Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/yPbTPygA04jm5b6RI-fjv8j8p54.roa
File: yPbTPygA04jm5b6RI-fjv8j8p54.roa (raw, json)
Hash identifier: Mw7So9/gLa1JzNMQ+Fuh1uffOAeMJx7QSDexSxpXoso=
Subject key identifier: C8:F6:D3:3F:28:00:D3:88:E6:E5:BE:91:23:E7:E3:BF:C8:FC:A7:9E
Certificate issuer: /CN=f503b683d74086443bd44e6d92b71776c5c35170
Certificate serial: 019F2368FA34CFCF61C36DBA30A325DAEABB
Authority key identifier: F5:03:B6:83:D7:40:86:44:3B:D4:4E:6D:92:B7:17:76:C5:C3:51:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QO2g9dAhkQ71E5tkrcXdsXDUXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/yPbTPygA04jm5b6RI-fjv8j8p54.roa
Signing time: Thu 02 Jul 2026 15:18:30 +0000
ROA not before: Thu 02 Jul 2026 15:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201922
IP address blocks: 185.179.35.0/24 maxlen: 24
2a02:6c20:3::/48 maxlen: 48
2a02:6c20:807::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/9QO2g9dAhkQ71E5tkrcXdsXDUXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/9QO2g9dAhkQ71E5tkrcXdsXDUXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QO2g9dAhkQ71E5tkrcXdsXDUXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:fa:34:cf:cf:61:c3:6d:ba:30:a3:25:da:ea:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f503b683d74086443bd44e6d92b71776c5c35170
Validity
Not Before: Jul 2 15:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8f6d33f2800d388e6e5be9123e7e3bfc8fca79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:eb:2e:a1:4f:d0:9f:27:4b:86:75:d1:c0:fe:
20:89:f4:f3:9e:db:1e:c8:ce:d1:7c:ad:da:98:fc:
ef:11:09:c3:6c:7d:65:a7:8d:8a:1b:5f:0b:81:18:
c2:61:b2:c5:ef:ab:5e:7c:e4:b2:58:30:60:04:2f:
c4:fb:7a:3e:44:6a:2e:ae:a4:42:92:72:3c:07:10:
6e:b4:ab:87:ad:80:8e:8a:50:31:a8:89:85:b7:47:
6d:6c:23:ee:d2:e2:43:f4:86:66:07:28:11:9b:91:
c9:1b:d8:65:47:6c:4b:8d:d2:f5:a1:2d:05:f4:5e:
35:03:02:c6:8a:23:f9:6b:8b:c8:d0:d1:de:75:8f:
41:09:53:74:4e:58:8c:b9:77:3e:a8:8e:dc:6e:c3:
2a:ee:8e:d0:ea:14:91:50:ba:4e:1c:42:82:8f:9c:
3d:6c:55:91:12:45:b5:ac:f9:cb:e3:bc:57:49:0e:
57:9c:49:53:ee:be:b3:ef:bf:d5:01:d5:5c:6a:b6:
2f:49:cb:b8:e8:5b:22:be:d1:82:7b:88:5f:64:96:
76:a3:af:7a:4f:2b:e4:fb:9e:83:7b:26:86:62:27:
cc:e1:fa:b9:90:5f:7f:1b:fc:3c:14:2d:6f:76:be:
8a:7d:6a:7d:97:a7:2d:40:c1:96:65:a5:e5:40:0b:
e1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F6:D3:3F:28:00:D3:88:E6:E5:BE:91:23:E7:E3:BF:C8:FC:A7:9E
X509v3 Authority Key Identifier:
keyid:F5:03:B6:83:D7:40:86:44:3B:D4:4E:6D:92:B7:17:76:C5:C3:51:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QO2g9dAhkQ71E5tkrcXdsXDUXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/yPbTPygA04jm5b6RI-fjv8j8p54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/9QO2g9dAhkQ71E5tkrcXdsXDUXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.35.0/24
IPv6:
2a02:6c20:3::/48
2a02:6c20:807::/48
Signature Algorithm: sha256WithRSAEncryption
1c:6c:f8:57:83:ea:6a:80:62:a0:49:cc:6e:7d:a0:2e:de:6f:
02:85:01:b0:5b:24:ff:c1:b5:2e:9c:1b:56:c8:92:d5:b3:07:
dc:79:9b:46:52:ee:38:54:10:50:8b:96:9e:05:70:4b:48:14:
7f:2b:d7:9f:28:69:66:83:48:04:de:db:ec:08:86:c0:bb:45:
3b:b5:69:e2:a8:f9:2d:4c:e2:30:96:d1:2a:e9:15:f7:02:44:
0a:3c:82:3e:4d:32:7f:83:41:d3:57:aa:20:62:b1:d6:96:c0:
40:04:01:7b:b7:89:8b:63:f0:cd:4f:e4:48:0c:ec:d0:aa:53:
92:df:b2:08:0b:f0:2a:fc:6b:8c:1c:d5:61:32:ec:24:3d:f5:
13:92:ae:23:f6:ff:d8:38:ff:8f:7a:67:02:a1:0d:bc:3d:c7:
49:53:fa:a5:91:df:3b:75:2f:78:d2:53:ee:09:41:a1:c8:e2:
c4:54:1a:f0:d7:92:98:b9:8e:68:a6:10:d3:2b:3b:ba:7e:90:
22:fe:cf:8d:3d:04:08:f9:7d:63:0a:3e:eb:9f:b8:74:35:ce:
c8:15:d5:ed:26:97:27:04:32:6d:1e:b1:85:06:c8:db:1e:65:
7a:7a:82:f6:cd:44:80:bb:6e:13:95:91:f8:09:33:ac:08:41:
72:e1:6f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:20:36 2026 by rpki-client