Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/y6SnPwKdv-fBxdjdjZaLpu6ylhM.roa
File: y6SnPwKdv-fBxdjdjZaLpu6ylhM.roa (raw, json)
Hash identifier: WUeCHJGp847Jzk2y5mpz4k777B0ORd43mwwyAxBv+Ns=
Subject key identifier: CB:A4:A7:3F:02:9D:BF:E7:C1:C5:D8:DD:8D:96:8B:A6:EE:B2:96:13
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019F8D35B4B4B989AF0AA41A4C68806C0775
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/y6SnPwKdv-fBxdjdjZaLpu6ylhM.roa
Signing time: Thu 23 Jul 2026 04:22:14 +0000
ROA not before: Thu 23 Jul 2026 04:22:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213820
IP address blocks: 193.124.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8d:35:b4:b4:b9:89:af:0a:a4:1a:4c:68:80:6c:07:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 23 04:22:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cba4a73f029dbfe7c1c5d8dd8d968ba6eeb29613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:68:8a:3a:dd:fd:56:78:81:f2:07:b8:8c:24:
8d:c7:d5:b7:c7:14:de:45:fb:d6:8f:b0:c3:1e:6c:
02:68:a3:1b:26:3f:3a:f4:61:30:c9:54:16:67:0f:
00:72:1a:3b:40:f3:52:a9:e3:93:e8:85:48:c0:79:
c1:0e:1c:e4:ec:d1:97:35:80:68:92:3e:ae:06:46:
e2:f3:8d:2c:c2:69:39:58:e9:34:10:cc:87:1e:4a:
c0:74:41:e0:47:58:b1:f5:54:c4:34:d8:d8:41:a5:
ab:a9:68:60:54:a8:e2:b3:58:3a:6c:bc:58:6f:69:
99:f2:83:73:b7:52:39:c5:87:a2:d7:37:da:b3:d5:
b5:6f:89:2d:53:a8:ab:8c:df:99:4d:9c:88:17:51:
c8:e5:d3:d3:be:3b:27:4c:b4:94:5a:21:82:61:c2:
46:25:5b:a2:26:c0:bb:c5:6c:7c:3b:1e:aa:d5:8b:
24:8b:bd:0a:d1:11:14:c1:91:85:25:8f:9c:85:9b:
4f:d3:0d:78:8b:00:0e:20:8b:c6:9e:5c:0f:96:83:
75:8b:c3:59:a7:35:28:3f:28:d1:ca:ae:84:e0:ef:
31:b3:c4:73:47:10:b8:0e:68:ae:a2:8f:49:a1:82:
7b:34:fb:4a:88:06:8f:e5:97:9a:f0:14:27:19:7e:
60:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A4:A7:3F:02:9D:BF:E7:C1:C5:D8:DD:8D:96:8B:A6:EE:B2:96:13
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/y6SnPwKdv-fBxdjdjZaLpu6ylhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.201.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:1c:e7:42:e1:91:f5:29:1c:89:8c:12:b5:33:91:33:b9:bb:
4c:22:72:0d:05:90:d8:48:27:76:19:ab:8e:79:ba:12:64:d1:
1f:cf:c6:ee:a0:66:fa:36:ff:49:45:81:25:ab:6b:b9:2a:47:
1c:59:65:34:8a:a4:da:23:c2:be:ce:32:9a:0f:34:a0:f8:d6:
89:b9:76:c8:72:82:27:1a:d4:9d:9a:4c:ea:c4:32:aa:9b:27:
f3:54:92:ef:af:74:31:5f:5d:63:cc:ca:82:b8:eb:6a:fa:cb:
54:6b:a4:d8:20:d1:1e:45:8e:c8:5f:5a:04:8d:53:d5:36:af:
7b:08:51:99:fc:d6:05:c6:0e:c3:0c:09:48:d3:79:29:63:fd:
3f:1d:8b:a5:f2:fc:43:d2:cf:c8:09:cd:db:5e:a6:66:62:b7:
ec:a7:ad:62:69:83:25:8c:87:4c:5d:f3:5e:3b:b1:df:10:93:
a4:ac:b8:84:02:b3:79:4b:14:43:35:28:ab:7f:7f:6f:1a:6a:
30:c5:b3:64:4a:30:36:20:68:4b:66:69:7c:ab:46:0b:3e:ed:
b7:98:31:3f:1b:14:cf:47:ed:51:ea:3b:63:ed:c2:d3:da:b3:
96:8e:1d:fe:8e:43:a2:b3:1e:98:3f:b6:35:0a:7a:97:de:04:
5b:ed:0e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:22:42 2026 by rpki-client