Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/s_YXgj5LokarWRSiqAhhdgl6EyM.roa
File: s_YXgj5LokarWRSiqAhhdgl6EyM.roa (raw, json)
Hash identifier: 2h13MYfmgLEIvRCwD3qUKHQhONbRrWEsixQkMgsfF58=
Subject key identifier: B3:F6:17:82:3E:4B:A2:46:AB:59:14:A2:A8:08:61:76:09:7A:13:23
Certificate issuer: /CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Certificate serial: 019F7442108426C30C03A1ED24A8CC86F71E
Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/s_YXgj5LokarWRSiqAhhdgl6EyM.roa
Signing time: Sat 18 Jul 2026 08:05:14 +0000
ROA not before: Sat 18 Jul 2026 08:05:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 194.110.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:74:42:10:84:26:c3:0c:03:a1:ed:24:a8:cc:86:f7:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Validity
Not Before: Jul 18 08:05:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3f617823e4ba246ab5914a2a8086176097a1323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:01:a1:c2:c6:8b:4f:6b:93:3a:ed:9f:c2:d0:
ef:ba:54:c4:24:42:76:c4:3b:6c:d0:ff:d7:ff:d1:
fa:0e:92:94:e1:6e:24:d8:91:98:08:74:24:f2:0a:
ae:d4:c7:a5:bd:e3:94:82:77:bc:90:8f:42:b0:3d:
13:93:cc:73:04:7c:40:00:31:9c:8b:98:1a:36:81:
ab:db:94:12:72:dc:d4:2b:80:2b:42:46:ae:83:1b:
fb:2b:26:fe:c8:56:39:0a:ad:13:21:64:a4:87:8c:
7f:46:72:45:99:91:5b:78:3e:99:d4:59:67:80:06:
3f:4b:3b:dd:00:4b:c6:a1:55:13:7d:b3:46:d4:42:
87:2f:f1:f0:36:fc:67:89:58:a9:84:68:e2:d6:05:
7d:41:9c:83:63:bc:0d:97:56:01:69:33:24:70:8b:
1f:3d:40:ad:30:24:a5:98:30:a6:a0:23:59:f8:eb:
8c:63:93:96:2a:1e:ac:e0:ab:52:f6:0f:68:0b:74:
4b:0c:78:14:10:78:20:38:d0:47:4f:39:50:95:bc:
cf:9c:56:64:70:d7:3c:b3:d5:0e:2f:18:42:39:6c:
91:54:8f:7c:80:da:f4:79:d5:6d:c2:25:50:71:87:
06:ae:4a:14:7b:94:b8:0c:9e:d2:61:bc:a4:95:f5:
c8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F6:17:82:3E:4B:A2:46:AB:59:14:A2:A8:08:61:76:09:7A:13:23
X509v3 Authority Key Identifier:
keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/s_YXgj5LokarWRSiqAhhdgl6EyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.171.0/24
Signature Algorithm: sha256WithRSAEncryption
30:f8:42:c7:2f:57:c9:6c:61:8e:bd:cb:7b:20:9b:e0:e9:80:
b5:ad:86:0f:70:6a:bd:a3:81:a7:3e:9c:61:44:87:f5:49:8c:
d9:ec:c5:fd:e8:d9:f7:2e:6d:69:85:3a:48:9e:0d:54:cf:b8:
c7:aa:e3:2a:26:57:7d:e4:3f:63:c5:51:dd:41:4b:48:aa:a1:
4a:e6:68:d0:e6:2d:c6:93:3a:7d:f4:c8:47:30:6c:cd:42:c5:
48:b8:91:d2:1c:92:df:71:1c:70:72:0e:d4:c3:c2:3e:c4:ee:
e8:1a:57:de:e6:b4:8a:db:46:6b:3e:8d:00:ca:e9:2d:73:a4:
3a:44:63:d5:a5:12:73:83:4f:95:bd:a8:41:ce:c8:15:77:55:
e0:76:cf:33:88:19:33:96:af:22:9b:1b:3b:dc:ed:fe:16:e3:
14:26:56:38:ae:bb:7f:f6:81:95:af:7b:4e:fa:ef:fa:19:8c:
0a:f9:18:b6:6c:b0:41:1e:84:32:da:9e:8f:3c:bf:04:9c:fb:
ec:25:e4:30:39:13:77:99:d1:bf:fe:ad:e9:fc:b5:61:ed:4b:
21:79:b0:f1:86:46:71:f9:c7:da:0f:c8:64:2a:d9:20:f5:92:
a3:ef:ee:47:49:2b:d6:0d:37:27:a0:f0:16:02:5b:cf:7d:cd:
32:e2:92:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:05:47 2026 by rpki-client