Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/GyWzmF_PpZ9N7VpvNUnUwxN8sIg.roa
File: GyWzmF_PpZ9N7VpvNUnUwxN8sIg.roa (raw, json)
Hash identifier: aO6JHojQKb2l7UaVOSnTv4mzQmmXqQjYDswxCMnwBH4=
Subject key identifier: 1B:25:B3:98:5F:CF:A5:9F:4D:ED:5A:6F:35:49:D4:C3:13:7C:B0:88
Certificate issuer: /CN=bb6aa2e90b970d1bcaeed125256325081153f9d0
Certificate serial: 01A0523BE70410BC2851CF009138F209D86D
Authority key identifier: BB:6A:A2:E9:0B:97:0D:1B:CA:EE:D1:25:25:63:25:08:11:53:F9:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/GyWzmF_PpZ9N7VpvNUnUwxN8sIg.roa
Signing time: Sun 30 Aug 2026 10:34:12 +0000
ROA not before: Sun 30 Aug 2026 10:34:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 91.239.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.mft
rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:52:3b:e7:04:10:bc:28:51:cf:00:91:38:f2:09:d8:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb6aa2e90b970d1bcaeed125256325081153f9d0
Validity
Not Before: Aug 30 10:34:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b25b3985fcfa59f4ded5a6f3549d4c3137cb088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6b:83:b6:99:01:fe:67:e3:9f:68:fa:b4:0a:
81:6a:00:dc:77:1f:02:c6:f3:a3:8c:7f:cd:b9:db:
bd:63:6c:86:55:62:3a:c6:ca:b0:06:89:d0:d9:30:
f2:cb:fa:c1:17:4b:80:d4:57:f7:e6:06:08:de:88:
46:f1:41:02:aa:17:50:ce:e2:67:80:31:e4:42:9f:
da:9e:eb:83:51:22:52:69:46:86:b5:7e:50:d0:58:
cd:28:e3:f3:0c:ad:f8:67:30:25:60:ab:ba:0f:af:
48:6f:e6:cd:8e:35:a7:62:3a:4e:43:6b:f3:61:6c:
c2:f2:dc:1c:d6:2a:42:38:f1:c5:39:64:d2:f7:ca:
f7:a1:6e:81:9a:59:da:e7:73:fc:b4:fc:f9:9a:3e:
32:30:e9:46:34:da:d1:ed:70:f2:0c:dd:fa:3c:3d:
b4:17:f3:b7:d2:60:02:3e:77:81:d6:0d:bc:bd:92:
8e:1f:08:c2:f8:d9:f4:6e:03:25:61:44:55:c9:b9:
b8:57:6a:15:ea:f0:2c:e4:7c:83:cb:61:a9:7c:89:
9f:16:60:9b:15:d8:4e:ed:0b:88:eb:f8:2e:06:09:
e9:e3:e8:13:59:56:e3:6b:71:62:e9:17:6f:5b:f6:
a6:98:5f:6b:56:98:d8:56:12:87:85:b4:6d:c4:d8:
51:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:25:B3:98:5F:CF:A5:9F:4D:ED:5A:6F:35:49:D4:C3:13:7C:B0:88
X509v3 Authority Key Identifier:
keyid:BB:6A:A2:E9:0B:97:0D:1B:CA:EE:D1:25:25:63:25:08:11:53:F9:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/GyWzmF_PpZ9N7VpvNUnUwxN8sIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.62.0/24
Signature Algorithm: sha256WithRSAEncryption
00:3b:8b:a4:e8:85:f2:40:cd:ad:5c:dd:e8:13:e4:90:7c:68:
41:86:3e:94:54:94:09:ea:f5:ef:b7:88:46:51:bb:d1:a7:92:
78:13:0c:d1:32:15:bd:e0:68:d3:84:98:49:d5:c1:37:0c:3f:
f7:4e:9b:e1:5e:cd:d5:76:a9:21:37:27:05:cd:95:55:60:64:
c0:2e:f5:2e:5b:e5:3d:ed:7a:49:52:b1:4c:64:2b:43:4f:1c:
8b:d8:a1:d9:46:4b:35:1a:49:62:3c:f1:6e:fc:84:c6:0a:98:
b8:88:80:aa:01:d0:9a:b3:a6:e0:29:12:2f:47:d9:76:c6:fe:
59:28:c7:c1:2e:ad:37:a8:2d:a6:70:29:89:f7:fd:04:10:44:
dd:4f:c7:b4:0b:40:d9:87:d5:20:64:6b:52:7f:c5:a7:45:96:
46:8d:13:93:38:20:25:5d:43:3d:96:dc:fa:98:a1:ae:85:97:
0c:b5:0c:17:7d:df:42:2c:ad:f5:38:7b:94:dd:ea:f9:77:aa:
64:f9:03:e7:c1:2b:41:eb:be:0e:7f:69:5e:14:82:91:5e:56:
23:bb:c5:1e:b7:a6:18:a8:73:73:fa:d9:0f:33:c8:25:72:f9:
b6:bd:22:ea:5e:46:c2:9f:2d:0b:0b:7b:61:38:48:38:c4:0d:
06:57:d3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:47:52 2026 by rpki-client