Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/YiurtmEVnKJWoMXP_xjKmjxmVoI.roa
File: YiurtmEVnKJWoMXP_xjKmjxmVoI.roa (raw, json)
Hash identifier: 4ukDIvZ14L+cMrpj8UGfHFDzDuRtwpZja3ebZIwrqB0=
Subject key identifier: 62:2B:AB:B6:61:15:9C:A2:56:A0:C5:CF:FF:18:CA:9A:3C:66:56:82
Certificate issuer: /CN=0968dacb344b4d8df54aa378653f71b0bf20da5e
Certificate serial: 019F2368370688DE89863F74BCE23C15EC71
Authority key identifier: 09:68:DA:CB:34:4B:4D:8D:F5:4A:A3:78:65:3F:71:B0:BF:20:DA:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWjayzRLTY31SqN4ZT9xsL8g2l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/YiurtmEVnKJWoMXP_xjKmjxmVoI.roa
Signing time: Thu 02 Jul 2026 15:17:40 +0000
ROA not before: Thu 02 Jul 2026 15:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211703
IP address blocks: 45.144.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/CWjayzRLTY31SqN4ZT9xsL8g2l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/CWjayzRLTY31SqN4ZT9xsL8g2l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWjayzRLTY31SqN4ZT9xsL8g2l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:37:06:88:de:89:86:3f:74:bc:e2:3c:15:ec:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0968dacb344b4d8df54aa378653f71b0bf20da5e
Validity
Not Before: Jul 2 15:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=622babb661159ca256a0c5cfff18ca9a3c665682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ab:01:82:43:98:96:33:ac:33:73:5e:d5:47:
7b:a0:5a:f3:7d:e4:a3:0e:08:47:46:03:b3:51:41:
7c:04:f4:b9:1c:88:3d:b4:80:78:1b:5d:28:b9:0a:
47:43:c1:67:1d:69:98:24:d5:88:2e:c2:ad:41:13:
1b:d9:46:f1:68:a8:1d:d2:ac:99:da:4a:6e:c9:33:
76:46:ad:25:0f:0f:24:c9:90:d4:41:48:ff:ae:6d:
56:c3:84:9e:9e:fa:df:07:27:49:21:51:9e:67:ba:
0e:de:d5:b4:7b:d9:1f:28:fb:1e:f1:06:cb:9e:76:
15:db:8a:d8:80:3e:08:ef:57:d4:1b:a8:c7:f6:a6:
d8:f6:9c:c4:68:99:f7:70:01:d0:7d:a8:a2:d4:9a:
8b:27:bc:c5:b3:85:4d:f6:d5:5a:89:66:e2:d7:16:
c5:8f:b9:3f:c0:d2:cb:d3:62:b9:23:58:9e:05:a5:
07:8f:e2:e2:74:b1:a5:4f:19:78:ea:fc:98:6d:3a:
bc:16:7b:c5:04:d3:0d:c8:43:fd:a1:08:bb:9c:8e:
9f:66:92:4d:43:d7:b4:00:94:74:e7:42:d9:2e:6b:
c3:42:6c:3e:8e:41:78:f2:d8:60:95:84:c3:f7:c2:
11:52:14:17:cb:27:c1:b6:06:33:f0:e4:33:51:4b:
17:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2B:AB:B6:61:15:9C:A2:56:A0:C5:CF:FF:18:CA:9A:3C:66:56:82
X509v3 Authority Key Identifier:
keyid:09:68:DA:CB:34:4B:4D:8D:F5:4A:A3:78:65:3F:71:B0:BF:20:DA:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWjayzRLTY31SqN4ZT9xsL8g2l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/YiurtmEVnKJWoMXP_xjKmjxmVoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/CWjayzRLTY31SqN4ZT9xsL8g2l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.18.0/24
Signature Algorithm: sha256WithRSAEncryption
87:77:83:70:5b:f6:12:1d:50:4c:c8:60:ca:43:00:91:55:7c:
47:4d:f6:69:42:9f:7d:d5:6e:63:0a:6b:97:3f:a5:de:cf:26:
e5:44:39:cc:69:e6:0f:c3:20:a9:c5:8b:eb:22:4a:93:bb:aa:
23:c1:72:c2:38:12:ea:df:4d:81:ff:a7:74:1f:b5:3a:98:cf:
8d:35:bb:a4:4d:a8:47:b6:18:e2:52:a1:f8:2f:95:f7:59:3f:
f2:46:f3:c5:24:17:50:61:16:e7:2e:c2:11:8b:e8:f4:26:4b:
d3:81:6d:ee:e9:ff:de:9b:d0:e7:c5:71:e3:20:7a:0e:fa:39:
a3:a7:1b:06:cb:4a:60:75:96:03:99:37:7b:e0:4b:10:7f:f8:
46:37:f7:11:3f:16:86:22:ab:c5:26:fd:bb:8c:39:91:5c:43:
7d:de:e1:a6:71:76:a4:bf:aa:08:8a:ea:b1:21:75:27:96:08:
74:1d:9a:41:d3:b0:b7:b7:87:47:bd:e1:82:c3:46:cb:68:f6:
1f:a0:bc:96:8e:cd:e4:76:49:fa:fa:c1:ba:7f:67:12:5e:3e:
de:d1:7a:18:f5:13:63:e1:0b:1d:06:3b:09:dd:62:77:d8:8d:
d1:0b:06:aa:80:c9:21:e4:4c:48:1c:04:75:92:f5:79:5a:ec:
6b:e5:c7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:28 2026 by rpki-client