Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/YyYFDnnUUNTCP_CwNffhjvTw9yM.roa
File: YyYFDnnUUNTCP_CwNffhjvTw9yM.roa (raw, json)
Hash identifier: eYOBc7fO6ohiBN+2praFbiCUNHSUBwnGkF54SEfVhK4=
Subject key identifier: 63:26:05:0E:79:D4:50:D4:C2:3F:F0:B0:35:F7:E1:8E:F4:F0:F7:23
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A1CBAE9D9FAAFCE456EB40DA65A91D8D4D
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/YyYFDnnUUNTCP_CwNffhjvTw9yM.roa
Signing time: Wed 11 Nov 2026 17:36:20 +0000
ROA not before: Wed 11 Nov 2026 17:36:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218621
IP address blocks: 48.103.138.0/24 maxlen: 24
177.202.118.0/24 maxlen: 24
179.236.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cb:ae:9d:9f:aa:fc:e4:56:eb:40:da:65:a9:1d:8d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Nov 11 17:36:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6326050e79d450d4c23ff0b035f7e18ef4f0f723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:40:66:b9:eb:a7:43:cf:06:4c:a6:a4:48:78:
5d:b1:5d:54:83:9f:65:3b:1c:e9:a1:2c:eb:c4:2d:
99:39:aa:50:90:46:d5:97:2c:ce:51:af:ad:c6:b4:
75:b9:51:95:cf:26:5f:e5:1a:3b:ba:b7:16:53:28:
34:1e:55:d8:08:25:76:03:52:b3:1a:06:37:6c:71:
83:03:5f:eb:f0:bf:63:5f:a7:ae:bf:43:34:cc:d8:
bd:ce:4e:86:cc:e2:da:f8:2c:4f:b0:f9:69:c9:9f:
a3:37:f4:be:1f:f0:91:12:53:d4:ef:b1:35:35:3d:
e2:9d:b6:24:21:5a:69:6f:96:b6:ed:b3:f7:67:56:
8f:da:01:fb:a6:29:ea:86:d4:45:df:9b:cb:f1:40:
d0:a0:49:d6:9c:0a:52:71:e7:6a:7e:b8:ce:6d:c3:
97:9d:0a:3f:70:82:93:1a:46:2b:9d:b9:94:45:7b:
1a:ff:1b:b6:fe:0f:c1:6c:ee:40:59:cd:bb:f8:ae:
2a:f6:da:3e:7a:5f:83:9b:58:2a:4b:58:3a:70:f1:
3e:7f:44:1e:41:0b:ff:50:10:1b:57:1b:d2:f6:cc:
60:40:af:e5:ca:84:c2:95:78:f2:2d:35:9f:a4:0d:
74:93:9c:c2:29:5e:39:7d:a3:f0:57:d3:b4:32:42:
3a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:26:05:0E:79:D4:50:D4:C2:3F:F0:B0:35:F7:E1:8E:F4:F0:F7:23
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/YyYFDnnUUNTCP_CwNffhjvTw9yM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
48.103.138.0/24
177.202.118.0/24
179.236.128.0/24
Signature Algorithm: sha256WithRSAEncryption
94:46:de:3d:33:9e:a3:41:a7:05:0d:69:10:82:63:ba:51:d3:
a4:8d:9f:bf:21:91:a3:ad:df:1c:b3:ae:e1:5a:a2:19:5b:02:
b1:3f:84:13:72:6c:de:bc:51:cb:ee:34:a4:ed:2a:53:37:f2:
d3:f6:9f:5f:8c:b2:2b:ab:3f:15:ec:7b:2a:5e:07:10:f9:63:
69:59:11:dc:01:48:fc:3c:1c:e7:df:e2:3a:b9:69:37:d3:b1:
dc:f7:11:64:95:cf:62:01:26:e4:04:a5:19:70:3b:ec:14:14:
20:ba:f9:6e:9f:b1:bb:8f:e2:ce:8f:94:0d:1c:0a:7c:41:04:
15:70:6e:f0:09:97:ad:18:c9:09:a3:14:62:b3:c8:cb:0d:96:
2b:51:e5:af:08:a4:92:2d:3d:d3:a7:e3:41:4c:48:d6:7b:23:
2e:4b:45:4f:ca:d5:e6:f3:79:92:28:5f:bb:98:38:10:54:fb:
0b:35:df:9b:67:7b:9b:06:80:54:cd:8b:87:14:88:32:60:a7:
5f:24:87:09:fe:30:cc:55:84:7a:c3:3d:62:af:f5:27:75:37:
9a:bf:87:d1:9a:fb:d4:6a:70:34:c1:e7:35:b7:68:81:1e:79:
5b:69:79:44:e8:cb:12:b8:bb:28:d8:19:2b:f3:9f:44:5a:42:
5b:e3:b4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:39:34 2026 by rpki-client