Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/jOwYdlbKNzM1zi93IL4xEbNx1s8.roa
File: jOwYdlbKNzM1zi93IL4xEbNx1s8.roa (raw, json)
Hash identifier: TGDCjyb535Hc1opJTwsMrKzDGebIWLmrRjERGmc1ztE=
Subject key identifier: 8C:EC:18:76:56:CA:37:33:35:CE:2F:77:20:BE:31:11:B3:71:D6:CF
Certificate issuer: /CN=6eedc2c864a7a3a127a81bcfb370c0a0743db1d3
Certificate serial: 01A023D52AA2B9C988BB3B5123C3BA081773
Authority key identifier: 6E:ED:C2:C8:64:A7:A3:A1:27:A8:1B:CF:B3:70:C0:A0:74:3D:B1:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bu3CyGSno6EnqBvPs3DAoHQ9sdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/jOwYdlbKNzM1zi93IL4xEbNx1s8.roa
Signing time: Fri 21 Aug 2026 10:19:27 +0000
ROA not before: Fri 21 Aug 2026 10:19:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61236
IP address blocks: 91.238.72.0/23 maxlen: 23
91.238.73.0/24 maxlen: 24
185.14.104.0/22 maxlen: 24
2a03:acc0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/bu3CyGSno6EnqBvPs3DAoHQ9sdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/bu3CyGSno6EnqBvPs3DAoHQ9sdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bu3CyGSno6EnqBvPs3DAoHQ9sdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:d5:2a:a2:b9:c9:88:bb:3b:51:23:c3:ba:08:17:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eedc2c864a7a3a127a81bcfb370c0a0743db1d3
Validity
Not Before: Aug 21 10:19:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8cec187656ca373335ce2f7720be3111b371d6cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a3:67:5b:81:1a:ac:d1:99:07:2b:50:b5:43:
74:66:23:e5:af:6b:48:29:57:36:06:d4:9b:63:91:
a3:59:a3:98:df:ca:41:0d:c0:c0:b2:51:7e:7c:61:
5c:dd:18:60:12:4f:d7:5a:08:0e:7f:56:e6:2d:5f:
5b:50:bf:d9:7b:ea:cc:ca:46:72:92:70:7e:e8:38:
96:ae:09:02:57:ad:9b:e9:e5:e5:df:24:3d:aa:1c:
5b:6a:86:95:12:42:17:5c:1b:76:bf:3f:10:e2:24:
8d:8c:ed:d5:88:7f:ca:cb:22:0a:c1:06:f6:74:b0:
7a:00:75:00:f8:b4:af:3a:06:aa:09:b0:bf:89:8f:
b5:d4:ba:5b:3e:e9:2f:18:93:fd:73:1b:2b:09:6b:
00:23:14:4c:27:f9:f7:af:cd:4a:5a:ab:f8:5f:87:
9f:7c:91:81:be:92:d2:38:b9:e3:0c:80:7e:3c:f2:
6d:7c:c2:55:67:17:d4:17:57:95:3b:02:6c:1f:49:
2b:59:66:f3:b0:ff:a1:df:6c:52:33:4d:39:7f:4a:
4f:c5:a5:de:0b:eb:f3:a8:b1:61:2a:1d:ac:0c:08:
a1:79:c2:a7:50:07:a3:3f:42:ca:60:ec:66:e8:b7:
2a:e2:bd:3d:44:ce:34:76:60:e8:4f:6b:c4:f7:ed:
9c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EC:18:76:56:CA:37:33:35:CE:2F:77:20:BE:31:11:B3:71:D6:CF
X509v3 Authority Key Identifier:
keyid:6E:ED:C2:C8:64:A7:A3:A1:27:A8:1B:CF:B3:70:C0:A0:74:3D:B1:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bu3CyGSno6EnqBvPs3DAoHQ9sdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/jOwYdlbKNzM1zi93IL4xEbNx1s8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4e403d-9bf1-4f74-bd2a-98a66794cb5f/1/bu3CyGSno6EnqBvPs3DAoHQ9sdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.72.0/23
185.14.104.0/22
IPv6:
2a03:acc0::/32
Signature Algorithm: sha256WithRSAEncryption
66:2c:d9:9c:a7:b0:23:9a:76:cd:be:61:a4:42:37:d1:70:93:
a9:e6:81:e5:a6:af:f0:d6:dc:b5:29:3f:8a:90:6d:6c:67:83:
82:f3:75:cf:40:71:fa:1e:6a:a9:8b:05:97:f4:b4:d3:b5:34:
3c:c4:e2:10:3d:39:dc:31:bf:ba:0f:60:8e:7d:91:04:78:86:
dc:fc:d9:29:57:2b:e9:81:6c:30:a4:06:08:23:97:d9:cc:05:
06:9a:61:6b:fd:98:a9:1d:23:80:99:62:ac:25:fb:39:77:87:
2d:ab:5c:b5:a2:ff:31:94:3c:df:b6:24:6b:1f:e7:a1:11:34:
d5:dc:0e:1c:e6:cb:f6:d1:02:8b:ca:03:a5:45:33:de:64:f2:
fc:c9:e8:7a:14:0f:70:d7:f0:ed:d4:23:59:eb:6a:27:49:9d:
40:d0:78:d7:bb:64:be:8c:90:6d:1f:34:87:81:c1:6f:b9:1c:
61:19:71:fe:2e:c7:5b:66:89:db:bb:ae:05:05:72:c7:72:2c:
f4:08:35:e5:df:26:9d:fc:ee:e3:a4:ac:e5:16:7a:04:73:e7:
be:bb:ea:40:54:c9:79:9f:74:25:87:a0:4b:54:e3:55:11:9c:
0f:99:0d:08:89:c9:73:ac:f8:9c:ae:89:e0:00:be:42:ad:e2:
8f:98:c6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:57:24 2026 by rpki-client