Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/tWypDnBAIWwZKWJj3d2zrshtc2o.roa
File: tWypDnBAIWwZKWJj3d2zrshtc2o.roa (raw, json)
Hash identifier: VfkZmkJUOwrgNq3Ww1lzNtYXvW7fLaLXy/GNgbgT52k=
Subject key identifier: B5:6C:A9:0E:70:40:21:6C:19:29:62:63:DD:DD:B3:AE:C8:6D:73:6A
Certificate issuer: /CN=816aa91ab1274e475397b907a655f91e9d605e0e
Certificate serial: 019C46092F78B7734E3D8096E340F7584447
Authority key identifier: 81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/tWypDnBAIWwZKWJj3d2zrshtc2o.roa
Signing time: Tue 10 Feb 2026 05:32:12 +0000
ROA not before: Tue 10 Feb 2026 05:32:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42337
IP address blocks: 91.198.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:46:09:2f:78:b7:73:4e:3d:80:96:e3:40:f7:58:44:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816aa91ab1274e475397b907a655f91e9d605e0e
Validity
Not Before: Feb 10 05:32:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b56ca90e7040216c19296263ddddb3aec86d736a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b7:df:97:a7:41:97:d2:3b:69:92:1f:68:5d:
81:81:d5:cb:a4:64:87:13:63:50:8e:44:02:76:4e:
fd:32:6f:d8:19:2e:d1:8b:4d:e1:5f:ee:df:47:6e:
cb:c7:6e:ea:b1:e6:fc:5c:9a:3d:48:c4:d1:c0:48:
82:e4:05:95:fc:c7:ba:dd:66:ad:47:cb:a7:4b:f8:
9f:75:63:c9:c9:84:36:f7:48:bc:a3:85:aa:db:0d:
d7:df:bc:78:d9:a9:cd:98:65:b9:18:27:9c:c7:d5:
b2:6b:fc:5d:29:d4:4f:09:90:bb:5b:c2:e5:27:2d:
09:22:42:72:b4:58:eb:a7:33:6e:14:e1:65:45:12:
ff:3c:73:a4:29:4d:15:83:e7:20:38:11:ce:a4:8a:
9b:2e:41:53:ae:4f:3e:04:f1:35:ce:b2:d8:6d:3e:
6a:0a:f3:02:71:3c:a9:07:bc:3e:e4:8d:47:93:e9:
6b:30:1a:98:0e:91:5a:55:61:a6:93:56:0c:6f:46:
5a:d6:3d:28:86:a1:58:11:0a:aa:81:b3:cf:13:79:
e8:6e:79:41:ae:7d:1f:cd:92:7e:ee:b9:8e:8c:c8:
20:31:e6:00:bf:0d:d1:a6:3a:6b:ea:dc:be:70:4e:
9c:95:35:c5:29:5a:6a:19:70:e1:99:09:0f:d8:0d:
77:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6C:A9:0E:70:40:21:6C:19:29:62:63:DD:DD:B3:AE:C8:6D:73:6A
X509v3 Authority Key Identifier:
keyid:81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/tWypDnBAIWwZKWJj3d2zrshtc2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.110.0/24
Signature Algorithm: sha256WithRSAEncryption
24:4b:c9:67:bd:82:bb:9f:40:d1:e0:0e:47:fb:c9:9c:f5:0e:
de:71:9d:8f:ab:2b:40:38:93:9d:16:90:94:ca:bf:d3:17:50:
0c:ec:4f:f8:ac:79:fd:50:2a:70:62:8c:b1:4d:4a:a7:da:44:
75:6d:cb:a6:a1:89:3b:c2:b0:a7:3d:0e:b8:1e:f1:62:27:4e:
51:55:59:9f:bc:32:a4:d1:8d:fb:52:2a:b2:05:8b:a7:70:ae:
54:a8:5b:b8:a7:90:ce:ba:6a:2d:d5:1d:f5:d8:83:4f:03:81:
7b:dd:0e:df:b1:e5:bc:31:16:4f:c8:f1:59:ae:8c:45:1c:a8:
22:58:31:78:bd:7d:f7:4c:b4:db:c5:53:1a:71:14:c4:f4:df:
91:d6:c3:18:b9:d5:d7:41:74:18:58:25:0c:86:74:31:0a:ee:
b4:44:c6:a2:f4:59:3e:ce:90:d2:36:35:64:e2:70:1c:74:60:
1e:c8:a6:d8:cb:cb:ae:03:64:b4:2b:19:ad:15:3a:26:92:19:
49:38:20:85:46:13:64:65:44:da:7e:0e:8f:92:58:c4:2c:05:
b1:32:c3:9a:56:20:23:dd:8d:9d:3a:f7:03:ee:45:77:17:80:
63:bb:c7:fc:95:f6:b1:32:90:79:dd:d3:1a:44:08:8c:76:1a:
1f:52:54:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:54:03 2026 by rpki-client