Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/ef96a0-3057-4279-b23c-7b50ddeaec7f/1/YfghBe7VMTFqE-kLeVs1Wdg80Qg.roa
File: YfghBe7VMTFqE-kLeVs1Wdg80Qg.roa (raw, json)
Hash identifier: 5DBPLxm9csP2rBiY+V/zbPysPEH1rb2P5PzVpV2usmU=
Subject key identifier: 61:F8:21:05:EE:D5:31:31:6A:13:E9:0B:79:5B:35:59:D8:3C:D1:08
Certificate issuer: /CN=d4206716db9233feea9f8eb972de8912bc5b83f5
Certificate serial: 01A08A17BF8647BDF1B73F3513FB16B92781
Authority key identifier: D4:20:67:16:DB:92:33:FE:EA:9F:8E:B9:72:DE:89:12:BC:5B:83:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CBnFtuSM_7qn465ct6JErxbg_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/ef96a0-3057-4279-b23c-7b50ddeaec7f/1/YfghBe7VMTFqE-kLeVs1Wdg80Qg.roa
Signing time: Thu 10 Sep 2026 06:53:27 +0000
ROA not before: Thu 10 Sep 2026 06:53:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44883
IP address blocks: 80.85.112.0/20 maxlen: 20
185.208.68.0/22 maxlen: 22
2a01:b880::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/ef96a0-3057-4279-b23c-7b50ddeaec7f/1/1CBnFtuSM_7qn465ct6JErxbg_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/ef96a0-3057-4279-b23c-7b50ddeaec7f/1/1CBnFtuSM_7qn465ct6JErxbg_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CBnFtuSM_7qn465ct6JErxbg_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 03:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:17:bf:86:47:bd:f1:b7:3f:35:13:fb:16:b9:27:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4206716db9233feea9f8eb972de8912bc5b83f5
Validity
Not Before: Sep 10 06:53:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61f82105eed531316a13e90b795b3559d83cd108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2a:a1:39:1f:3f:37:28:19:60:85:22:8b:2c:
29:11:d4:2d:57:e1:16:5f:f7:ba:7c:f3:12:bc:b2:
55:75:0c:cb:cf:35:e7:55:9e:70:db:6c:28:05:bc:
c6:b5:df:36:f0:4a:1c:39:ff:d4:6b:0f:10:50:30:
65:a4:08:f1:e2:16:2a:97:8b:08:48:70:65:ae:13:
a9:47:26:e5:ff:76:2a:7f:ca:ab:d8:23:10:2b:b8:
9a:b4:95:e3:7b:2d:eb:f6:3a:7d:85:98:24:bf:a2:
a1:b8:a4:af:88:20:ee:4e:c9:4f:3d:c7:61:da:db:
ab:0c:58:2f:a8:15:37:8b:15:fc:8c:f0:6c:c0:be:
6e:f0:45:f2:1f:cd:ac:5e:d7:a1:c9:cf:19:d5:43:
95:bd:0d:e4:dc:f5:cc:27:7e:ca:4b:e6:8e:c2:be:
7d:c5:0a:ce:c1:09:85:5e:2b:e3:4a:4c:1a:17:36:
d9:01:ce:f0:27:64:b4:0e:0d:e7:15:67:9f:0b:82:
8c:5c:e3:16:44:54:2e:52:25:a5:2d:92:c0:4e:ab:
ce:e5:77:6b:cb:3b:ca:44:28:55:f6:1a:8d:4b:a8:
ef:0b:20:68:0a:0d:3d:67:09:84:ee:82:33:4a:03:
ea:a3:f8:d8:58:2d:b0:d7:6a:90:bb:23:08:1a:78:
60:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F8:21:05:EE:D5:31:31:6A:13:E9:0B:79:5B:35:59:D8:3C:D1:08
X509v3 Authority Key Identifier:
keyid:D4:20:67:16:DB:92:33:FE:EA:9F:8E:B9:72:DE:89:12:BC:5B:83:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CBnFtuSM_7qn465ct6JErxbg_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/ef96a0-3057-4279-b23c-7b50ddeaec7f/1/YfghBe7VMTFqE-kLeVs1Wdg80Qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/ef96a0-3057-4279-b23c-7b50ddeaec7f/1/1CBnFtuSM_7qn465ct6JErxbg_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.85.112.0/20
185.208.68.0/22
IPv6:
2a01:b880::/32
Signature Algorithm: sha256WithRSAEncryption
91:0b:3c:9b:54:84:0e:f7:1d:7a:d1:2a:84:5b:ff:52:55:a9:
0d:63:1a:b4:8d:7c:f4:5c:6f:eb:48:51:e1:8d:5e:d5:3e:00:
0d:35:e3:10:85:a8:9c:8c:05:69:34:5d:9e:c5:10:b2:6e:9e:
07:34:44:e9:2b:7e:77:e7:4e:89:e8:6f:b7:a7:e9:d5:05:22:
af:e4:2a:77:2a:12:f3:2e:18:fb:72:82:96:d6:d1:35:31:f6:
2a:44:90:4d:cb:61:f6:a2:02:1f:bc:fc:ee:9b:a9:22:d4:37:
ee:3e:f3:7d:11:f6:f3:1c:16:25:72:4b:53:c4:f0:ab:b4:9b:
23:dd:41:01:bf:ad:8b:16:dd:6b:0e:eb:c4:a1:00:d7:67:22:
7b:7b:97:66:50:90:96:84:68:c5:a8:aa:56:79:e3:77:cf:36:
8f:d5:f6:61:80:0a:ec:0f:6f:53:f9:1e:17:49:f0:e3:4e:6f:
df:37:9a:eb:69:73:1a:16:00:ea:44:cb:84:30:e9:7b:49:c7:
b2:1f:95:ad:8b:a6:8a:6a:46:7f:1e:58:d8:c0:94:46:aa:4b:
3b:35:52:5a:41:d6:c3:ca:f6:dc:57:1c:0a:57:46:5b:54:8b:
15:c2:74:bf:df:7a:0f:52:8b:d9:60:cd:4d:6c:99:aa:2d:1f:
38:62:f6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:26:34 2026 by rpki-client