Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/Ti99byxMxEultByMj_ZtpNccqro.roa
File: Ti99byxMxEultByMj_ZtpNccqro.roa (raw, json)
Hash identifier: FyYPPJ+YgErTDDfONgmR0NO8SDJKFzr8LmNtsMbfpr8=
Subject key identifier: 4E:2F:7D:6F:2C:4C:C4:4B:A5:B4:1C:8C:8F:F6:6D:A4:D7:1C:AA:BA
Certificate issuer: /CN=25c52687a5ff161d2edabc9f8e3a4876c4ad8da2
Certificate serial: 019B7F83C569BCBD9FB66B629D62CE74ACD2
Authority key identifier: 25:C5:26:87:A5:FF:16:1D:2E:DA:BC:9F:8E:3A:48:76:C4:AD:8D:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/Ti99byxMxEultByMj_ZtpNccqro.roa
Signing time: Fri 02 Jan 2026 16:21:40 +0000
ROA not before: Fri 02 Jan 2026 16:21:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60809
IP address blocks: 91.205.20.0/22 maxlen: 22
91.206.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:83:c5:69:bc:bd:9f:b6:6b:62:9d:62:ce:74:ac:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c52687a5ff161d2edabc9f8e3a4876c4ad8da2
Validity
Not Before: Jan 2 16:21:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e2f7d6f2c4cc44ba5b41c8c8ff66da4d71caaba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e7:10:f2:bf:ab:88:2b:06:37:2f:01:ba:4c:
5e:0c:b0:b4:f4:8d:45:5d:b5:58:fc:6d:01:5f:36:
a1:ba:c3:ce:b0:a8:90:9f:44:8d:d3:14:3f:7a:88:
82:21:c4:4e:96:7d:c4:94:12:d1:58:4c:15:a7:b7:
1a:1c:c9:3f:09:da:1f:93:b3:1e:e4:ce:08:d6:36:
8d:00:90:d3:78:0d:6e:7f:9e:4c:35:8c:16:ea:f4:
99:4c:37:60:6b:d3:a2:51:4e:4a:d9:78:72:4f:33:
0a:6c:f7:5a:c9:9b:e2:9d:ab:aa:ef:d0:88:36:b1:
3f:b7:3f:0c:00:22:c9:1e:c0:95:d7:31:a8:20:06:
03:e7:78:72:23:22:83:96:9c:0a:9e:11:2a:b0:1a:
e8:2a:75:13:7b:8c:79:e7:3f:b1:84:15:40:9a:ec:
a8:6f:a9:b8:ec:03:07:f4:3e:79:3c:de:76:7e:48:
0e:63:55:be:17:6e:7d:da:28:b0:9e:82:96:93:6d:
f2:dd:31:29:24:48:f1:64:f5:85:09:63:66:b5:55:
4d:29:83:95:70:4e:3f:be:e1:f9:98:8b:b1:21:f4:
15:20:32:5d:d6:31:57:cf:a1:d0:4c:42:c7:d0:d2:
33:64:b4:15:68:81:a1:fc:1d:a1:af:13:02:e0:a7:
ad:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2F:7D:6F:2C:4C:C4:4B:A5:B4:1C:8C:8F:F6:6D:A4:D7:1C:AA:BA
X509v3 Authority Key Identifier:
keyid:25:C5:26:87:A5:FF:16:1D:2E:DA:BC:9F:8E:3A:48:76:C4:AD:8D:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/Ti99byxMxEultByMj_ZtpNccqro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.20.0/22
91.206.181.0/24
Signature Algorithm: sha256WithRSAEncryption
38:dc:8e:eb:22:df:56:9d:8d:fd:ec:a7:62:7d:36:d5:db:32:
30:ac:fb:1a:76:2d:97:42:33:bd:2c:55:95:f1:f9:24:5c:d6:
80:a0:f3:56:51:33:20:82:50:0d:b4:22:02:62:66:db:87:e3:
33:26:ec:b6:2e:44:c3:8e:c0:48:d6:18:4c:a1:d6:73:d4:9e:
d6:29:81:57:a9:57:ac:54:f0:8a:55:47:d7:f0:0c:79:0f:4c:
d5:5e:46:80:6e:dd:5e:0e:fa:08:18:75:d2:0e:27:47:cf:84:
58:fb:43:6a:a9:71:de:66:36:ea:2b:04:95:33:90:68:80:1c:
37:3d:6b:01:92:1a:c8:6a:94:b2:0d:70:22:0a:02:00:52:89:
ee:61:c3:d6:09:61:f7:4c:b4:ae:61:ab:8b:2f:cf:ce:85:85:
55:b2:14:85:9c:23:a9:27:ba:b0:45:ff:65:45:d3:21:86:dd:
50:19:4d:c9:2c:f2:b4:14:c8:ed:98:82:68:47:6c:78:11:6d:
6d:0e:47:28:87:2a:d5:f6:0b:a3:05:ef:45:55:5b:3f:2e:bf:
08:2e:86:d7:59:a1:0b:52:cc:bc:ef:09:d6:9d:b0:f0:17:a1:
33:1a:f9:e2:0f:d3:8a:82:ab:47:2c:9c:d4:37:56:29:96:73:
db:fb:07:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:36:33 2026 by rpki-client