Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/VtjyHb4s274etwzVUjylBtzFrRA.roa
File: VtjyHb4s274etwzVUjylBtzFrRA.roa (raw, json)
Hash identifier: oA1AsUwnVCSE3157ftEsjOoWA2vVqf1jyknmggbbv8s=
Subject key identifier: 56:D8:F2:1D:BE:2C:DB:BE:1E:B7:0C:D5:52:3C:A5:06:DC:C5:AD:10
Certificate issuer: /CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Certificate serial: 01A06174CF48A872EA87032095EBE820FC25
Authority key identifier: C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/VtjyHb4s274etwzVUjylBtzFrRA.roa
Signing time: Wed 02 Sep 2026 09:30:40 +0000
ROA not before: Wed 02 Sep 2026 09:30:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 393406
IP address blocks: 91.213.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:74:cf:48:a8:72:ea:87:03:20:95:eb:e8:20:fc:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Validity
Not Before: Sep 2 09:30:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56d8f21dbe2cdbbe1eb70cd5523ca506dcc5ad10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c0:b4:cb:2d:bd:06:9b:aa:f9:2d:18:32:ec:
13:41:2f:b8:c2:cb:35:ff:ca:9c:ac:e1:e3:9a:cb:
8b:ab:9d:f1:e5:47:a9:6d:22:d6:08:39:0b:d5:d9:
9c:53:ec:b7:2e:c0:44:ea:b8:49:cd:2d:a8:b1:e6:
77:e3:b1:c5:21:a2:d3:42:ac:cc:2d:67:46:6e:42:
e1:d7:59:02:dd:e3:ce:b2:36:51:75:04:e2:e7:ab:
86:c5:83:5e:c2:93:1b:9b:4f:02:f3:28:f9:49:7f:
a3:ac:5b:cc:29:40:19:32:e0:ee:b2:fa:a3:ae:e2:
89:fb:05:d9:c3:95:17:51:ea:1d:f8:29:2d:fa:4d:
17:08:a8:02:17:eb:37:a1:d7:20:12:4b:e3:65:5a:
1f:93:ef:4e:9a:77:6e:e0:f1:92:e9:68:9a:fe:b6:
12:1d:b0:53:fc:51:8b:9f:6c:b5:97:bf:1d:35:a7:
80:ad:72:2a:48:89:67:95:76:6f:7d:d8:c6:fa:eb:
21:c5:af:1c:5d:3c:3b:63:86:aa:5a:e6:31:f1:9c:
ce:4b:6b:01:e5:0e:d1:97:96:ca:0a:82:17:ea:45:
ad:e8:17:bb:df:0c:3f:fd:24:e0:d8:5b:1a:2e:53:
9e:29:b7:4e:a6:c6:0f:5a:71:9d:8a:60:ff:f0:d5:
f7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D8:F2:1D:BE:2C:DB:BE:1E:B7:0C:D5:52:3C:A5:06:DC:C5:AD:10
X509v3 Authority Key Identifier:
keyid:C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/VtjyHb4s274etwzVUjylBtzFrRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.126.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:12:bf:09:c5:eb:a0:7f:26:a0:a5:0f:77:c9:5a:bc:4a:86:
f3:be:54:ab:d0:e4:b0:72:b7:93:46:41:e4:7e:dc:af:fd:d7:
af:dc:6b:9c:91:73:44:23:aa:fb:21:bc:7e:02:27:3c:91:67:
6c:45:e0:35:2d:41:9a:2c:12:de:89:00:6a:a3:43:b3:6c:45:
e5:03:32:a9:18:fc:5a:7d:1d:11:60:3f:73:2f:24:55:6d:f1:
6d:4b:03:31:1e:05:89:98:cd:a6:74:8f:2b:06:b8:66:d0:45:
45:8b:db:e1:23:6b:f7:79:41:d1:7c:ac:fe:2a:48:78:72:1f:
57:79:50:3b:0b:a9:48:90:36:8e:54:55:70:26:4e:03:27:78:
e0:51:40:8b:06:f6:a0:a4:31:d5:d3:3c:86:bb:80:41:30:07:
f1:3c:ba:8b:ad:b3:33:f1:de:5d:84:70:bb:4f:15:7a:f2:d0:
8d:25:9a:95:2d:5a:40:e5:d5:c6:33:11:9d:35:56:94:c9:26:
fe:20:2b:c3:01:02:5a:a3:50:4d:10:53:1d:30:7d:cc:79:1f:
37:50:37:74:65:10:2e:88:a2:11:1b:b3:74:93:4b:4c:91:96:
4e:32:0a:be:7b:5d:72:2e:d2:9c:a9:2e:a5:bb:3f:97:20:73:
9d:45:46:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:15:57 2026 by rpki-client