Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/YOCBNw8IfVAorOR0vJuyhuFN7pY.roa
File: YOCBNw8IfVAorOR0vJuyhuFN7pY.roa (raw, json)
Hash identifier: 0JEKLqqPAJlAM1ZXPurlJv8CC/u3uKIshO72m5IOfDI=
Subject key identifier: 60:E0:81:37:0F:08:7D:50:28:AC:E4:74:BC:9B:B2:86:E1:4D:EE:96
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019F3BA3E39B8C55F80ED5560224C6B97D85
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/YOCBNw8IfVAorOR0vJuyhuFN7pY.roa
Signing time: Tue 07 Jul 2026 08:13:44 +0000
ROA not before: Tue 07 Jul 2026 08:13:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43160
IP address blocks: 185.246.13.0/24 maxlen: 24
185.246.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3b:a3:e3:9b:8c:55:f8:0e:d5:56:02:24:c6:b9:7d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jul 7 08:13:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=60e081370f087d5028ace474bc9bb286e14dee96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:30:00:d1:58:c4:1f:ba:54:4d:4d:d0:70:4e:
d0:3c:8d:d6:04:45:b6:d0:b2:bf:7f:b4:e7:06:a1:
60:70:42:13:68:77:8f:dc:73:fd:54:07:3c:c9:75:
c6:f7:13:ef:f4:ac:2d:41:3d:62:16:9a:6f:1d:ff:
96:8d:78:77:c7:30:e4:c1:a2:3c:f4:be:0f:d4:65:
8e:4f:25:70:7d:71:da:73:2b:3f:a0:16:40:42:ec:
31:1e:a4:e0:81:7c:d1:b5:2a:d9:ec:0e:41:98:d1:
0c:5c:71:fa:3e:b4:2f:64:d7:e3:0c:4d:94:19:c2:
a4:70:a6:30:19:f1:b8:2b:89:3f:9d:e3:31:29:a7:
27:7f:ee:71:5d:69:c9:7b:f2:30:2b:b8:2c:94:b9:
ad:68:b5:60:a1:be:4c:6f:f2:38:a9:01:f7:4b:b8:
df:91:8c:4c:6c:90:34:74:87:5f:19:97:8f:8c:ab:
14:6c:ce:9c:c3:ed:a4:a6:9e:e9:2b:bc:6a:af:d2:
f8:bd:82:24:73:e1:8b:06:24:9f:63:74:6f:53:88:
e8:a9:c2:10:43:16:c7:ac:a3:30:53:af:49:89:3b:
45:9b:56:8d:4d:bf:23:be:25:5e:09:30:5b:c9:a2:
f9:65:89:eb:41:93:16:4e:b6:64:f8:24:e6:c5:b8:
4a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E0:81:37:0F:08:7D:50:28:AC:E4:74:BC:9B:B2:86:E1:4D:EE:96
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/YOCBNw8IfVAorOR0vJuyhuFN7pY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.13.0/24
185.246.15.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:2f:a4:7b:a4:b7:31:0f:ee:65:0e:58:00:e6:d2:3e:48:59:
be:af:ff:cc:af:36:c9:ad:14:65:d4:05:2d:35:6d:41:df:91:
ba:48:fa:db:98:33:34:24:99:ee:88:74:e7:eb:da:bb:01:6f:
9e:19:3c:2e:2e:14:63:18:6f:0e:04:e5:c3:35:21:11:4a:be:
b0:73:fd:15:81:c0:a6:82:30:eb:b5:28:21:3d:53:9e:1b:c9:
a9:a1:68:00:6e:ca:e1:1e:a8:28:a0:ad:0c:28:14:43:c5:82:
ad:5e:62:b3:79:36:05:2a:ed:06:a8:3d:c2:28:be:c7:a5:33:
39:ca:00:28:68:ef:8c:70:46:1c:d1:51:97:0b:f3:8c:95:f7:
51:f1:b5:41:9c:75:51:85:70:27:63:1c:a9:16:5b:a0:24:a5:
9e:f0:a2:d6:08:94:08:2b:59:c9:81:d1:40:14:af:b1:d8:b6:
10:82:c2:cb:b6:b0:30:74:4b:fc:46:b1:66:cc:e2:6b:9d:e3:
b6:32:ed:ff:63:f1:a5:10:fb:77:2f:f0:1e:39:68:c9:50:13:
31:0c:16:5e:43:48:3b:74:b3:90:c9:9a:8f:26:66:5a:b6:bb:
d9:12:60:95:f8:63:9e:47:6b:cb:5e:52:bf:60:71:08:a5:79:
86:88:40:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:33 2026 by rpki-client