Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/yR4cNbVarjz8LFgC6lYaD_f6Y4M.roa
File: yR4cNbVarjz8LFgC6lYaD_f6Y4M.roa (raw, json)
Hash identifier: QiANg/lT9BhVA0Gyjnvg/6FNpwOrRHBchB0Jd5cbcxQ=
Subject key identifier: C9:1E:1C:35:B5:5A:AE:3C:FC:2C:58:02:EA:56:1A:0F:F7:FA:63:83
Certificate issuer: /CN=96a38feeae903dbcb28ff9333e0435e7e9488b4b
Certificate serial: 019F23690F8EF7A65D3473A9CC14568014B7
Authority key identifier: 96:A3:8F:EE:AE:90:3D:BC:B2:8F:F9:33:3E:04:35:E7:E9:48:8B:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqOP7q6QPbyyj_kzPgQ15-lIi0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/yR4cNbVarjz8LFgC6lYaD_f6Y4M.roa
Signing time: Thu 02 Jul 2026 15:18:35 +0000
ROA not before: Thu 02 Jul 2026 15:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20911
IP address blocks: 195.230.28.0/22 maxlen: 24
195.230.28.0/23 maxlen: 24
195.230.28.0/24 maxlen: 24
195.230.29.0/24 maxlen: 24
195.230.30.0/24 maxlen: 24
195.230.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/lqOP7q6QPbyyj_kzPgQ15-lIi0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/lqOP7q6QPbyyj_kzPgQ15-lIi0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/lqOP7q6QPbyyj_kzPgQ15-lIi0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0f:8e:f7:a6:5d:34:73:a9:cc:14:56:80:14:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96a38feeae903dbcb28ff9333e0435e7e9488b4b
Validity
Not Before: Jul 2 15:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c91e1c35b55aae3cfc2c5802ea561a0ff7fa6383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:88:fc:9b:f9:60:f3:9c:f9:31:1d:80:12:9e:
0b:5f:e4:ff:eb:e9:f2:64:5c:6e:5b:b3:35:20:39:
f0:12:bd:90:87:c7:6c:15:7a:22:ee:17:1b:24:9f:
88:64:70:eb:6d:b3:d4:d7:0c:1f:91:32:fe:f4:88:
71:24:c6:03:cc:2d:85:1a:84:4f:fe:0a:b7:b3:b9:
bd:ce:25:e5:74:2c:30:ba:54:c9:18:55:dc:66:40:
ce:d7:40:7a:7b:f1:fd:e3:de:4f:e3:9d:e2:81:64:
75:6e:02:ec:04:05:dd:cc:95:28:0c:35:bb:05:bd:
03:43:76:ee:d3:bf:e0:48:a6:45:8e:e2:bf:f4:db:
a4:cd:f8:a2:f0:8f:be:b2:e8:1a:9a:87:07:c1:c4:
06:bc:58:bb:c1:39:d0:85:53:b6:88:e1:9c:f2:74:
14:2a:66:8d:9c:e8:59:58:20:f4:9a:ee:a5:9b:77:
60:4a:46:40:17:93:c0:75:16:0c:be:2a:24:a2:86:
33:9c:c8:af:8c:d1:37:0e:c0:18:0c:1d:a0:c9:10:
23:41:91:a4:5c:c7:33:88:db:1b:61:07:ad:bf:57:
c9:12:a4:50:2e:c0:4d:51:4a:4b:60:9b:3c:c2:46:
3c:2a:85:0b:10:46:d1:da:8b:b8:2b:7d:56:fa:58:
d7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1E:1C:35:B5:5A:AE:3C:FC:2C:58:02:EA:56:1A:0F:F7:FA:63:83
X509v3 Authority Key Identifier:
keyid:96:A3:8F:EE:AE:90:3D:BC:B2:8F:F9:33:3E:04:35:E7:E9:48:8B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqOP7q6QPbyyj_kzPgQ15-lIi0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/yR4cNbVarjz8LFgC6lYaD_f6Y4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/lqOP7q6QPbyyj_kzPgQ15-lIi0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.230.28.0/22
Signature Algorithm: sha256WithRSAEncryption
18:3c:bf:9f:ce:06:19:db:8c:61:78:ec:a7:04:7b:57:df:93:
12:60:1a:9a:b8:4b:c7:57:7e:fb:e9:2b:56:d1:63:72:93:53:
6c:a3:6d:74:f8:2f:78:b1:f4:2e:46:ef:30:09:65:72:1f:f2:
41:64:ba:27:c0:b2:bd:51:cd:0f:97:6f:25:29:5e:35:81:e6:
da:58:2b:34:38:2e:b0:95:f0:5c:81:ed:89:3b:fa:cf:c6:a2:
81:dd:1d:2f:8e:fb:bb:d7:65:68:b2:31:82:c8:ba:2c:71:ae:
df:25:34:de:b7:c6:92:4f:10:02:9b:56:22:cb:36:2c:05:e1:
8d:15:fe:73:9e:0a:de:e6:ea:69:c2:dd:c5:d7:8d:74:b7:0d:
2f:54:6c:de:12:51:fa:f3:44:5e:11:46:34:d6:d4:48:39:ed:
0a:9d:94:6f:1c:82:e5:36:e0:16:70:b3:01:ee:de:a9:66:b1:
38:78:73:3c:8d:98:21:91:75:ca:0c:46:3c:a2:3b:c0:ac:43:
2a:3b:44:02:d7:1b:94:16:29:67:f5:04:00:1f:8c:6d:1e:3a:
2e:8a:30:e0:1f:e8:93:12:6a:a7:c9:e7:79:68:93:44:1e:30:
2b:1c:bb:64:11:70:eb:32:fa:f1:20:61:98:e6:ca:39:a4:68:
c3:25:39:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:30:05 2026 by rpki-client