Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/y3sbhhs4VAa9_leAXdVqA3jNjH8.roa
File: y3sbhhs4VAa9_leAXdVqA3jNjH8.roa (raw, json)
Hash identifier: Y15UbgY+4x80GYEq/q2RiWXokuPdkLl/xPzz6tjdo0U=
Subject key identifier: CB:7B:1B:86:1B:38:54:06:BD:FE:57:80:5D:D5:6A:03:78:CD:8C:7F
Certificate issuer: /CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21
Certificate serial: 019D4D3B9E0399567439B0A712BAF516C1EC
Authority key identifier: 91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/y3sbhhs4VAa9_leAXdVqA3jNjH8.roa
Signing time: Thu 02 Apr 2026 08:07:25 +0000
ROA not before: Thu 02 Apr 2026 08:07:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201821
IP address blocks: 185.63.73.0/24 maxlen: 24
185.63.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4d:3b:9e:03:99:56:74:39:b0:a7:12:ba:f5:16:c1:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21
Validity
Not Before: Apr 2 08:07:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb7b1b861b385406bdfe57805dd56a0378cd8c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7e:a2:ec:55:07:63:81:29:41:c4:e1:6f:14:
f2:a3:18:d3:9a:f8:1d:a9:eb:1a:b7:9f:8c:d4:39:
d6:c7:8a:34:3f:81:ae:bb:a8:d3:f5:e6:50:17:cf:
ca:5c:99:f4:40:47:cf:b5:5e:3c:a0:0c:b4:d9:d6:
4d:de:57:f7:91:0f:34:47:07:d4:7d:5e:8b:76:d9:
06:29:db:9b:04:c5:fc:67:49:b9:57:66:59:a1:47:
93:be:88:2c:a9:d6:d6:61:85:67:fa:6e:17:9c:93:
b8:12:b7:51:5c:ab:9e:87:29:ff:93:1d:bf:06:8e:
cd:b2:1e:57:11:7d:58:db:7e:ff:2a:4e:a9:07:9b:
03:1f:aa:03:3d:ed:a6:f4:0b:65:fc:9e:bf:d9:24:
11:71:e6:9a:89:83:f1:b5:b8:96:9c:f1:4c:ff:5c:
a7:64:d2:87:d9:87:dc:c5:b7:13:19:e7:0d:64:18:
72:04:21:5b:6f:9a:77:61:48:ca:45:e0:ae:bf:94:
03:e3:b9:1f:06:26:cf:46:4b:94:f3:1e:02:b7:35:
73:78:49:29:11:43:27:36:98:b3:5e:4e:99:77:83:
72:6a:59:21:e1:59:ed:68:81:91:cb:21:43:40:f7:
d8:bd:90:50:d3:5b:11:40:9a:bc:48:fd:fa:4c:c7:
8a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7B:1B:86:1B:38:54:06:BD:FE:57:80:5D:D5:6A:03:78:CD:8C:7F
X509v3 Authority Key Identifier:
keyid:91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/y3sbhhs4VAa9_leAXdVqA3jNjH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.73.0/24
185.63.75.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:13:d5:5a:d5:7d:56:0d:7e:23:71:ab:1a:e1:0c:95:77:73:
60:f4:57:42:5b:ff:5d:df:4c:8c:33:c7:6e:07:20:a7:73:c0:
fd:7b:49:a2:8f:85:ba:5c:25:9b:fb:c3:72:14:d4:8f:ca:47:
18:17:00:72:a5:ad:78:2f:4f:04:23:e8:0d:da:65:c8:46:b6:
09:d8:2b:67:43:59:2a:2e:30:d6:7c:b5:1e:51:cc:98:ea:fd:
7c:cb:d3:c3:0f:2a:db:a3:80:5d:9a:19:a3:3b:74:ce:d9:cc:
bb:0c:ce:57:c9:a5:34:97:48:7f:60:ca:29:64:f5:7a:c4:cd:
13:84:d0:2c:18:22:e8:f0:d6:8b:a6:04:18:4e:a5:8a:07:b3:
83:d2:34:e3:5c:d9:2e:53:27:7a:5d:23:01:d2:bd:1e:cf:9b:
d1:76:a2:c4:b8:b0:8b:3f:df:04:25:b6:c8:d1:1b:c8:3a:75:
d4:f0:b7:7f:25:a0:a3:6e:28:80:21:c6:13:1a:d1:b5:ec:e3:
e0:6d:b4:d0:78:49:21:43:ce:27:d6:ac:e8:a4:29:63:33:fd:
8c:ef:df:3b:e2:77:2c:47:a6:42:b3:f3:57:b9:4d:0b:5c:a5:
c7:5f:ed:a1:a5:24:5c:d4:44:ae:86:1d:4e:c4:99:87:86:7e:
f9:19:a4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:45:04 2026 by rpki-client