Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/Yz0tW7_OCO7g3t7Tl4hf-jwP-84.roa
File: Yz0tW7_OCO7g3t7Tl4hf-jwP-84.roa (raw, json)
Hash identifier: BjEOeKCf9w15Azewi7EmVzU1JhpabQlQfkyNDs8UbSQ=
Subject key identifier: 63:3D:2D:5B:BF:CE:08:EE:E0:DE:DE:D3:97:88:5F:FA:3C:0F:FB:CE
Certificate issuer: /CN=bd19d4535c7e62b921e859e6557b821f278e716a
Certificate serial: 019D14F32012C2E06EAD60DFBDE7E635E709
Authority key identifier: BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/Yz0tW7_OCO7g3t7Tl4hf-jwP-84.roa
Signing time: Sun 22 Mar 2026 09:49:30 +0000
ROA not before: Sun 22 Mar 2026 09:49:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 45.134.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:14:f3:20:12:c2:e0:6e:ad:60:df:bd:e7:e6:35:e7:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd19d4535c7e62b921e859e6557b821f278e716a
Validity
Not Before: Mar 22 09:49:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=633d2d5bbfce08eee0deded397885ffa3c0ffbce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fe:f5:74:b6:d6:5d:6f:51:bc:66:8e:e5:7f:
5e:9a:68:06:9e:df:53:f7:be:0d:4c:e3:7b:8a:ef:
78:e6:e0:0a:e4:81:6b:37:57:a7:97:8e:ba:0f:54:
cf:2c:cb:34:5e:93:e1:e6:5c:e6:31:35:e3:37:42:
ce:95:36:2f:b2:58:fc:52:03:ef:a6:5f:37:25:1a:
a3:ce:69:dd:9e:e4:b9:a9:07:6a:f8:bf:90:57:c2:
97:23:de:07:7f:45:fd:1d:9e:d7:75:74:c4:18:45:
c3:2d:e4:13:52:d4:55:fe:55:c3:56:5e:a9:e0:00:
9a:d6:fa:95:36:55:bf:82:4b:0a:27:e4:dc:c5:04:
fb:51:69:d1:83:85:82:52:df:50:09:7b:af:4f:a5:
03:23:89:55:bb:99:3d:15:3f:52:10:4b:0f:c1:e5:
1c:fb:c8:f6:20:e0:3c:2f:ec:30:91:7e:63:ca:a7:
48:f4:c0:7b:bf:29:cf:88:55:c7:f6:5a:5f:77:43:
ca:e6:f0:1f:38:b6:73:ec:bd:93:a8:29:ee:0d:b2:
df:01:ff:be:36:0d:5b:d1:2a:ac:d6:26:f6:3c:7e:
71:e6:31:6d:6f:c5:30:af:e1:73:85:be:c2:d3:41:
da:30:45:bf:b0:28:60:44:c5:eb:a7:3b:b0:32:72:
6f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3D:2D:5B:BF:CE:08:EE:E0:DE:DE:D3:97:88:5F:FA:3C:0F:FB:CE
X509v3 Authority Key Identifier:
keyid:BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/Yz0tW7_OCO7g3t7Tl4hf-jwP-84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.8.0/24
Signature Algorithm: sha256WithRSAEncryption
74:7d:a0:db:2a:7b:22:aa:5a:89:8a:e5:48:73:4d:4d:5a:83:
40:bc:82:17:68:d8:f8:e1:4f:32:0e:18:7e:03:4f:fa:bd:cd:
10:65:b6:1b:a3:60:d3:3e:3c:ac:9b:45:77:75:4a:dd:74:20:
b1:91:ce:af:31:80:8e:64:35:f4:83:c5:93:5b:a0:93:a8:b6:
1f:ee:a0:82:a4:0e:a7:62:d7:95:a3:b4:41:68:fb:1c:57:8f:
d4:75:97:15:aa:af:b0:20:37:a4:5e:2f:b4:6e:4f:d2:73:c0:
76:96:5c:fa:ac:21:a6:26:13:e8:c4:26:ca:bf:33:3c:57:f1:
65:0d:47:58:cc:67:69:4a:d7:2b:02:a7:f5:fd:f3:c3:3f:59:
6f:dc:7d:b4:06:25:64:98:a7:4d:58:f2:8e:e2:15:95:71:ab:
1a:93:14:42:3b:9f:b1:a3:59:2b:dd:f5:74:e9:29:11:d0:5f:
27:22:22:72:15:20:1d:d2:61:37:47:27:ad:4a:47:73:b6:06:
5c:92:a7:9a:5f:26:d1:c7:a0:8f:8d:8f:c6:18:59:e2:d1:fc:
a4:fb:66:46:58:ed:7c:7c:26:34:71:c8:f4:23:9b:b4:de:0c:
f5:66:77:d1:15:22:e1:77:47:25:9f:af:71:69:72:d8:e9:de:
0f:b1:2b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:41:52 2026 by rpki-client