:BD:09:5F:0E:C4:CC:8F:E8:85:85:FE:66:13:77:1D:69
X509v3 Authority Key Identifier:
keyid:CC:88:8A:A6:6C:84:00:A1:E6:40:9C:5D:CC:50:EB:D7:B8:E4:30:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zIiKpmyEAKHmQJxdzFDr17jkMF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4d9ae0-7b8f-46c3-a201-af39e9d6ea51/1/wQGsS70JXw7EzI_ohYX-ZhN3HWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4d9ae0-7b8f-46c3-a201-af39e9d6ea51/1/zIiKpmyEAKHmQJxdzFDr17jkMF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.28.0/22
Signature Algorithm: sha256WithRSAEncryption
19:2b:5f:4a:e3:b0:04:94:54:17:8d:fd:c2:5f:d1:75:9b:fa:
59:a6:5f:f4:84:c7:1f:7c:b5:63:e6:d0:d8:00:3e:7e:a6:1a:
84:a2:50:c7:98:90:45:24:c2:9f:70:17:f9:26:c7:ee:f8:6c:
70:92:98:89:49:99:e5:94:78:1f:16:cd:5a:96:2e:21:81:dd:
82:d2:84:a1:58:d7:a3:8c:03:da:60:37:71:c9:90:f5:75:2c:
d6:5c:2f:e6:23:e2:4e:7b:48:0e:07:35:d7:da:34:f8:9a:18:
24:70:1b:4a:92:3f:79:8d:14:89:48:13:81:69:c4:66:31:ba:
9e:cc:7a:e8:3f:f3:8d:c1:9b:33:6e:c2:18:b5:a9:c7:3b:64:
d7:be:93:7a:b1:db:28:4b:ff:64:3e:54:c0:03:eb:47:ee:6b:
57:3f:60:44:e6:75:5a:fe:a6:a2:aa:98:1d:8d:cd:92:ed:a8:
61:0b:9d:9b:bb:90:dd:8b:a6:c7:ce:0c:44:c4:98:43:4f:b9:
a0:86:41:b0:7f:88:08:a7:92:97:9f:e8:04:d5:49:27:03:7a:
1a:8b:eb:18:f9:f5:02:4c:71:67:5c:c9:35:50:26:37:7d:0a:
07:9d:e7:59:91:be:f4:3b:a7:ba:72:f3:50:08:80:91:43:81:
c0:15:d1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:18:25 2026 by rpki-client