Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/yTtSJ-72gvZbFezzjuP8atI2Y74.roa
File: yTtSJ-72gvZbFezzjuP8atI2Y74.roa (raw, json)
Hash identifier: wldJRvptVpmVW5JI0I+zGNq+GzlHt2h7rIbCYaZ8Fsc=
Subject key identifier: C9:3B:52:27:EE:F6:82:F6:5B:15:EC:F3:8E:E3:FC:6A:D2:36:63:BE
Certificate issuer: /CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Certificate serial: 019E1BA80512BD26FB8F7AD7EBBFBD63A3EB
Authority key identifier: 8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/yTtSJ-72gvZbFezzjuP8atI2Y74.roa
Signing time: Tue 12 May 2026 10:07:36 +0000
ROA not before: Tue 12 May 2026 10:07:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34493
IP address blocks: 194.116.144.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:a8:05:12:bd:26:fb:8f:7a:d7:eb:bf:bd:63:a3:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Validity
Not Before: May 12 10:07:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c93b5227eef682f65b15ecf38ee3fc6ad23663be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:48:f8:9b:e0:0b:93:ec:9d:b6:10:82:50:be:
a0:89:6f:1e:ec:9f:55:a6:03:cc:91:4a:ed:6b:b9:
fe:08:47:78:68:a6:7c:32:07:96:43:11:c6:6e:37:
a4:83:07:94:c6:03:56:b2:4a:9a:7a:73:f4:e8:2b:
e0:44:d1:0a:fe:12:d6:b1:77:4a:05:e2:cb:99:80:
c5:8d:c6:5d:86:65:2e:e2:48:31:93:bf:33:28:90:
ea:25:76:7c:44:ba:5e:b5:04:c4:6b:da:12:c9:f9:
29:d9:9c:f7:18:5d:70:10:ef:af:cd:8c:a3:ee:7b:
c3:ec:70:ad:dd:d4:c8:72:27:39:5b:a5:59:a9:bf:
7d:e4:e5:59:16:58:b5:4b:8f:f3:11:ef:02:95:09:
08:8d:d0:a7:e0:31:2b:93:42:5e:4f:5b:c9:fd:93:
aa:9f:cd:61:10:31:5f:91:f9:e8:b9:69:07:17:64:
69:a9:63:35:27:22:8c:31:20:fa:db:80:50:6a:8d:
c1:b4:d9:34:fd:7f:20:24:fc:13:0e:90:0f:b9:f3:
fc:92:2c:b7:f1:ec:4a:e0:bc:e5:bb:11:4f:f0:7c:
75:a9:14:49:38:f8:3a:f2:79:3e:04:a8:33:05:1f:
a2:4f:07:36:42:b7:c1:6a:1d:29:16:6a:f3:61:34:
56:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3B:52:27:EE:F6:82:F6:5B:15:EC:F3:8E:E3:FC:6A:D2:36:63:BE
X509v3 Authority Key Identifier:
keyid:8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/yTtSJ-72gvZbFezzjuP8atI2Y74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.144.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:c1:10:fc:76:6a:e5:ca:34:b3:1f:f8:ae:73:26:bf:49:35:
f4:2e:46:4c:58:43:26:97:ea:30:3b:05:ae:a2:f9:7a:60:dc:
af:09:0e:fc:fe:c5:cd:21:43:6b:34:ed:dc:0f:f9:64:8c:5a:
b5:6e:69:2b:46:1e:db:93:be:75:1d:04:13:41:7c:9c:b4:7a:
9a:b5:3e:fa:62:c7:49:98:e7:2f:d5:cc:6e:ba:fd:0a:4e:49:
81:58:18:82:c1:cf:57:90:ff:07:19:5c:47:db:bf:d1:e8:23:
f3:48:a7:20:8e:e4:55:63:8d:ac:e7:79:4d:6a:75:43:0d:e0:
b4:a1:06:7f:b5:f2:d1:ea:3e:ca:93:d7:d4:a8:1d:dc:ec:75:
99:69:e7:9b:58:9d:35:db:6c:c7:aa:bd:cf:fc:b6:88:1e:27:
72:8d:10:74:02:a0:a2:8e:2d:4f:50:d8:d5:ef:f7:15:6f:ea:
82:33:d4:db:e8:7d:e2:7a:ec:23:b4:bb:9a:8a:26:00:dc:b9:
81:d9:34:79:e9:f7:6a:eb:9d:82:41:da:34:5d:4b:bc:57:aa:
e3:7f:b2:33:c4:a6:bb:bc:af:ea:db:74:cc:9e:7b:85:99:6c:
52:e1:4a:6f:e8:9c:f0:19:53:94:8a:2a:e5:ae:5d:88:55:2e:
2e:c9:fc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:26:12 2026 by rpki-client