Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/fYbpVRDWAjZurXbI75VmAntEEJ4.roa
File: fYbpVRDWAjZurXbI75VmAntEEJ4.roa (raw, json)
Hash identifier: 97OtigCrP0e9lMm10aXBrc8Zkbd0C52W6qxynDHBaLY=
Subject key identifier: 7D:86:E9:55:10:D6:02:36:6E:AD:76:C8:EF:95:66:02:7B:44:10:9E
Certificate issuer: /CN=27f83e56b6af760083eb54bb5b6e19ddb41dd88a
Certificate serial: 019B7834C6F5239F2080E2B858D00B402C21
Authority key identifier: 27:F8:3E:56:B6:AF:76:00:83:EB:54:BB:5B:6E:19:DD:B4:1D:D8:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_g-VravdgCD61S7W24Z3bQd2Io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/fYbpVRDWAjZurXbI75VmAntEEJ4.roa
Signing time: Thu 01 Jan 2026 06:18:03 +0000
ROA not before: Thu 01 Jan 2026 06:18:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57577
IP address blocks: 91.233.56.0/22 maxlen: 22
91.233.56.0/24 maxlen: 24
91.233.57.0/24 maxlen: 24
91.233.58.0/24 maxlen: 24
91.233.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/J_g-VravdgCD61S7W24Z3bQd2Io.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/J_g-VravdgCD61S7W24Z3bQd2Io.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_g-VravdgCD61S7W24Z3bQd2Io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:c6:f5:23:9f:20:80:e2:b8:58:d0:0b:40:2c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27f83e56b6af760083eb54bb5b6e19ddb41dd88a
Validity
Not Before: Jan 1 06:18:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d86e95510d602366ead76c8ef9566027b44109e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ed:d7:d3:87:de:1d:68:ea:85:35:cf:ac:87:
fd:c7:ec:3f:e5:ac:92:bc:e7:80:d7:af:f9:da:14:
8b:11:c7:e8:52:e9:19:12:9e:e9:19:5c:38:60:28:
df:f7:f6:da:34:81:73:41:20:5b:97:9c:4b:0d:c6:
59:e7:24:ed:5e:5e:58:15:bc:71:44:6a:b3:07:4a:
a8:9c:f2:4b:81:07:30:32:d2:23:88:74:0c:f9:54:
c2:af:ee:aa:0f:f0:08:58:b4:e7:d8:3f:3d:65:7a:
16:5d:1a:ce:5c:ef:ac:20:96:59:d6:4b:21:e0:13:
32:4c:a6:c1:35:0b:26:b8:a5:3a:1e:54:69:66:0e:
e8:02:d2:88:42:f0:83:ee:ed:2d:78:b1:f4:21:8d:
e5:ea:20:c5:4b:cd:16:e6:63:e7:a3:7e:35:5e:b8:
6c:d8:ad:8f:3b:d1:68:9d:25:ae:b4:65:9f:4b:c6:
de:71:57:63:b8:41:36:05:fc:16:f0:31:e5:60:73:
c6:6e:24:53:5a:a4:50:9f:07:f6:65:c3:2b:88:f8:
dc:3e:99:d5:db:1a:38:43:cb:cd:2c:8a:4a:94:c5:
4b:16:9d:69:0d:5a:63:4f:b9:ac:1b:0b:e3:3e:05:
46:45:be:51:59:a0:f2:2a:c6:b8:dc:ac:73:09:71:
b0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:86:E9:55:10:D6:02:36:6E:AD:76:C8:EF:95:66:02:7B:44:10:9E
X509v3 Authority Key Identifier:
keyid:27:F8:3E:56:B6:AF:76:00:83:EB:54:BB:5B:6E:19:DD:B4:1D:D8:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_g-VravdgCD61S7W24Z3bQd2Io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/fYbpVRDWAjZurXbI75VmAntEEJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/J_g-VravdgCD61S7W24Z3bQd2Io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.56.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:03:ed:53:90:40:29:fc:a8:a0:c2:22:4d:1f:1f:62:30:e3:
21:fb:74:66:f6:50:57:44:cd:35:2f:d7:14:21:bd:a3:ab:b2:
f4:f1:d0:7b:d7:a8:20:e4:7c:39:23:49:e2:2f:c5:5f:4d:96:
18:7b:b8:94:1d:e6:b5:e1:0f:3e:b6:b6:40:85:67:dd:90:ba:
f9:50:7f:cf:e9:2d:d2:73:78:41:98:2c:b0:0a:df:03:94:ad:
21:6c:0d:e0:1d:5a:db:dd:4a:9a:d5:c5:d1:48:11:ac:1a:60:
67:57:24:f4:7b:41:ff:65:45:4c:8f:39:5c:de:f0:1f:cf:72:
3d:bf:13:1d:36:cf:db:dd:f7:a7:c0:dc:f9:46:48:85:a8:bb:
60:98:bc:c6:c8:99:43:9e:56:e5:f6:2b:8a:67:f4:59:79:7f:
71:3a:fc:7c:ad:33:27:dd:ed:f9:fc:a5:30:b3:c3:71:60:01:
3d:7a:9a:04:f0:f6:63:c8:fd:90:c9:98:cc:66:50:09:f6:de:
22:88:2f:c7:a8:a3:29:98:ff:70:3b:a3:1d:74:e0:ea:14:4b:
17:14:c0:88:55:4b:db:61:57:12:10:7f:62:80:88:3f:f5:ae:
ff:a4:45:bd:5b:f8:b3:62:b4:2c:07:ef:91:62:84:c6:08:4d:
56:5b:f8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:50:29 2026 by rpki-client