Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/yRZVehU6pPF-e8bf4h76KS5NUpg.roa
File: yRZVehU6pPF-e8bf4h76KS5NUpg.roa (raw, json)
Hash identifier: kz7zsud3YYXglVH2w964aIAQdIKUpEdRIscf5oZrTlQ=
Subject key identifier: C9:16:55:7A:15:3A:A4:F1:7E:7B:C6:DF:E2:1E:FA:29:2E:4D:52:98
Certificate issuer: /CN=13dad24b6647eb2cfa873989c6d66d174eb4b586
Certificate serial: 019ED0FB155657648E21D826F40556A21203
Authority key identifier: 13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/yRZVehU6pPF-e8bf4h76KS5NUpg.roa
Signing time: Tue 16 Jun 2026 15:09:36 +0000
ROA not before: Tue 16 Jun 2026 15:09:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49304
IP address blocks: 152.175.0.0/16 maxlen: 24
2a0b:1180::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d0:fb:15:56:57:64:8e:21:d8:26:f4:05:56:a2:12:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13dad24b6647eb2cfa873989c6d66d174eb4b586
Validity
Not Before: Jun 16 15:09:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c916557a153aa4f17e7bc6dfe21efa292e4d5298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4a:e9:7c:47:00:5e:bd:dc:bf:f5:f6:c3:ce:
94:94:58:28:8f:36:9e:4c:cd:d2:e3:0c:db:cc:af:
99:60:c6:0a:9c:40:07:52:ba:65:ea:5a:da:04:7f:
97:45:50:37:44:20:20:59:5d:0e:02:6a:aa:63:1b:
81:b3:fa:ea:46:7a:24:1b:02:06:a2:39:94:1f:bd:
85:9b:04:9f:8b:7b:70:2c:f6:82:84:bd:b6:cf:a9:
39:66:ad:d1:2a:21:5d:04:76:03:d1:e2:0e:b3:01:
5c:5d:81:9a:a3:fe:3d:fa:6c:d1:c8:7e:9b:d1:aa:
aa:fc:00:3e:e0:de:bb:10:0e:12:79:19:a3:fe:a2:
7c:20:c7:32:fd:81:e2:d3:7c:73:7a:2c:aa:06:38:
d9:13:b1:02:66:91:6c:df:fe:7b:b3:8d:20:78:62:
4c:76:1f:7d:ab:c1:1b:fc:b8:7e:19:5c:ad:b9:f5:
03:7e:7a:51:fe:1e:45:ba:19:5d:29:f0:9a:79:d7:
cb:06:f1:fb:09:76:fd:e1:62:51:76:5a:92:af:7f:
90:46:5b:bc:73:75:c4:9e:cf:ea:61:26:6f:4d:c8:
5f:95:88:0a:d6:21:9f:cf:15:5a:94:7b:0e:23:4f:
62:60:6a:f0:35:70:92:60:5e:c6:4d:36:49:bd:8a:
f0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:16:55:7A:15:3A:A4:F1:7E:7B:C6:DF:E2:1E:FA:29:2E:4D:52:98
X509v3 Authority Key Identifier:
keyid:13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/yRZVehU6pPF-e8bf4h76KS5NUpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.175.0.0/16
IPv6:
2a0b:1180::/29
Signature Algorithm: sha256WithRSAEncryption
2b:d7:8d:e8:9a:43:97:43:17:f1:dc:fa:07:a4:0d:14:63:22:
d2:d4:91:85:10:d7:17:d1:39:cc:df:6b:86:06:94:8d:c0:b1:
df:05:1b:05:65:1c:76:da:d6:a7:7e:22:78:60:31:06:ff:c4:
9e:42:31:4c:89:11:41:c7:4e:90:fb:da:1c:65:8e:d0:04:75:
8d:f9:d8:81:62:f8:44:85:02:32:62:3b:0f:9b:56:7c:67:72:
fe:97:4b:29:e7:a7:f0:ad:fa:9b:08:35:7e:92:b7:3d:82:6c:
f4:7d:77:1a:49:b0:9e:73:b2:99:cb:5a:78:19:f3:74:ca:67:
99:17:58:a9:bc:35:e2:a8:03:a1:ba:bd:9d:53:eb:bb:29:b1:
6f:13:44:3e:a0:45:67:e5:5e:fd:ff:d9:54:3d:86:2a:a3:69:
ef:dd:80:98:18:73:53:93:67:0d:e1:27:f5:f1:02:61:da:ae:
81:ee:3f:b7:87:49:16:f1:70:ba:be:c0:90:eb:83:7c:4f:e5:
4b:6e:8c:67:de:d1:f0:29:b5:22:31:4e:a6:88:10:9c:c7:27:
09:dc:23:be:5b:74:87:d2:bd:8a:00:dd:8f:3c:8c:95:2c:14:
3b:b2:c3:7c:f2:8c:aa:87:d1:19:95:ae:71:ea:a1:84:f1:10:
aa:5f:1c:2c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:45:38 2026 by rpki-client