Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/ysnZuAzsS0-HIAlzoijYxDjpjGM.roa
File: ysnZuAzsS0-HIAlzoijYxDjpjGM.roa (raw, json)
Hash identifier: KJi0IxqPbXmBRsHSikOn83iNnVBJ6syBP35Ejj1BE7o=
Subject key identifier: CA:C9:D9:B8:0C:EC:4B:4F:87:20:09:73:A2:28:D8:C4:38:E9:8C:63
Certificate issuer: /CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
Certificate serial: 019F5D5F2230764DBA64AA52E19A7BE4E6DB
Authority key identifier: 49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/ysnZuAzsS0-HIAlzoijYxDjpjGM.roa
Signing time: Mon 13 Jul 2026 21:25:43 +0000
ROA not before: Mon 13 Jul 2026 21:25:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50541
IP address blocks: 5.178.121.0/24 maxlen: 24
5.178.122.0/24 maxlen: 24
5.178.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5d:5f:22:30:76:4d:ba:64:aa:52:e1:9a:7b:e4:e6:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49a81ba7589a8e1bf0e1a09cf4aa0f4e90901d57
Validity
Not Before: Jul 13 21:25:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cac9d9b80cec4b4f87200973a228d8c438e98c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2d:0c:df:6d:9a:77:65:49:89:95:80:78:dc:
07:db:4c:78:75:c2:cc:0e:b5:9a:fa:0d:83:3e:07:
3c:48:06:fc:9d:22:41:62:6d:76:a8:a2:56:60:da:
4b:81:11:12:48:22:42:cf:a5:3e:98:9f:51:cb:35:
99:a4:ff:0d:11:cc:3c:43:f2:2e:6f:65:55:a6:50:
45:4f:50:2e:b8:da:9a:f4:ce:a4:d2:94:57:ca:f2:
b9:42:62:22:03:b4:db:52:3f:6f:d9:95:8b:72:09:
f8:22:14:0d:1c:31:6d:37:3a:8e:14:b8:75:ea:d3:
45:04:7b:f6:c7:6f:0a:fa:92:3e:81:ea:65:4f:f0:
34:d2:35:82:b2:c5:45:62:72:bb:0b:12:d4:4a:16:
72:34:e9:44:1d:ed:e3:70:4f:ac:56:41:bc:31:ee:
4b:bb:8f:89:52:f8:6f:52:78:4a:17:39:41:27:ae:
43:1d:d9:95:f4:be:c5:0d:eb:d2:60:3f:71:e4:ea:
c5:d5:a9:30:a6:c8:2f:4c:8f:5c:7c:24:2c:72:0a:
48:05:9e:12:88:5c:32:ab:ae:8f:d6:ad:4d:86:92:
8c:ca:61:7d:5d:a1:69:c2:5c:be:5b:80:7d:de:8c:
8e:cb:25:25:e1:b2:90:19:a4:a4:ff:2d:28:67:d2:
7a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C9:D9:B8:0C:EC:4B:4F:87:20:09:73:A2:28:D8:C4:38:E9:8C:63
X509v3 Authority Key Identifier:
keyid:49:A8:1B:A7:58:9A:8E:1B:F0:E1:A0:9C:F4:AA:0F:4E:90:90:1D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sagbp1iajhvw4aCc9KoPTpCQHVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/ysnZuAzsS0-HIAlzoijYxDjpjGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/99e08d-b4f5-4353-9602-6031d5de3f39/1/Sagbp1iajhvw4aCc9KoPTpCQHVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.121.0-5.178.123.255
Signature Algorithm: sha256WithRSAEncryption
55:14:d9:37:f2:46:b1:4c:09:37:81:14:f6:06:18:d9:64:22:
db:e6:0b:a5:1d:26:35:18:65:53:75:a9:fd:9e:67:a2:74:7d:
88:f4:a5:03:fe:61:d2:bc:bd:e5:45:6b:d3:24:08:f7:c2:90:
6a:d3:a9:85:40:f5:93:3d:2b:cf:fb:c2:2b:b2:7c:43:fe:36:
bc:3f:ee:43:3a:35:5b:60:2d:2b:e9:21:fe:1f:6f:e7:93:51:
88:39:80:4e:e9:2d:1b:87:bf:cc:0d:31:8e:bb:98:bc:28:ba:
c0:c5:ce:3e:8c:dd:76:75:bb:2f:30:3f:29:7b:82:45:29:75:
87:dc:69:4d:c9:43:60:c6:80:74:88:42:ca:69:17:52:57:4f:
36:1e:23:7b:e8:05:f4:ac:f4:11:33:bb:67:08:f8:4d:8f:54:
1c:eb:b4:c1:42:6f:4d:9d:8d:24:16:09:4b:20:79:94:28:76:
78:93:33:76:81:82:05:ab:73:59:51:1a:9a:0f:c6:b4:b8:b4:
d7:1c:b0:b9:8e:ce:f1:67:d6:5c:ca:23:5f:be:07:f8:31:87:
f6:38:66:47:a6:ad:55:e0:12:11:74:ab:e7:e0:85:d3:3d:0a:
9c:00:c5:80:c8:04:b9:8b:6b:24:1b:58:5a:84:33:e4:d8:2a:
31:d8:90:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:06:08 2026 by rpki-client