Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/yP4RNTLUKk_P7r0qobg3b_Bq0bc.roa
File: yP4RNTLUKk_P7r0qobg3b_Bq0bc.roa (raw, json)
Hash identifier: 7RS0tj1L1t6QadBqzoijZL2F1NYP+eQ5vizwcCjgqj4=
Subject key identifier: C8:FE:11:35:32:D4:2A:4F:CF:EE:BD:2A:A1:B8:37:6F:F0:6A:D1:B7
Certificate issuer: /CN=b29bc7a6493d38178dd7f5e9c490c8ef3a8a598b
Certificate serial: 019B7BA4C734CCDE5C70475793975A5768B8
Authority key identifier: B2:9B:C7:A6:49:3D:38:17:8D:D7:F5:E9:C4:90:C8:EF:3A:8A:59:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/yP4RNTLUKk_P7r0qobg3b_Bq0bc.roa
Signing time: Thu 01 Jan 2026 22:19:14 +0000
ROA not before: Thu 01 Jan 2026 22:19:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198241
IP address blocks: 91.223.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a4:c7:34:cc:de:5c:70:47:57:93:97:5a:57:68:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b29bc7a6493d38178dd7f5e9c490c8ef3a8a598b
Validity
Not Before: Jan 1 22:19:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8fe113532d42a4fcfeebd2aa1b8376ff06ad1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8d:59:cc:42:0a:f9:ce:b1:1c:08:2b:41:0f:
ee:40:dd:2e:e0:a7:d0:f8:3d:9e:e0:18:d0:c2:82:
34:4d:8a:f2:cb:71:51:5f:da:44:d1:68:d1:fb:ef:
93:11:42:e6:91:5f:7d:99:b6:53:f1:b0:7d:3c:4b:
19:b6:7e:93:b6:a9:9b:cc:d5:02:cf:0e:b0:9d:fd:
cd:87:a5:fd:c9:f1:6d:dd:c1:68:73:e7:f9:7d:12:
d6:f6:bc:55:e5:b5:f8:69:24:1c:f3:53:d6:18:be:
5c:d3:a9:59:e2:2d:1d:ca:b2:41:66:21:9a:5c:af:
a6:1f:5b:6a:a5:bc:0e:41:76:48:9c:bf:53:96:a1:
e0:6a:43:bf:b9:67:88:96:bb:0c:b3:db:05:10:ef:
2f:0d:3b:0b:32:ae:cd:48:89:34:fd:d8:19:1c:2c:
94:6c:0c:1c:1c:bd:82:cd:fa:26:94:62:e1:43:2e:
3d:10:6c:d6:40:a2:fb:7a:f0:aa:af:b6:69:40:36:
2d:0c:33:e8:21:88:46:45:a0:b5:73:36:fd:f8:a6:
a7:37:a5:98:8c:4b:9a:a3:78:f0:88:28:0d:e7:46:
34:38:64:57:3e:4d:59:2a:38:25:a2:5d:6a:b7:59:
cc:bd:aa:f4:ba:64:41:f3:2f:04:cb:00:5d:1f:98:
35:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FE:11:35:32:D4:2A:4F:CF:EE:BD:2A:A1:B8:37:6F:F0:6A:D1:B7
X509v3 Authority Key Identifier:
keyid:B2:9B:C7:A6:49:3D:38:17:8D:D7:F5:E9:C4:90:C8:EF:3A:8A:59:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spvHpkk9OBeN1_XpxJDI7zqKWYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/yP4RNTLUKk_P7r0qobg3b_Bq0bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8af8af-59a4-420c-9e3e-d482da9804d7/1/spvHpkk9OBeN1_XpxJDI7zqKWYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.135.0/24
Signature Algorithm: sha256WithRSAEncryption
57:27:ea:b7:ac:84:0b:28:14:3b:dd:ec:15:1e:f3:6e:1b:66:
c8:6a:f5:c6:40:ba:c1:be:2d:c2:71:a5:06:87:77:cd:9c:37:
2a:5d:42:26:88:2c:43:03:d2:4a:9f:c7:ee:fc:ee:2d:06:e8:
4f:1c:0f:af:7b:38:55:d1:5a:33:18:aa:9a:b3:1b:66:b3:9e:
18:c1:79:64:45:12:0c:60:45:bd:8c:03:c2:65:f7:90:88:27:
1e:f7:67:0c:f5:cf:65:c0:e4:c3:3f:e4:1c:da:5a:f0:4f:76:
6c:1a:79:82:4d:e6:e5:79:2f:10:84:ad:75:ad:fd:89:56:1f:
9a:e7:b4:0d:8c:65:d7:54:fe:6c:f5:54:88:7a:38:d1:96:38:
97:33:50:f5:01:64:1d:44:10:79:89:64:37:ca:5b:c9:bd:d6:
4c:78:c9:86:63:15:48:c3:ea:51:7f:85:e6:7a:9e:c2:06:b1:
48:ce:05:c2:6f:c2:93:a2:fb:f2:97:a4:18:56:1b:5e:d5:e6:
04:68:4f:d2:04:b0:aa:44:b5:25:98:d5:51:5d:b0:f2:d6:4e:
9f:43:29:6f:90:b4:8f:84:6a:c6:13:2a:af:16:26:a2:d9:cf:
8a:f8:75:7c:1b:d4:6b:5a:74:51:7c:6d:5c:7a:50:78:92:78:
12:89:72:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:53:11 2026 by rpki-client