Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/Yhh2c5k5LhDOhYle3vNv0DyJTfw.roa
File: Yhh2c5k5LhDOhYle3vNv0DyJTfw.roa (raw, json)
Hash identifier: 5rg3Zm+cCVynOrEVlUJGi6HocKZPKPBOqGy0u2RMqq8=
Subject key identifier: 62:18:76:73:99:39:2E:10:CE:85:89:5E:DE:F3:6F:D0:3C:89:4D:FC
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019F6A8A67FC62583237FADC89242B322BC9
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/Yhh2c5k5LhDOhYle3vNv0DyJTfw.roa
Signing time: Thu 16 Jul 2026 10:48:03 +0000
ROA not before: Thu 16 Jul 2026 10:48:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 393406
IP address blocks: 213.189.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6a:8a:67:fc:62:58:32:37:fa:dc:89:24:2b:32:2b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jul 16 10:48:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6218767399392e10ce85895edef36fd03c894dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:72:94:4c:54:e2:39:bf:0b:bc:16:81:05:93:
f8:ea:ca:87:bf:c9:c7:f6:49:df:bf:a8:12:6a:a8:
81:e2:56:12:66:6e:0c:32:f9:9d:4c:0f:6f:69:2a:
ad:b6:86:b6:2f:da:29:78:00:ae:80:68:43:d0:a6:
8e:aa:2e:3b:14:48:2e:cc:db:a0:af:5b:aa:de:51:
96:0d:9b:af:60:c6:15:a8:07:39:32:3c:72:3c:d4:
3c:61:cc:04:7e:1d:3a:2a:0b:f6:6f:b6:70:9e:ac:
77:08:92:c4:ea:30:60:b8:75:87:fc:fe:d2:df:ae:
4d:b1:3a:af:9d:72:ef:1b:58:a9:f7:7d:29:fa:de:
96:ea:80:0c:75:a7:13:90:8c:25:d7:85:4d:25:70:
cb:e9:1f:9e:be:9b:43:5b:be:d8:c0:2f:34:b8:ef:
ee:cd:0c:b9:29:f2:9d:82:5a:3d:9f:4e:24:01:81:
e9:0c:84:a4:f8:f8:46:80:97:0c:3a:fe:3a:95:a6:
5f:c4:5c:9a:b1:ae:d1:53:d4:a1:f9:c9:8e:24:86:
1c:5b:4e:a9:5a:4d:82:4d:e2:b4:c9:7d:1b:bc:92:
69:ac:b7:d4:69:fe:06:60:db:02:b1:b6:9f:ea:4e:
ae:38:83:96:4c:56:14:18:a1:15:3b:66:88:ec:16:
bc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:18:76:73:99:39:2E:10:CE:85:89:5E:DE:F3:6F:D0:3C:89:4D:FC
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/Yhh2c5k5LhDOhYle3vNv0DyJTfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.189.23.0/24
Signature Algorithm: sha256WithRSAEncryption
01:6a:55:ee:15:52:7a:76:cf:71:6c:3e:a5:ce:43:54:64:82:
f9:a3:cb:15:69:7a:5c:9f:ed:a2:6b:05:c1:ec:16:6c:82:e5:
cc:32:28:49:98:66:72:5b:7a:ca:9e:92:f1:42:7e:20:3f:0f:
52:3d:44:ed:6e:fb:f4:b9:a2:9b:8f:c5:3f:26:12:d8:78:a9:
3f:25:f0:b8:0a:ef:61:0a:ed:00:70:f0:8e:c4:67:1d:a1:e7:
8c:75:86:bc:23:ec:47:95:ee:f5:5f:02:9d:ed:42:2f:14:57:
93:36:a7:57:de:d3:f3:7b:b6:04:b3:a1:38:4c:58:d6:2c:79:
82:00:9e:83:0f:5c:a5:01:4a:3e:bb:01:d8:c0:45:9e:4c:22:
34:6c:dc:9f:82:02:d6:46:4f:cc:b8:f3:4d:63:15:ab:d9:16:
a6:52:42:62:a9:7b:d0:c1:aa:c9:a4:be:8b:ae:49:5b:86:2d:
9d:7c:bb:2f:5f:18:29:60:3d:8d:b6:8e:66:b8:a8:78:77:84:
ca:16:8c:50:48:f6:d1:ca:4a:30:19:29:99:35:cd:03:6a:22:
88:1c:04:e5:c0:7d:31:eb:50:c4:84:bf:b3:4b:5e:ae:b9:6b:
b6:43:b7:10:50:c5:7f:1f:d5:cc:28:95:51:3f:81:64:66:0d:
2f:e7:30:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:58:01 2026 by rpki-client