Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/o_YxuzgtRHUOhdQJzeKDLyyndDc.roa
File: o_YxuzgtRHUOhdQJzeKDLyyndDc.roa (raw, json)
Hash identifier: v+Q9pfYCB7un5ohVggRIv/OMq9JGxWLVpxhtn7pq8Uo=
Subject key identifier: A3:F6:31:BB:38:2D:44:75:0E:85:D4:09:CD:E2:83:2F:2C:A7:74:37
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 019D9A5E8C2F7FE3135FD4A7D3EF1B36E16A
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/o_YxuzgtRHUOhdQJzeKDLyyndDc.roa
Signing time: Fri 17 Apr 2026 07:36:20 +0000
ROA not before: Fri 17 Apr 2026 07:36:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 91.108.81.0/24 maxlen: 24
93.127.160.0/24 maxlen: 24
93.127.161.0/24 maxlen: 24
93.127.180.0/24 maxlen: 24
93.127.181.0/24 maxlen: 24
93.127.182.0/24 maxlen: 24
93.127.183.0/24 maxlen: 24
93.127.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:5e:8c:2f:7f:e3:13:5f:d4:a7:d3:ef:1b:36:e1:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Apr 17 07:36:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3f631bb382d44750e85d409cde2832f2ca77437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:70:da:16:47:40:23:45:62:6b:66:d6:30:c1:
60:f8:b2:c5:7c:cf:b7:ba:a6:97:3c:7f:77:0e:33:
41:06:10:50:ae:be:ef:3c:da:42:f3:59:bd:49:51:
3e:a5:63:93:fe:11:43:cc:20:92:05:00:02:80:f2:
1f:0d:46:d8:d6:89:c7:3a:ee:85:94:37:9d:88:42:
fa:51:f0:03:90:e5:18:44:15:fe:68:fa:05:b3:2a:
66:68:15:a8:7f:14:9d:0d:df:8d:eb:9b:96:ef:20:
f6:00:01:cd:d1:46:8e:84:85:9c:fe:83:a6:0c:cc:
ef:af:7c:21:cb:01:2b:d2:57:6e:60:c2:0b:1f:49:
0d:df:c3:d6:8b:ea:2f:17:2d:dc:72:68:3f:fe:80:
c0:b8:df:80:51:d6:66:8d:27:b0:4d:e3:d9:90:3c:
24:74:69:36:ea:22:8c:e4:49:cb:1a:26:0d:85:4a:
11:7d:35:c9:bb:d6:56:c7:df:ce:41:25:3f:44:6b:
9a:69:94:80:35:b1:39:9b:c1:f9:55:7b:cc:c8:26:
7b:4d:30:e7:d9:e8:31:00:45:45:3a:88:e6:a8:00:
2c:7b:b5:ab:df:99:79:05:08:22:4b:91:26:08:a0:
a4:d2:a5:57:9b:c6:6b:9c:90:e3:26:b1:76:ba:72:
3b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F6:31:BB:38:2D:44:75:0E:85:D4:09:CD:E2:83:2F:2C:A7:74:37
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/o_YxuzgtRHUOhdQJzeKDLyyndDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.81.0/24
93.127.160.0/23
93.127.180.0-93.127.184.255
Signature Algorithm: sha256WithRSAEncryption
5c:bd:cd:36:0e:e5:b8:1c:3f:33:41:d0:d0:4a:c8:a2:80:a9:
53:f0:b2:af:c4:d7:1e:48:41:0f:c1:66:57:2b:74:41:ef:b5:
a7:91:4e:4c:96:43:41:a1:b7:16:0c:70:77:ae:43:35:45:4f:
b0:4d:90:9a:94:13:e9:9a:b2:ac:a0:f5:82:50:0a:64:96:81:
9c:c4:a3:3b:d7:57:ad:ad:8e:95:9e:e6:64:9e:4e:a5:fa:f8:
ad:88:b8:81:9f:94:28:7e:4e:05:57:1e:db:de:75:c2:bd:57:
b6:27:47:60:8c:37:95:8a:64:ec:af:b7:13:b0:28:06:af:0e:
5e:23:f6:92:93:b7:e3:80:51:2b:ab:f4:22:20:b3:f6:58:54:
71:93:20:42:3c:27:40:c2:f8:2a:a1:d2:d2:6c:25:44:ee:e6:
03:b6:1e:63:70:4b:1f:f4:d5:e8:9e:97:b0:7a:51:11:9b:79:
86:a7:69:a8:24:db:71:83:bf:8a:21:94:9c:24:90:25:47:b7:
9e:8c:76:36:99:39:7f:60:bc:1a:08:31:67:d4:b8:99:f4:73:
f3:02:7f:0b:ad:ce:0f:c1:00:1d:8d:05:92:29:c4:34:6b:00:
b7:90:e2:1a:0c:5a:7f:12:e0:78:42:b3:96:46:d8:7b:38:da:
e8:f6:70:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:53:38 2026 by rpki-client