Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/yv_Alr-gSweZyPywfs_zOjp2glg.roa
File: yv_Alr-gSweZyPywfs_zOjp2glg.roa (raw, json)
Hash identifier: d2CzjgiUcgtgLHVtg40yRJ6rCAMBpfeSW1ttkkjwMrg=
Subject key identifier: CA:FF:C0:96:BF:A0:4B:07:99:C8:FC:B0:7E:CF:F3:3A:3A:76:82:58
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A0C960DC566B6D7C3685464B0A1E5D3722
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/yv_Alr-gSweZyPywfs_zOjp2glg.roa
Signing time: Tue 22 Sep 2026 13:49:23 +0000
ROA not before: Tue 22 Sep 2026 13:49:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 5.100.231.0/24 maxlen: 24
89.30.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:60:dc:56:6b:6d:7c:36:85:46:4b:0a:1e:5d:37:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Sep 22 13:49:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=caffc096bfa04b0799c8fcb07ecff33a3a768258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b3:c9:13:ba:31:ae:d5:70:57:05:43:72:1a:
6f:aa:9b:e9:9d:60:33:54:25:c2:d9:e8:53:9e:a8:
10:75:fa:8c:2a:69:1f:e2:f9:b9:3b:8e:7b:89:56:
fb:4d:56:6a:07:fd:ad:c3:5d:f1:4a:d6:fd:b7:f4:
2b:1b:d1:cd:44:87:3e:1b:20:df:50:b3:c5:88:65:
75:57:41:81:ea:fc:5a:bd:f7:8f:20:a1:07:c2:d6:
21:c3:32:1e:a9:79:06:8c:93:64:67:f5:b3:85:d3:
76:4b:e5:de:e0:8b:92:95:94:94:e3:e9:93:61:76:
97:78:f7:36:bc:b2:c6:a4:1c:76:f4:eb:e0:90:13:
5b:c4:62:e6:b9:fc:1c:eb:61:f1:2e:16:10:d8:13:
1c:de:5e:76:80:a8:64:4f:45:e9:f6:06:54:39:7f:
82:fd:ae:a5:1c:3b:a4:bd:3c:be:1d:23:54:0b:8d:
5c:b8:86:a6:5c:9e:73:42:74:a9:56:b8:57:4a:ab:
2a:3e:43:2c:ef:c6:14:e9:54:70:59:18:c2:46:16:
91:4d:72:72:a0:74:07:52:13:52:83:3a:5f:51:98:
a8:01:33:f7:b8:4a:1f:58:6a:c9:75:d0:07:a3:46:
40:48:e3:27:dd:d3:ae:fe:45:67:00:fc:3d:a8:6c:
41:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FF:C0:96:BF:A0:4B:07:99:C8:FC:B0:7E:CF:F3:3A:3A:76:82:58
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/yv_Alr-gSweZyPywfs_zOjp2glg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.231.0/24
89.30.244.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:b0:71:ab:b8:d8:b9:24:b9:d2:96:f5:1c:fc:fb:21:2c:42:
1c:b8:2f:59:f8:51:de:11:d0:f0:1d:f6:bf:bc:ad:99:e2:4b:
de:50:6f:f3:45:74:5e:e4:ed:0a:fe:bb:4c:85:14:6e:32:46:
d8:b6:6e:29:b1:37:a9:ed:83:06:5a:0d:96:e5:e3:5c:f1:88:
21:5b:05:5f:97:44:ed:6f:d5:02:22:74:e2:6c:c1:1a:5d:ae:
cd:02:63:b0:b4:cd:59:bd:7a:bc:d1:63:1c:37:a9:26:70:f7:
a4:0e:62:a1:f4:38:c1:a4:e0:76:dd:9e:32:0a:2f:97:28:31:
16:e4:51:e7:5d:86:c6:ea:26:57:91:f0:11:af:e0:62:0d:be:
b4:0b:c6:87:83:8d:d7:f7:85:fe:73:d0:41:72:20:30:40:66:
e5:ed:18:c8:c1:1e:1c:34:ea:22:d1:0e:2a:2b:ff:1c:d3:5d:
cb:b8:af:81:38:b7:dc:c7:b0:5f:3d:15:f4:d4:d0:2e:ce:f3:
73:ab:ba:cb:5f:09:84:27:91:a9:00:f7:66:9c:1e:43:2c:14:
9f:f0:02:2a:b4:83:4c:6b:1a:49:55:31:1b:50:5f:e8:3e:d8:
25:81:b5:b4:51:4d:44:72:3c:34:85:77:eb:bb:59:d0:bb:29:
d5:44:27:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:14:01 2026 by rpki-client