Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/yJBe4wL__q5eFSy_v2lsZXclqhQ.roa
File: yJBe4wL__q5eFSy_v2lsZXclqhQ.roa (raw, json)
Hash identifier: waMNp3qW5tHL4UcllPTtbvZg9/Osk4C76/bHTxN/Vec=
Subject key identifier: C8:90:5E:E3:02:FF:FE:AE:5E:15:2C:BF:BF:69:6C:65:77:25:AA:14
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 019F459E3445E17E773F1DF491F0213EBA07
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/yJBe4wL__q5eFSy_v2lsZXclqhQ.roa
Signing time: Thu 09 Jul 2026 06:43:43 +0000
ROA not before: Thu 09 Jul 2026 06:43:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215607
IP address blocks: 85.232.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:45:9e:34:45:e1:7e:77:3f:1d:f4:91:f0:21:3e:ba:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Jul 9 06:43:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8905ee302fffeae5e152cbfbf696c657725aa14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f4:1a:86:f8:e4:ea:3c:41:50:37:a8:da:58:
03:77:d3:df:43:81:6e:f5:25:29:15:39:3d:7c:eb:
46:a3:63:6c:cd:fe:b7:a5:27:5c:00:f0:ea:f7:bf:
70:ee:8a:20:17:80:a5:ad:91:69:6b:d5:e8:26:e6:
41:c5:75:7c:b6:c7:73:cf:56:57:65:c3:a0:10:1b:
b1:f5:d0:db:97:2a:ff:f7:3f:9d:85:b6:88:48:67:
c2:37:97:fc:86:0b:c0:bc:a9:a9:02:b4:c0:d0:8f:
32:a8:dc:36:be:70:26:c6:0a:fa:5b:a4:05:cf:47:
15:6a:98:44:d0:bb:e3:81:73:f9:17:96:ac:50:20:
5b:78:82:74:19:3b:60:97:f3:85:9d:b8:13:32:2e:
93:52:0e:95:df:4f:9b:64:70:63:c2:3b:8d:d2:23:
12:02:8f:d5:51:8b:69:b6:ce:f5:3b:67:5e:37:b8:
cb:4c:c5:62:91:f8:d4:af:e1:3e:03:31:25:6f:b3:
1f:44:ee:0c:7a:3c:4e:67:14:e0:96:a2:8c:ee:f6:
57:b3:03:24:94:72:ae:50:24:65:5f:52:95:c5:33:
c0:b3:a8:0b:0f:b5:b0:36:3d:da:e7:b4:ff:7c:f0:
6e:c7:e2:30:f5:b1:fc:19:d2:2a:67:1e:d0:ca:bb:
f5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:90:5E:E3:02:FF:FE:AE:5E:15:2C:BF:BF:69:6C:65:77:25:AA:14
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/yJBe4wL__q5eFSy_v2lsZXclqhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.232.178.0/24
Signature Algorithm: sha256WithRSAEncryption
20:2c:6b:ad:a9:b5:37:09:5b:11:a1:75:e1:9b:0e:6b:e9:c3:
3c:66:2c:05:80:ee:d1:b0:5f:d7:2b:0c:16:ae:1e:cc:78:27:
62:cc:60:85:b3:84:f1:3b:bd:0c:ba:07:3e:3b:b5:2d:81:c5:
52:f1:33:e0:32:fa:e9:ad:f7:11:3c:f0:9f:b5:7b:2e:19:f4:
17:bd:49:ee:e5:c4:57:1d:bc:24:a4:3d:24:3e:3d:53:5d:24:
8d:84:22:82:b4:13:20:16:94:13:4c:63:62:e5:4f:92:b3:f9:
b1:3f:a0:ad:3e:5c:4d:61:26:17:ec:1b:8a:03:db:e4:61:7d:
3f:3c:76:18:70:43:e6:15:0b:ca:9f:9b:42:9b:1e:85:4a:2f:
80:70:19:98:b6:ed:eb:a3:a2:fe:af:06:26:bf:7e:e2:43:d6:
2a:a9:92:1d:95:de:70:28:a2:1a:fa:24:78:60:a4:95:c1:0a:
4a:c9:7a:db:51:54:4b:e6:b0:08:5d:e1:93:98:2c:38:8a:b9:
23:88:6e:1e:e5:43:1f:53:8a:5e:30:d8:ba:13:b3:fa:f9:1f:
18:d8:09:43:ef:eb:88:a2:51:00:50:4a:ee:f4:b0:75:c7:7d:
2e:7b:b4:ad:48:88:cc:a4:ee:d9:26:5b:25:d6:ad:c6:62:49:
13:50:b7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:44 2026 by rpki-client