Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/Yt82kfMh4tTFldct4S8Y42V4ySQ.roa
File: Yt82kfMh4tTFldct4S8Y42V4ySQ.roa (raw, json)
Hash identifier: jjNY9yqyt1O9yRK9Zvv5unUVKQa7w6A3b2RNVpEK9H8=
Subject key identifier: 62:DF:36:91:F3:21:E2:D4:C5:95:D7:2D:E1:2F:18:E3:65:78:C9:24
Certificate issuer: /CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Certificate serial: 019F8E20FC896CE6DBBB34CB93BB45D887E2
Authority key identifier: D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/Yt82kfMh4tTFldct4S8Y42V4ySQ.roa
Signing time: Thu 23 Jul 2026 08:39:14 +0000
ROA not before: Thu 23 Jul 2026 08:39:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206264
IP address blocks: 194.126.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:20:fc:89:6c:e6:db:bb:34:cb:93:bb:45:d8:87:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Validity
Not Before: Jul 23 08:39:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62df3691f321e2d4c595d72de12f18e36578c924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3f:30:8a:6d:a2:a4:d4:af:06:5e:9c:fd:64:
7c:10:8e:73:59:3d:fd:61:b2:0b:7c:93:7f:c1:3b:
07:b3:ea:85:1b:c0:53:17:3e:d4:68:d1:51:2d:91:
33:94:8e:0e:b8:62:ad:e0:cf:f2:7f:4a:ee:b7:19:
a1:36:9b:7e:0a:f3:85:2e:96:81:1e:a1:aa:58:95:
9b:81:73:5f:af:cb:fe:4d:21:c9:90:ae:75:1a:b7:
25:fe:50:bc:ea:b5:eb:70:9f:07:7c:48:02:85:ba:
ef:2c:d1:a1:f9:16:27:48:11:eb:c5:8c:d2:e3:e5:
ef:e3:99:f2:f0:b4:1a:75:46:11:d1:e7:37:79:ac:
00:ed:75:5f:fe:2e:cc:90:8f:8e:18:4e:6d:b5:94:
52:ba:34:a2:e6:9c:77:20:95:d4:65:ed:4c:f2:62:
4f:21:36:49:ab:c6:19:48:be:b6:19:4f:ff:9a:c0:
54:9d:c6:d1:29:9f:84:ba:a9:e7:ed:1e:18:e1:b3:
f0:89:4c:4e:e9:80:cb:d8:4f:66:25:5a:37:75:1d:
29:17:ed:c7:a7:ba:b9:24:dd:83:fe:7c:c8:04:3d:
b6:79:fd:d8:da:b6:75:0c:12:20:a6:4c:3a:1f:a8:
a6:5e:fa:63:8d:24:be:29:00:a6:f6:ad:5c:d8:fa:
c3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DF:36:91:F3:21:E2:D4:C5:95:D7:2D:E1:2F:18:E3:65:78:C9:24
X509v3 Authority Key Identifier:
keyid:D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/Yt82kfMh4tTFldct4S8Y42V4ySQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.227.0/24
Signature Algorithm: sha256WithRSAEncryption
21:62:d8:eb:55:43:82:d4:9c:4d:51:0b:8e:d9:e3:5b:c3:0f:
30:89:23:7d:a4:82:4f:8a:cd:de:c2:ff:31:ec:be:36:f3:48:
7d:0a:34:b9:94:9f:16:dc:cc:1f:83:8a:df:ab:6a:e9:6d:15:
27:f9:b3:93:ae:67:a1:7e:33:c1:6a:44:cb:1e:dd:ad:a1:23:
66:ac:74:df:dd:ce:4d:15:a6:f7:19:10:fe:09:49:30:3f:c3:
81:85:b0:24:d2:bf:88:20:14:d6:6e:cd:4d:87:68:7b:7c:ae:
6e:a7:90:91:4d:37:53:0d:03:7e:26:ff:10:b5:cc:f5:35:68:
e0:93:f4:9a:18:9a:b9:4c:b9:9f:9a:13:35:f9:93:f7:68:bd:
7d:91:cd:79:2e:04:ed:be:5b:7c:a3:eb:00:e6:f7:45:f2:28:
52:81:de:a7:cc:d5:e9:e9:59:72:f2:53:21:ac:d1:7c:91:df:
5d:a8:e5:04:24:d8:00:99:52:bc:96:3f:e7:2e:82:db:1a:7b:
69:d2:da:46:74:d4:67:ff:f8:1c:83:da:68:98:49:7e:73:04:
2d:fd:48:f6:fc:df:74:35:f1:bf:60:6a:14:f9:93:2d:14:cb:
31:df:7d:63:81:06:bf:10:88:73:1e:0c:10:a3:92:6c:46:a9:
9a:82:a3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:20:13 2026 by rpki-client