Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/1ucIqM3WJrp6fSAjkIA0n0TVtcs.roa
File: 1ucIqM3WJrp6fSAjkIA0n0TVtcs.roa (raw, json)
Hash identifier: shxMQ3h1iaMAoofuE3ugk4LgNhtgq4pRT6mevjRyS7k=
Subject key identifier: D6:E7:08:A8:CD:D6:26:BA:7A:7D:20:23:90:80:34:9F:44:D5:B5:CB
Certificate issuer: /CN=63c05afa0dc9a5f8f618c3ed2eec672ec38f6fef
Certificate serial: 019B7C126BFB6530EBF107CE90EADE2AFCAD
Authority key identifier: 63:C0:5A:FA:0D:C9:A5:F8:F6:18:C3:ED:2E:EC:67:2E:C3:8F:6F:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/1ucIqM3WJrp6fSAjkIA0n0TVtcs.roa
Signing time: Fri 02 Jan 2026 00:19:00 +0000
ROA not before: Fri 02 Jan 2026 00:19:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57350
IP address blocks: 91.231.216.0/24 maxlen: 24
91.231.217.0/24 maxlen: 24
185.41.116.0/23 maxlen: 23
185.41.118.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:6b:fb:65:30:eb:f1:07:ce:90:ea:de:2a:fc:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c05afa0dc9a5f8f618c3ed2eec672ec38f6fef
Validity
Not Before: Jan 2 00:19:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6e708a8cdd626ba7a7d20239080349f44d5b5cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:93:6e:43:c5:87:38:e3:72:6c:ab:bc:1c:b1:
85:c6:86:cc:a4:76:0e:eb:aa:0e:e5:4c:87:29:46:
36:d9:40:da:86:ea:bc:4a:a9:85:6b:1b:71:a0:18:
57:92:a9:61:5f:5c:fe:97:83:5c:f4:c5:6c:79:e5:
3f:ac:3a:00:c5:6e:44:e2:c4:6d:9c:31:1c:fc:18:
39:08:03:ed:de:e6:33:90:bc:f3:a0:03:5b:49:23:
2d:8f:7b:f1:a1:fb:b2:c2:b4:3a:ed:aa:47:21:1f:
a6:06:7d:c6:ca:41:bd:df:18:3d:78:c6:8b:3e:65:
a0:10:4c:c2:58:30:e1:59:1d:62:2e:7b:1c:03:14:
ca:be:4a:ea:0d:6b:4e:c6:37:82:4b:d4:d2:aa:7d:
ff:04:d0:fe:21:77:ba:2e:15:a2:f0:53:26:c8:93:
c4:a0:a4:1c:b3:96:bb:97:3c:2b:be:85:68:5a:12:
02:64:49:ff:fa:92:54:7a:4c:ba:82:78:08:db:42:
a7:98:04:35:33:6a:46:38:5e:e4:6b:97:a4:48:48:
9f:be:6f:66:67:7c:80:ba:61:2d:b7:56:6a:26:cd:
6a:eb:3e:a2:fc:57:4b:54:ad:8e:a6:00:ee:91:3c:
f9:af:2e:91:fe:a9:06:92:1c:61:48:ca:51:07:50:
27:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E7:08:A8:CD:D6:26:BA:7A:7D:20:23:90:80:34:9F:44:D5:B5:CB
X509v3 Authority Key Identifier:
keyid:63:C0:5A:FA:0D:C9:A5:F8:F6:18:C3:ED:2E:EC:67:2E:C3:8F:6F:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/1ucIqM3WJrp6fSAjkIA0n0TVtcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.216.0/23
185.41.116.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:0c:0e:1f:c3:af:6b:29:c5:e4:cb:b4:6d:34:5c:cd:29:ef:
07:5f:c8:bf:ec:1c:cb:62:ee:7b:fe:65:9c:7f:51:f7:67:d1:
e4:7f:91:3b:34:47:65:07:e4:1c:0b:61:9c:d8:de:f7:0b:a2:
32:23:c0:8b:d7:b2:5d:d7:08:f4:2e:97:92:d7:81:d4:13:09:
cd:d3:40:9f:7e:39:cd:ea:e9:4c:bc:eb:72:77:c9:c3:ce:14:
2b:72:ca:9d:07:f4:54:56:ad:dc:b2:1d:52:ef:0c:7c:81:9a:
13:db:f8:87:79:37:83:51:fd:9b:da:3e:57:d2:38:cb:5f:a6:
b4:b5:27:4d:23:45:c2:19:1e:cc:e7:ec:f2:6f:f0:6d:c7:94:
8b:3e:6c:df:e7:99:cb:57:64:d9:05:e2:19:ef:6b:0a:14:70:
30:82:8d:2a:e3:ff:27:99:46:e6:1a:a7:68:0b:82:ca:b1:94:
08:cc:8f:9a:20:6d:f1:db:a7:b3:c2:89:0f:e5:8f:28:90:ff:
35:90:85:54:ff:9c:b3:3d:1e:da:f3:b4:25:f7:57:a3:54:ea:
32:1b:e4:80:28:f2:1b:90:eb:44:4b:c6:08:83:da:55:07:ec:
a3:a7:6c:71:70:84:d4:db:07:84:04:b3:25:30:e0:a7:38:d6:
cf:01:78:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:42:36 2026 by rpki-client