Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/U2-pyUEFz_jV5xze95sKqmITK9E.roa
File: U2-pyUEFz_jV5xze95sKqmITK9E.roa (raw, json)
Hash identifier: qFKlY0WTggQuoTIdTFaI1jSEY0M+4i8LehCtLGlHHT0=
Subject key identifier: 53:6F:A9:C9:41:05:CF:F8:D5:E7:1C:DE:F7:9B:0A:AA:62:13:2B:D1
Certificate issuer: /CN=cb1ca3c1dd8a552e367a49a0219906972294a67c
Certificate serial: 019F236929C799A96EFA91C30C1F86C6CDD9
Authority key identifier: CB:1C:A3:C1:DD:8A:55:2E:36:7A:49:A0:21:99:06:97:22:94:A6:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxyjwd2KVS42ekmgIZkGlyKUpnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/U2-pyUEFz_jV5xze95sKqmITK9E.roa
Signing time: Thu 02 Jul 2026 15:18:42 +0000
ROA not before: Thu 02 Jul 2026 15:18:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209979
IP address blocks: 194.35.100.0/22 maxlen: 22
194.35.100.0/24 maxlen: 24
194.35.101.0/24 maxlen: 24
194.35.102.0/24 maxlen: 24
194.35.103.0/24 maxlen: 24
2a09:c580::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/yxyjwd2KVS42ekmgIZkGlyKUpnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/yxyjwd2KVS42ekmgIZkGlyKUpnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxyjwd2KVS42ekmgIZkGlyKUpnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:29:c7:99:a9:6e:fa:91:c3:0c:1f:86:c6:cd:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1ca3c1dd8a552e367a49a0219906972294a67c
Validity
Not Before: Jul 2 15:18:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=536fa9c94105cff8d5e71cdef79b0aaa62132bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:de:c6:84:01:e9:06:9b:60:36:3a:34:87:94:
e1:36:62:70:6f:9b:4b:0b:92:75:db:c3:82:93:65:
6e:d5:25:d1:c7:f2:5e:c2:2a:23:fa:e9:31:48:e1:
9c:c8:6d:d4:f0:15:b0:e9:ad:9d:ee:e1:54:e2:02:
87:13:39:0f:ac:11:35:ed:c8:ec:78:67:e2:58:b8:
50:ea:dc:e6:f8:69:a0:fb:51:02:a5:e9:86:99:66:
04:3c:6d:60:e0:ee:b0:d9:4b:2d:c0:c1:72:37:68:
66:49:11:4c:8f:58:9c:26:61:a2:08:c8:69:ba:7b:
f2:bf:ee:81:5e:01:f2:51:f4:82:1a:07:07:9e:4b:
4d:0a:d5:2c:6b:fd:f4:00:ec:e0:d4:0a:1b:12:fc:
dd:c4:46:3b:75:27:cc:2d:88:ce:0e:1b:7d:c1:4e:
6b:89:7f:ea:5c:1c:9a:21:04:4d:1f:6a:0c:f6:8a:
2d:9b:cd:73:03:c2:9e:6b:4f:18:d3:c0:90:f0:d2:
28:5d:46:ee:c1:ba:85:b3:bd:45:9a:07:6c:87:1c:
69:05:56:a2:70:f5:9c:60:f7:51:d9:c4:7e:21:6e:
66:44:4f:d8:16:1c:ca:0e:3c:e1:a1:b8:e7:9e:74:
65:11:06:1f:62:c3:14:d2:0b:a8:dc:2e:93:81:8f:
f2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6F:A9:C9:41:05:CF:F8:D5:E7:1C:DE:F7:9B:0A:AA:62:13:2B:D1
X509v3 Authority Key Identifier:
keyid:CB:1C:A3:C1:DD:8A:55:2E:36:7A:49:A0:21:99:06:97:22:94:A6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxyjwd2KVS42ekmgIZkGlyKUpnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/U2-pyUEFz_jV5xze95sKqmITK9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/yxyjwd2KVS42ekmgIZkGlyKUpnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.100.0/22
IPv6:
2a09:c580::/32
Signature Algorithm: sha256WithRSAEncryption
15:eb:bf:4a:43:1b:c7:30:44:dc:44:fe:14:9b:cd:02:c4:a7:
e1:46:fb:e4:b7:0f:72:79:5f:c7:89:d0:be:7e:fc:54:61:7a:
d7:91:c2:ed:a5:c4:bb:b7:74:1d:87:8d:29:3f:58:41:fd:db:
8a:42:34:49:2f:b4:20:e9:f7:1d:fc:39:6e:1a:b6:c9:f0:b4:
05:52:03:87:33:c7:73:a4:41:86:f0:99:a8:3b:74:84:0d:62:
2d:39:94:9f:0b:43:04:50:2e:ea:28:08:79:19:1e:d0:84:48:
d8:ab:f4:53:39:b0:b5:20:69:93:cb:12:93:b0:12:40:bd:c2:
01:fa:a4:ff:bc:8c:09:7a:49:44:ed:a0:67:fe:8c:30:9c:08:
5d:a1:0d:73:cd:74:66:fd:a6:c3:55:b9:c9:0f:e4:43:3c:37:
e4:3b:93:3e:83:8f:ee:08:6b:f3:d0:ae:e0:27:95:2a:33:72:
de:70:aa:b0:cd:4d:7d:33:ae:5c:1d:26:e6:8d:86:62:de:66:
fb:94:dc:c7:49:da:45:a3:9a:4d:ed:99:be:74:21:04:27:4a:
64:c7:4d:5c:3c:35:fc:1a:03:fb:7e:1b:ee:3f:cd:a8:f8:86:
02:34:9e:11:84:19:a6:33:b8:79:f1:1b:32:81:4d:f0:2d:24:
c4:26:71:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:23:44 2026 by rpki-client