Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/yMLrlgL_4XGQv4PkP0fKel7Uqa0.roa
File: yMLrlgL_4XGQv4PkP0fKel7Uqa0.roa (raw, json)
Hash identifier: WADJFfyNdRhdPfPcKnXU061md0h/PkE/qV2H2/38MPg=
Subject key identifier: C8:C2:EB:96:02:FF:E1:71:90:BF:83:E4:3F:47:CA:7A:5E:D4:A9:AD
Certificate issuer: /CN=a231d7b97a07676122f72e465091d23606ae66a2
Certificate serial: 019DFD2EBD63E944420908D74CC59C3A915D
Authority key identifier: A2:31:D7:B9:7A:07:67:61:22:F7:2E:46:50:91:D2:36:06:AE:66:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/yMLrlgL_4XGQv4PkP0fKel7Uqa0.roa
Signing time: Wed 06 May 2026 12:06:31 +0000
ROA not before: Wed 06 May 2026 12:06:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213535
IP address blocks: 217.179.5.0/24 maxlen: 24
217.179.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fd:2e:bd:63:e9:44:42:09:08:d7:4c:c5:9c:3a:91:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a231d7b97a07676122f72e465091d23606ae66a2
Validity
Not Before: May 6 12:06:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8c2eb9602ffe17190bf83e43f47ca7a5ed4a9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3a:33:7c:0f:0b:58:23:83:18:c1:d4:d0:7f:
41:05:b4:da:de:38:41:10:be:fe:1b:65:6f:f2:b3:
99:43:db:89:45:24:3f:3b:29:1c:1f:66:f5:3b:72:
9e:65:8b:b9:b3:d3:26:bb:2b:49:dd:26:3b:20:28:
34:26:e2:6c:73:77:13:0d:82:85:c4:76:0c:63:3c:
9e:9e:d2:2b:a7:0e:5a:44:f9:31:e8:08:9b:dc:5b:
95:21:a7:18:42:c8:e1:ea:01:12:e5:cf:68:d9:2c:
3a:cc:8d:af:0e:0c:73:b4:dc:f2:c1:7d:ab:42:78:
99:72:2b:e9:0a:e5:64:53:1f:3e:31:15:fa:0e:d3:
08:d6:a4:f9:41:a7:8c:e4:c4:84:76:cb:84:6c:7e:
2c:3c:93:65:14:44:a3:22:bc:2c:d1:85:1d:e4:53:
ee:ef:db:59:4e:80:18:3d:cd:b0:ae:8f:5e:c0:2b:
a9:63:47:7e:d3:d9:35:25:58:7e:01:82:e8:63:59:
5f:87:e2:d1:57:9b:9f:73:a0:7d:2c:6a:b1:b4:ba:
88:c7:11:bd:03:e9:b3:4c:55:cf:a6:92:dc:5f:ea:
bf:3f:e0:d1:14:7a:4c:0f:da:16:70:33:32:42:fc:
f4:06:c9:57:25:8c:ae:5b:98:b0:b5:8e:4f:4a:7d:
63:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C2:EB:96:02:FF:E1:71:90:BF:83:E4:3F:47:CA:7A:5E:D4:A9:AD
X509v3 Authority Key Identifier:
keyid:A2:31:D7:B9:7A:07:67:61:22:F7:2E:46:50:91:D2:36:06:AE:66:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/yMLrlgL_4XGQv4PkP0fKel7Uqa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.179.5.0-217.179.6.255
Signature Algorithm: sha256WithRSAEncryption
99:57:22:7b:04:3c:3b:1b:73:ea:34:80:b4:cd:7d:62:df:2d:
84:00:48:a5:3f:f1:19:4f:0f:00:2d:c4:61:ac:7a:71:31:0e:
cc:e6:0b:6a:5b:fe:7a:47:f6:ba:2f:5e:65:59:bb:e0:e4:c4:
f9:29:03:20:cb:8a:91:c2:70:db:99:a4:1a:89:1d:a1:56:24:
9a:6e:31:e7:89:8e:97:0a:12:ae:49:09:57:5f:1d:2e:7b:f2:
e8:c7:3a:ec:4a:65:5b:d9:4e:66:3d:e8:02:5f:13:04:c8:cf:
36:72:9f:3f:71:bf:51:c7:99:c1:c2:11:21:bc:b2:2b:a4:76:
51:7c:14:ba:4f:99:cb:f3:39:9d:04:58:fd:b2:14:e0:dc:7c:
b5:ba:27:5d:c8:16:01:28:46:94:4d:88:03:89:34:1d:48:75:
31:2e:ba:98:e3:13:7c:e2:29:cd:3c:09:d0:c5:1f:30:0b:f8:
fc:f1:b6:b7:3c:0d:98:0d:c0:1b:88:06:4c:ef:2c:46:6d:c0:
be:df:74:24:58:f1:66:76:e7:8d:d3:ef:64:ba:f9:40:05:56:
7c:ca:9c:7d:85:fc:64:1b:05:b4:df:11:0c:5b:67:ba:33:c8:
fa:97:f7:8b:60:bd:ca:58:97:aa:95:95:cb:eb:65:55:b7:22:
71:08:52:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:38:25 2026 by rpki-client