Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/ytZvKlFnz1qSthhK5jm3iOrymuU.roa
File: ytZvKlFnz1qSthhK5jm3iOrymuU.roa (raw, json)
Hash identifier: SEmRdwSemsDohtKTnRpE/p/H3uUMSjqwrsy6C4xgDao=
Subject key identifier: CA:D6:6F:2A:51:67:CF:5A:92:B6:18:4A:E6:39:B7:88:EA:F2:9A:E5
Certificate issuer: /CN=958b3a784924ef7995d7af1fbd176788a6c2b754
Certificate serial: 019F236896D861E7A07C66F2A83A1A99AD61
Authority key identifier: 95:8B:3A:78:49:24:EF:79:95:D7:AF:1F:BD:17:67:88:A6:C2:B7:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYs6eEkk73mV168fvRdniKbCt1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/ytZvKlFnz1qSthhK5jm3iOrymuU.roa
Signing time: Thu 02 Jul 2026 15:18:04 +0000
ROA not before: Thu 02 Jul 2026 15:18:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59887
IP address blocks: 185.48.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYs6eEkk73mV168fvRdniKbCt1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:96:d8:61:e7:a0:7c:66:f2:a8:3a:1a:99:ad:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958b3a784924ef7995d7af1fbd176788a6c2b754
Validity
Not Before: Jul 2 15:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cad66f2a5167cf5a92b6184ae639b788eaf29ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6f:ec:d0:07:94:d1:e5:42:90:8f:58:77:6b:
7f:95:4a:65:a6:83:5c:b4:a7:c1:c5:89:b0:7f:7d:
2e:1d:aa:e0:11:7b:69:4a:fa:d4:6c:90:9a:8e:6e:
b0:7e:4d:07:6b:72:69:dc:76:68:18:b9:b9:ba:a9:
dd:a3:24:30:98:0c:44:22:8e:5f:19:ce:e2:97:47:
4c:07:f4:fa:55:d9:a4:a7:1a:e4:d3:e2:84:c9:94:
01:34:d4:77:ac:16:62:68:bf:ba:30:24:34:b1:62:
1f:f1:89:d3:65:44:d3:df:3f:06:60:e0:35:99:66:
55:87:f1:54:21:bc:6d:31:70:4c:ae:3b:c9:94:29:
f8:03:81:f7:1d:4f:3b:2a:11:31:df:69:a0:ad:fb:
72:9e:d8:16:13:b2:31:f1:a5:3d:24:48:70:af:87:
ef:a8:ed:83:09:28:01:5d:88:28:9b:99:3d:7d:78:
07:de:3d:1e:4e:9e:a5:83:33:12:99:53:f7:47:01:
6e:04:01:31:82:cc:4c:cb:7e:f9:f7:fd:2d:c4:5f:
a2:f0:34:5a:9d:24:b0:25:1c:6f:f1:0f:f0:dd:35:
23:b8:1b:c7:82:01:97:1f:c5:44:fc:e9:bd:ef:cc:
5d:72:e1:49:68:e9:78:d9:23:88:9a:98:63:85:28:
d6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D6:6F:2A:51:67:CF:5A:92:B6:18:4A:E6:39:B7:88:EA:F2:9A:E5
X509v3 Authority Key Identifier:
keyid:95:8B:3A:78:49:24:EF:79:95:D7:AF:1F:BD:17:67:88:A6:C2:B7:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYs6eEkk73mV168fvRdniKbCt1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/ytZvKlFnz1qSthhK5jm3iOrymuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.26.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:bf:95:95:68:5f:b9:3a:5c:6b:9a:38:98:7d:c5:e4:bf:50:
e1:f5:95:9c:5c:db:3c:ab:6f:d2:91:90:30:a2:de:1c:16:b4:
6a:e8:87:de:3a:e0:15:67:9f:58:e9:1d:75:c9:d8:b2:7b:9e:
80:f8:16:04:fa:43:0f:ef:08:5e:bc:d6:d1:3e:6c:95:25:ac:
d9:b2:ee:0b:4b:c2:89:48:41:36:ec:52:5d:39:e2:c3:2c:43:
eb:f4:9b:f7:b9:6e:b5:0c:00:8a:2b:e8:f3:e1:04:5d:3c:69:
4e:74:81:a4:c2:09:e0:71:0a:0b:84:ed:35:eb:7c:d4:52:9a:
71:2b:bb:a5:5d:e5:69:d1:b1:aa:96:91:a8:d0:46:08:e0:2a:
1f:7f:fd:c2:76:3a:12:c1:c1:cd:b7:49:bb:a0:7e:b7:19:a1:
64:a0:25:eb:fa:60:d4:36:58:ef:1d:3c:7a:80:a1:b1:19:22:
4f:d8:0d:e3:de:e7:d2:4c:b5:52:5f:c8:12:d8:83:97:4a:f2:
47:0b:48:c7:0b:26:49:9e:c0:24:53:dd:8e:ab:0e:fa:72:1b:
9e:e1:de:e8:2c:9b:28:4b:df:99:27:d9:16:30:af:ae:be:d1:
1b:c4:9a:b8:42:b3:d8:11:56:bf:87:6a:54:f7:db:aa:24:cf:
6e:4e:a1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:45:33 2026 by rpki-client