Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/yX3wAN1wIzQ2Y-D4_o6oQEwjSWQ.roa
File: yX3wAN1wIzQ2Y-D4_o6oQEwjSWQ.roa (raw, json)
Hash identifier: zg1nFXz2K6MLvC6tO47y2mLPnAjg1lqDj/t7V26NM2c=
Subject key identifier: C9:7D:F0:00:DD:70:23:34:36:63:E0:F8:FE:8E:A8:40:4C:23:49:64
Certificate issuer: /CN=3ada5baa058c409565ff2ac876a22ee6377b503b
Certificate serial: 019DD44192A4FDE4DDB359DE9BE67E0FCC9A
Authority key identifier: 3A:DA:5B:AA:05:8C:40:95:65:FF:2A:C8:76:A2:2E:E6:37:7B:50:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/yX3wAN1wIzQ2Y-D4_o6oQEwjSWQ.roa
Signing time: Tue 28 Apr 2026 13:22:40 +0000
ROA not before: Tue 28 Apr 2026 13:22:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48116
IP address blocks: 185.173.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d4:41:92:a4:fd:e4:dd:b3:59:de:9b:e6:7e:0f:cc:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ada5baa058c409565ff2ac876a22ee6377b503b
Validity
Not Before: Apr 28 13:22:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c97df000dd7023343663e0f8fe8ea8404c234964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:69:97:21:d5:71:3b:d8:54:88:e4:b5:a0:eb:
09:86:1b:9f:4c:53:02:95:e7:11:49:d0:a5:f3:78:
c8:a4:80:ba:cd:97:a7:e0:d6:8e:ad:05:7f:ee:4a:
c1:62:32:72:9e:b5:d4:01:ee:8e:ec:ac:7c:24:ef:
15:fa:9c:c8:0a:53:17:c4:55:93:81:4b:d9:90:85:
5b:f8:a5:7c:4e:f0:6b:d7:f2:61:3d:6e:8f:a3:d2:
dc:40:08:a9:56:fb:cf:ef:30:18:ab:09:71:a5:6e:
c4:8a:82:d6:59:fd:38:93:5b:95:8c:0a:6b:00:8a:
69:79:8c:bc:4e:e3:d3:fa:94:f8:d0:70:ac:e0:07:
92:fb:58:19:bd:22:55:5a:5b:ff:43:66:fa:31:49:
35:52:40:76:28:83:29:5b:5e:1f:71:17:05:12:98:
5b:cc:70:74:74:ff:6e:8d:78:2f:49:2d:79:17:83:
42:34:b8:43:9e:55:06:30:5e:95:0a:8f:e9:75:4d:
5e:4c:bc:33:ab:68:01:30:87:13:da:04:69:91:af:
7e:bc:fb:55:92:13:c0:93:4e:b3:e4:22:7e:39:5b:
49:5d:a1:71:6f:52:8f:eb:ad:4a:55:c3:bb:62:78:
fd:32:44:89:66:14:57:70:7e:4b:ab:e3:7b:2f:ff:
0b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7D:F0:00:DD:70:23:34:36:63:E0:F8:FE:8E:A8:40:4C:23:49:64
X509v3 Authority Key Identifier:
keyid:3A:DA:5B:AA:05:8C:40:95:65:FF:2A:C8:76:A2:2E:E6:37:7B:50:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtpbqgWMQJVl_yrIdqIu5jd7UDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/yX3wAN1wIzQ2Y-D4_o6oQEwjSWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e663dd-3f8f-4ead-b4c9-9c1b2ad559ab/1/OtpbqgWMQJVl_yrIdqIu5jd7UDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.220.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:0e:27:51:34:d8:92:34:63:a7:a6:22:fc:7a:47:98:63:e0:
46:6a:f1:47:66:23:3d:fe:4c:a1:77:b7:17:12:1e:5d:11:87:
2d:52:67:62:44:47:0d:f2:fc:fd:d2:4a:93:6d:1c:0c:80:f8:
bb:37:de:cc:e3:03:48:cf:06:df:53:d4:be:fa:c6:1d:f5:96:
27:12:99:da:33:fa:4b:fa:bb:59:54:a5:e0:ca:e6:d4:38:79:
56:11:47:13:c9:49:ba:eb:7b:97:4a:8c:e5:6f:5e:fa:73:47:
56:52:9c:c3:20:3e:6e:30:12:b9:1d:a7:d1:fd:a4:33:f1:73:
27:d8:9b:dd:d4:7c:d6:bc:d0:e0:d1:3e:26:24:4c:89:63:79:
de:b0:a8:cd:a4:1f:ae:bd:61:7f:ae:06:52:fe:32:cc:ee:ec:
85:a5:c5:0b:76:87:1b:2e:15:d0:85:ef:22:e3:e8:50:90:bd:
5a:e3:ec:08:96:41:85:ea:65:b1:71:5b:69:95:7a:59:92:20:
f4:08:d1:cc:9a:7a:62:33:6d:b6:90:a2:e3:0c:1b:60:e6:8c:
34:f8:df:4c:70:33:1e:a0:f9:cf:74:5c:47:b4:b2:4f:1b:89:
77:24:f5:87:bc:11:f9:3d:64:44:fc:14:bf:56:ea:9c:bf:2b:
03:05:a0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:32:47 2026 by rpki-client