Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Y6soyMSFcLwPd1WkndrBJGgor-c.roa
File: Y6soyMSFcLwPd1WkndrBJGgor-c.roa (raw, json)
Hash identifier: n0ihyQWA/ggJ+RAL5IACXPbfwxgWyAOpiZ6+Y4Ssj9g=
Subject key identifier: 63:AB:28:C8:C4:85:70:BC:0F:77:55:A4:9D:DA:C1:24:68:28:AF:E7
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0BB24D2327A89342EAC1AB6ED3A0A89FC
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Y6soyMSFcLwPd1WkndrBJGgor-c.roa
Signing time: Sat 19 Sep 2026 19:29:07 +0000
ROA not before: Sat 19 Sep 2026 19:29:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 140681
IP address blocks: 191.217.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bb:24:d2:32:7a:89:34:2e:ac:1a:b6:ed:3a:0a:89:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 19 19:29:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63ab28c8c48570bc0f7755a49ddac1246828afe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7f:f2:90:b1:a3:1e:5c:ff:97:bb:60:93:bc:
42:1c:7f:ab:90:64:ee:cd:8d:2d:86:2f:32:44:bc:
9c:25:f7:65:f6:6c:e7:87:51:c0:66:5d:55:2d:c9:
6b:15:b9:af:9d:3f:d2:c4:62:fc:a9:04:31:7a:20:
c1:f3:20:7c:dd:53:fa:a0:63:db:c6:09:2b:4d:31:
36:08:7a:7d:83:9e:d1:c0:17:b3:d0:27:f7:1d:85:
cd:06:c7:78:0b:59:40:c6:28:90:5b:bb:d9:8c:d3:
f6:26:71:b3:20:03:de:93:09:3b:34:f8:81:a9:33:
ca:ca:7d:3c:4a:58:33:e0:b2:35:48:2d:78:cd:e0:
38:79:92:22:dc:f1:58:26:1c:94:45:02:71:8c:b8:
64:b2:f6:31:95:0b:c2:fd:3f:8b:3f:cc:a6:a0:85:
16:b1:d2:75:ca:85:7c:23:57:c5:3d:07:f2:b3:23:
08:2d:19:0f:82:d2:f3:32:ba:de:3c:71:00:2b:9f:
c6:d5:ba:d3:35:ce:41:58:55:c5:e2:df:c9:13:0a:
c4:32:ef:32:8c:84:99:f9:c1:24:4e:6f:7c:c4:e0:
ca:5e:5b:96:8e:b7:d1:c8:5d:95:e4:16:99:06:ea:
26:92:ee:18:a2:79:68:38:9c:8f:ec:cc:cf:f5:96:
31:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AB:28:C8:C4:85:70:BC:0F:77:55:A4:9D:DA:C1:24:68:28:AF:E7
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Y6soyMSFcLwPd1WkndrBJGgor-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.217.174.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:ed:fa:0c:1d:08:40:0e:b4:c9:e8:f6:22:45:96:4a:fe:65:
23:74:99:8e:ba:a2:04:14:f4:e9:bb:84:8a:c2:b3:fc:e0:c3:
70:ce:da:91:58:65:f5:25:12:28:4c:42:0e:98:ee:85:38:98:
df:ad:f3:1a:fb:d8:02:98:ad:b0:b1:b2:6e:35:6e:61:17:83:
f5:d6:4e:e4:c9:01:2c:1c:78:cf:03:60:8e:59:46:28:a6:bf:
04:1b:d2:dd:51:a7:a6:f7:0d:ca:b5:91:90:59:5d:d6:21:a3:
c3:c9:a5:56:f6:b1:99:07:68:6a:a9:8e:cc:a6:04:bd:d3:f9:
f2:48:62:34:2c:f2:72:48:46:d4:59:7e:b5:78:62:67:00:9c:
6a:09:4e:6e:3c:bc:f8:32:3a:cb:0c:48:15:97:9f:b4:a8:25:
84:e3:1d:87:82:31:c1:81:69:8d:92:25:1c:ea:7a:3d:b0:35:
cc:37:91:71:d1:90:40:95:55:95:5b:df:24:83:bc:71:43:e2:
b8:da:1a:e5:c5:45:ea:21:e7:57:1b:df:a9:5d:17:ef:f8:ff:
bc:68:d3:16:95:e6:3b:b7:4f:83:56:a0:3d:92:64:70:21:6e:
95:3c:53:cd:d6:ed:4f:0b:8b:12:b6:a3:4a:5b:c6:44:54:f2:
8f:86:22:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:45:01 2026 by rpki-client