Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/Ya8UhAbXRHW76CZXydZwDc89luQ.roa
File: Ya8UhAbXRHW76CZXydZwDc89luQ.roa (raw, json)
Hash identifier: jrko4GgQfGa4fx2XVYs7sNRMDfXWZShssHOvl4TRSgg=
Subject key identifier: 61:AF:14:84:06:D7:44:75:BB:E8:26:57:C9:D6:70:0D:CF:3D:96:E4
Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial: 01A0CD8D08BAEF8BD406A8F4D1A7D0A82391
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/Ya8UhAbXRHW76CZXydZwDc89luQ.roa
Signing time: Wed 23 Sep 2026 09:16:07 +0000
ROA not before: Wed 23 Sep 2026 09:16:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15830
IP address blocks: 141.98.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:8d:08:ba:ef:8b:d4:06:a8:f4:d1:a7:d0:a8:23:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Validity
Not Before: Sep 23 09:16:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61af148406d74475bbe82657c9d6700dcf3d96e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:97:8f:5c:27:d0:eb:b9:b1:e3:d3:d6:2e:6f:
9c:5f:b3:a1:4c:99:90:51:96:7f:2e:87:07:30:d4:
72:07:37:19:74:f4:c6:b3:5e:b2:06:27:64:7c:78:
cc:c8:cd:31:88:15:b7:bf:4d:1d:6f:71:f6:29:1f:
f0:f6:3c:3c:5a:35:72:57:55:35:87:fd:28:54:7b:
76:ca:de:1c:2e:e8:30:0a:91:ce:2c:5b:71:a1:97:
7d:22:b0:0e:5f:26:5e:af:5a:f2:cc:6a:34:ae:1d:
df:10:a6:7f:cd:89:be:50:3c:44:b2:e4:e2:42:6f:
ed:26:50:4f:66:b8:a1:12:75:96:d0:bc:80:ab:be:
f0:bc:fa:73:e1:3c:2e:d6:ee:db:3d:c8:0b:ce:d1:
72:4c:25:f7:dd:a0:04:62:d6:81:aa:8e:71:18:f5:
e7:ca:ff:97:09:da:79:4b:53:7a:2c:44:7f:f2:e8:
3a:8c:29:15:ad:0a:48:4b:4d:2f:c6:4f:fa:b2:85:
b1:5d:a4:b1:be:af:cc:ba:04:27:8a:ad:e2:e2:58:
66:e5:1c:b0:26:8c:0a:aa:06:ea:34:a9:d4:5e:58:
0d:cd:c6:ab:ad:a0:dd:fa:91:cd:16:2a:f4:8c:6b:
4b:43:4f:1e:fb:41:aa:50:39:e9:be:fd:25:8c:9a:
50:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:AF:14:84:06:D7:44:75:BB:E8:26:57:C9:D6:70:0D:CF:3D:96:E4
X509v3 Authority Key Identifier:
keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/Ya8UhAbXRHW76CZXydZwDc89luQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.148.0/24
Signature Algorithm: sha256WithRSAEncryption
54:0c:69:57:22:64:a2:c0:0b:f1:85:7d:3a:bc:53:58:b3:26:
8c:14:6f:1e:0a:2b:b0:ce:d9:d2:f2:15:10:5c:0c:a5:39:86:
ee:f1:f0:bc:f1:8b:5c:13:47:85:99:ef:b8:cd:5c:65:02:cd:
54:0e:3f:ad:b2:fd:8f:b9:c0:4a:19:a9:4f:24:d6:6b:6e:07:
c6:94:58:40:5b:9a:0a:af:9f:f9:29:76:25:23:83:a9:94:5d:
37:a9:28:b1:db:ba:5a:76:f3:16:e4:1b:7a:34:eb:9d:97:65:
6a:49:3e:85:ff:92:e2:0e:32:e8:a2:d9:7e:eb:cd:8c:8c:b3:
11:9d:07:06:a5:35:d9:a7:36:d5:53:1c:b0:aa:f4:69:9e:86:
ed:98:17:a7:d5:80:b9:75:a4:d1:2b:f5:91:90:7d:d6:ed:7c:
3e:ab:d2:a3:ad:4d:87:62:a1:09:4d:e8:22:89:88:26:66:02:
83:95:e7:58:5f:72:36:78:47:05:66:39:26:16:87:19:0e:00:
14:d4:8e:ba:ea:b9:2e:75:fb:c3:af:b0:13:d8:77:f9:f2:98:
6b:65:29:e0:7b:b7:5b:65:6b:87:4d:9e:ef:fa:5b:3b:59:6c:
85:ef:e4:f5:15:ce:c9:8d:6b:f8:f6:d6:24:ca:32:b0:96:5c:
56:4f:d0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:53:23 2026 by rpki-client