Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yJondbvXp-PYovrGH7FvasisWm0.roa
File: yJondbvXp-PYovrGH7FvasisWm0.roa (raw, json)
Hash identifier: ijjfoL3y2hJyscyBvs3NCPFr07qF2rjQwozu7W2Ywr8=
Subject key identifier: C8:9A:27:75:BB:D7:A7:E3:D8:A2:FA:C6:1F:B1:6F:6A:C8:AC:5A:6D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A0CE5CEAEA7B0898C5D6D756B7370D9C03
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yJondbvXp-PYovrGH7FvasisWm0.roa
Signing time: Wed 23 Sep 2026 13:03:10 +0000
ROA not before: Wed 23 Sep 2026 13:03:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213459
IP address blocks: 193.124.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5c:ea:ea:7b:08:98:c5:d6:d7:56:b7:37:0d:9c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 23 13:03:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c89a2775bbd7a7e3d8a2fac61fb16f6ac8ac5a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:97:40:b0:a7:86:19:e9:12:b7:f8:cc:14:14:
6d:82:58:a1:64:3d:89:a6:c4:36:c1:0e:07:e3:fc:
5b:6a:52:73:86:ed:26:66:4e:0b:94:0d:5b:b8:8f:
92:61:c2:7b:f2:d0:2b:34:84:1b:f8:13:f2:b7:0e:
b8:03:cf:c4:d7:d5:fe:77:dd:92:c1:71:14:dd:d1:
82:83:cb:57:df:75:b2:d6:18:76:ab:f6:0a:2d:9b:
8a:62:13:5d:61:6a:9f:5a:5a:44:b9:55:87:5e:cf:
dc:06:11:7f:8e:09:be:1e:32:f7:b6:85:7b:35:95:
bc:b3:4c:10:5f:40:7d:ed:d7:40:61:cf:26:23:d9:
c7:38:5c:fc:0c:53:41:30:09:72:09:c6:e4:08:59:
a4:12:eb:f3:e9:3d:7a:c3:a6:0c:2e:dc:56:36:58:
02:15:76:d6:dc:86:53:66:0c:ee:d4:bc:2c:5b:03:
27:f2:f6:ea:0e:24:ce:9d:c0:c6:a2:93:ab:a8:1a:
fa:3f:a3:82:34:8d:4c:0f:c3:88:00:e5:34:2b:1e:
53:72:09:e1:e3:a6:4e:d1:8f:2a:69:d8:16:d7:8b:
59:b2:bb:ea:98:d3:c5:34:f4:86:db:87:32:94:e9:
71:18:9f:5e:ed:8b:49:d1:20:95:d3:f2:2b:d0:62:
8e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9A:27:75:BB:D7:A7:E3:D8:A2:FA:C6:1F:B1:6F:6A:C8:AC:5A:6D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yJondbvXp-PYovrGH7FvasisWm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.205.0/24
Signature Algorithm: sha256WithRSAEncryption
87:8f:35:65:bd:a1:5a:15:78:1b:8e:19:6c:9e:80:cc:f5:8b:
98:f3:8e:ff:45:cf:8e:da:ef:90:ef:66:7c:fb:73:63:e9:6a:
0e:2c:99:cd:c3:12:19:94:52:f8:fd:1e:27:50:28:c6:5c:50:
ef:9d:a3:4e:a6:38:58:d5:62:2a:af:a0:a6:67:f3:9e:78:2c:
e3:bf:5f:b8:6d:40:b4:ee:4b:7c:6c:92:fd:ca:c9:06:54:20:
4c:54:ab:81:36:d3:ff:ba:e0:4c:4e:96:f3:4c:8b:c0:ae:d2:
28:8e:86:f0:12:32:b8:96:66:f4:2c:74:70:da:3d:f9:bd:ed:
2f:47:09:da:7b:70:74:6b:ca:88:96:6e:94:68:24:5b:ff:a0:
de:d3:09:65:2d:50:9a:58:43:76:e1:68:78:b0:ea:13:e5:ce:
ce:69:d5:7f:1a:24:ab:9e:9b:4f:a0:58:d5:8e:1e:6f:5d:98:
1f:af:1f:72:87:00:8a:fd:36:31:b3:13:48:d1:ac:79:4b:72:
47:cf:4e:43:14:f3:71:2e:f9:d5:33:80:09:52:bd:78:f6:f2:
5f:f2:e3:82:20:03:e8:ae:ab:e3:bd:94:4e:4d:c4:2d:98:31:
8f:24:8c:e2:a4:17:46:97:ff:7d:97:2f:d8:92:f7:4c:a6:aa:
20:8f:0e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:55:18 2026 by rpki-client