Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/yhoBHnesXTYm8_l1T61FBZDf-t4.roa
File: yhoBHnesXTYm8_l1T61FBZDf-t4.roa (raw, json)
Hash identifier: naRcmc2n0DJtqnZy7Q9NbzIEtzO+Kt4v4g1ocm1pqWA=
Subject key identifier: CA:1A:01:1E:77:AC:5D:36:26:F3:F9:75:4F:AD:45:05:90:DF:FA:DE
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 019F65F3892114DDFC9FFB0289EB1AD0AA94
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/yhoBHnesXTYm8_l1T61FBZDf-t4.roa
Signing time: Wed 15 Jul 2026 13:24:46 +0000
ROA not before: Wed 15 Jul 2026 13:24:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49040
IP address blocks: 91.148.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:f3:89:21:14:dd:fc:9f:fb:02:89:eb:1a:d0:aa:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jul 15 13:24:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca1a011e77ac5d3626f3f9754fad450590dffade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:87:ab:d0:72:8a:5c:b3:3f:77:2e:6e:ed:fa:
f8:1e:0c:6b:09:fa:79:4e:17:cb:76:6f:02:1c:64:
c2:5e:95:bb:87:3f:df:c4:7f:be:d7:51:1b:80:d9:
02:2e:a5:08:f0:c6:c8:ae:b0:63:9e:13:7e:83:99:
fe:c7:a1:55:e8:eb:03:d5:6d:75:72:4e:39:8b:a5:
8f:42:5e:3e:1c:8e:01:f7:ec:7b:47:f7:94:07:b1:
ac:e7:b2:ea:e9:0b:b8:64:c3:06:40:70:01:7d:4f:
f9:85:91:0a:9e:76:e5:e5:d9:d7:5d:e8:a3:8b:9a:
f5:a4:ef:95:0f:17:e0:66:f0:43:58:e3:fb:9a:a0:
e8:82:0c:8d:2c:6b:9e:d0:49:f9:55:dc:67:60:dd:
ec:ff:fc:8c:bc:11:90:d9:a6:24:1f:dc:4d:3c:58:
e3:8a:4e:ec:4f:93:b3:ca:3b:21:d0:0a:f3:45:f2:
7e:d8:00:d4:1f:55:76:0a:76:38:27:6a:28:cf:11:
03:49:de:c1:09:60:9c:8c:95:76:ec:4a:86:3c:cb:
46:23:ed:dc:26:39:f3:8c:b5:7c:06:51:2c:4e:58:
7d:d4:b8:03:bf:87:3f:6a:0c:33:ab:2d:62:6b:20:
f7:79:be:27:09:88:3e:8a:e0:b2:b4:0f:d1:3f:09:
d5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1A:01:1E:77:AC:5D:36:26:F3:F9:75:4F:AD:45:05:90:DF:FA:DE
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/yhoBHnesXTYm8_l1T61FBZDf-t4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.148.176.0/21
Signature Algorithm: sha256WithRSAEncryption
47:87:4c:e1:3a:dc:15:55:7d:97:a2:b2:6d:c0:6e:a0:91:a3:
68:8a:45:12:cc:1d:51:ce:d0:d7:bb:68:c1:39:4a:6c:46:4a:
a6:b2:47:f0:fc:73:63:23:93:8a:99:e0:a2:a7:87:57:cc:c2:
40:06:f6:b7:60:73:f7:ea:b7:ea:a7:4a:27:1a:50:21:e8:98:
d0:c5:e3:d1:7c:33:ad:a7:74:df:a2:64:97:fc:eb:84:59:ff:
43:45:e9:e4:10:53:ae:5d:0d:ba:6a:3f:6c:e2:c8:7e:e3:7d:
aa:74:5f:94:40:43:54:3f:1f:66:cf:c1:7f:18:5d:f9:16:85:
46:79:cc:90:c3:63:b4:4f:77:19:c9:79:d2:1c:67:e7:8d:ae:
f8:c9:7c:39:4f:3a:ad:e5:f5:f3:0d:be:35:a8:0c:f9:b8:b2:
40:49:d7:c6:1d:50:44:62:9b:d7:de:26:cc:34:c2:af:a2:2f:
1f:7f:f2:a1:bd:58:2b:f1:bf:7d:cd:c8:a9:ff:6a:0c:05:53:
b0:f8:2f:4c:39:ff:99:87:50:6d:de:44:f5:b7:e6:1c:79:a3:
f9:f2:a9:96:2d:86:f7:4e:3f:26:d4:81:4a:27:7d:98:7a:89:
df:5f:8f:3c:dd:f9:d5:30:52:b6:fe:47:1d:b2:60:5b:f3:5f:
aa:8d:d0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:14:45 2026 by rpki-client