Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6b8285-6e63-4e78-a2c3-ce010d3760c6/1/mWiLFoGnDPvb-h1Am6BoBfYOrtY.roa
File: mWiLFoGnDPvb-h1Am6BoBfYOrtY.roa (raw, json)
Hash identifier: gsFiabfZp+2eXTcUzuoDAmULgD/Bkcgs60WHSBjHpLg=
Subject key identifier: 99:68:8B:16:81:A7:0C:FB:DB:FA:1D:40:9B:A0:68:05:F6:0E:AE:D6
Certificate issuer: /CN=61862fb06f1c293045760ce98f5d2002e35deb38
Certificate serial: 019E9D04119968C625F18E089395AB1C05F1
Authority key identifier: 61:86:2F:B0:6F:1C:29:30:45:76:0C:E9:8F:5D:20:02:E3:5D:EB:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYYvsG8cKTBFdgzpj10gAuNd6zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6b8285-6e63-4e78-a2c3-ce010d3760c6/1/mWiLFoGnDPvb-h1Am6BoBfYOrtY.roa
Signing time: Sat 06 Jun 2026 12:59:09 +0000
ROA not before: Sat 06 Jun 2026 12:59:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198584
IP address blocks: 91.206.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6b8285-6e63-4e78-a2c3-ce010d3760c6/1/YYYvsG8cKTBFdgzpj10gAuNd6zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6b8285-6e63-4e78-a2c3-ce010d3760c6/1/YYYvsG8cKTBFdgzpj10gAuNd6zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYYvsG8cKTBFdgzpj10gAuNd6zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9d:04:11:99:68:c6:25:f1:8e:08:93:95:ab:1c:05:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61862fb06f1c293045760ce98f5d2002e35deb38
Validity
Not Before: Jun 6 12:59:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99688b1681a70cfbdbfa1d409ba06805f60eaed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ad:1d:37:39:a9:a6:13:7a:22:76:91:1c:44:
3d:9b:4b:8b:be:9f:00:3f:6a:b7:30:c0:4c:9c:91:
54:a3:5d:4e:90:04:1a:8f:f2:74:ca:84:01:19:bc:
02:fc:90:a5:d4:3e:89:b4:1d:0c:35:ef:8f:c7:12:
2b:c1:9f:9a:b2:95:70:db:34:72:da:d4:82:c6:8f:
51:08:9e:c4:9b:01:14:5a:1e:2c:12:eb:ad:90:e1:
15:f8:7a:d5:af:9e:12:51:9a:36:97:42:9b:fc:7e:
f1:b5:e0:8c:6a:a8:5c:9b:9b:28:db:65:87:07:55:
9b:f6:b5:02:d0:62:5e:b4:d1:2b:a7:28:59:05:31:
ef:19:22:b2:aa:a4:99:6a:07:27:f1:ff:64:f0:59:
c6:cb:01:5e:78:00:b3:0f:5b:0f:0f:69:d6:55:5e:
2d:cc:ed:bc:07:ba:91:05:31:ec:b5:7c:15:54:12:
f0:b3:3f:fe:52:e6:ac:3c:da:1e:83:48:96:82:bc:
a6:43:25:5e:58:30:95:80:ca:bf:4f:ef:03:5a:a5:
5d:c8:1e:eb:58:6c:da:38:b4:cf:dc:70:94:a0:3f:
61:b3:10:76:bd:3b:db:19:f2:2f:75:a9:52:25:02:
dd:70:a0:1f:34:08:c4:f5:69:45:ac:3c:a4:b0:1a:
c0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:68:8B:16:81:A7:0C:FB:DB:FA:1D:40:9B:A0:68:05:F6:0E:AE:D6
X509v3 Authority Key Identifier:
keyid:61:86:2F:B0:6F:1C:29:30:45:76:0C:E9:8F:5D:20:02:E3:5D:EB:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYYvsG8cKTBFdgzpj10gAuNd6zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6b8285-6e63-4e78-a2c3-ce010d3760c6/1/mWiLFoGnDPvb-h1Am6BoBfYOrtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6b8285-6e63-4e78-a2c3-ce010d3760c6/1/YYYvsG8cKTBFdgzpj10gAuNd6zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.28.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:d5:b9:75:12:10:5c:db:f3:af:9b:23:1c:44:d4:d6:0c:08:
b1:04:49:d4:91:1a:b2:94:37:e1:c0:de:29:a9:1c:6d:9b:bc:
e5:8a:57:70:14:85:9d:24:85:15:8a:28:58:76:82:4a:8a:23:
f3:72:6a:7c:23:50:72:04:c0:0c:25:ca:49:11:17:29:c9:56:
74:89:7f:f4:01:60:a0:58:64:94:04:b7:75:2b:42:1f:35:ce:
53:59:65:be:52:a0:5f:c5:a2:d5:84:1f:bf:aa:72:28:f5:c4:
34:de:f2:e0:3d:3e:c5:70:0f:f6:8b:d4:5d:96:3e:a7:43:df:
70:cf:6d:07:59:0a:d3:77:d3:15:46:dc:bc:ef:b8:a0:fd:1e:
24:fc:0a:c8:3d:03:b1:4d:b6:85:fd:3f:1f:a8:e3:62:41:b6:
e2:46:86:ea:2e:de:e3:6b:d4:35:8a:8d:28:37:dd:96:73:1f:
25:f6:f1:16:08:cb:c6:b4:16:50:89:01:42:62:d4:7e:ec:4a:
06:8e:e7:4f:bd:71:18:6a:92:aa:9d:70:ba:2a:e2:60:79:6e:
e9:2d:86:7f:66:54:a7:58:b4:90:52:6a:37:f0:b3:d9:d0:5c:
bc:96:90:06:da:c3:71:f1:5d:c0:47:21:e9:fc:43:4d:02:77:
9a:54:18:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:23:15 2026 by rpki-client