Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/y8T-OnSHS8KphnZfx-lxWGEZlNE.roa
File: y8T-OnSHS8KphnZfx-lxWGEZlNE.roa (raw, json)
Hash identifier: nZ71mZy2AA0dMJgbrAVpJjwAvbt0DILNAhhtTBiU8OQ=
Subject key identifier: CB:C4:FE:3A:74:87:4B:C2:A9:86:76:5F:C7:E9:71:58:61:19:94:D1
Certificate issuer: /CN=1ea0a9eb47d824b51f154442481a257168394551
Certificate serial: 01A0E7EA1B5DC6E9AC8D90530E9D3BBB650E
Authority key identifier: 1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/y8T-OnSHS8KphnZfx-lxWGEZlNE.roa
Signing time: Mon 28 Sep 2026 12:07:54 +0000
ROA not before: Mon 28 Sep 2026 12:07:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218653
IP address blocks: 217.113.196.0/24 maxlen: 24
217.113.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 06:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:ea:1b:5d:c6:e9:ac:8d:90:53:0e:9d:3b:bb:65:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0a9eb47d824b51f154442481a257168394551
Validity
Not Before: Sep 28 12:07:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cbc4fe3a74874bc2a986765fc7e97158611994d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c4:9b:71:7c:ce:90:ee:73:13:71:82:54:93:
07:82:b8:93:10:42:07:ca:c3:2f:27:b8:79:5b:a7:
01:2a:61:f7:ae:4d:0c:c9:23:8d:ee:81:06:51:db:
5d:94:cc:8a:17:df:c4:61:57:76:15:31:d8:0d:c2:
79:e1:cc:de:12:9c:7d:c0:2f:bf:84:21:7a:6c:15:
56:30:33:e5:75:d9:41:f3:6e:fe:7b:d8:c7:fc:9f:
5e:9d:46:91:a3:71:54:41:0c:fd:a8:ba:a0:e1:9d:
c5:08:6d:d6:5d:db:0f:05:de:0d:4d:bb:d8:5a:ed:
da:1b:29:76:b3:a9:59:ad:ce:34:fe:61:e3:05:75:
47:86:19:83:ed:86:7b:58:aa:0b:a1:ea:a1:b6:aa:
9e:3d:cc:d1:8e:8a:9c:c8:7b:5d:47:ae:3d:3a:51:
d8:7f:3b:58:1d:16:33:5a:6e:5e:92:c4:40:7a:94:
01:83:bc:66:91:c8:76:6b:e0:ec:7b:e5:8c:0f:70:
5c:fc:f5:ec:48:d5:82:09:06:c0:32:3f:f7:c5:db:
e3:a9:96:b5:eb:74:8b:dd:b5:ca:28:b9:42:a8:b3:
ce:3b:d6:b4:c2:c8:fd:dd:da:c8:60:83:e6:45:50:
25:f0:08:29:2f:9a:4d:40:26:c3:21:7c:c2:8d:89:
bf:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C4:FE:3A:74:87:4B:C2:A9:86:76:5F:C7:E9:71:58:61:19:94:D1
X509v3 Authority Key Identifier:
keyid:1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/y8T-OnSHS8KphnZfx-lxWGEZlNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.196.0/24
217.113.199.0/24
Signature Algorithm: sha256WithRSAEncryption
51:52:af:42:37:56:fe:87:26:14:d2:aa:b7:84:05:e6:14:64:
ab:28:ce:4d:e4:69:a0:26:ad:a2:ec:66:1b:1f:d3:60:94:87:
df:c0:07:e7:6f:28:f2:2c:69:3c:bd:c1:79:aa:9c:9a:08:21:
9d:e7:d5:cf:68:6b:e5:3e:7e:5b:a6:b8:e2:ce:2a:e8:3c:39:
f1:b0:f1:43:6f:cc:82:9d:d5:da:0d:41:93:f7:7e:f8:e3:31:
97:fe:de:84:c2:c2:85:46:6c:d8:75:35:7f:f4:14:55:f0:20:
a2:af:c9:c0:96:1d:7f:09:39:89:ae:7e:98:3d:6a:28:92:fb:
5e:c8:c1:07:ab:c0:13:0f:13:a4:83:8b:3f:c0:ee:60:64:4b:
eb:6d:23:63:00:9e:8c:4d:b4:c6:96:02:8e:fc:c9:62:9f:32:
14:6d:ef:1e:14:77:f0:4a:eb:f2:64:14:57:c9:f3:90:b5:b5:
f3:d5:79:62:88:e5:6a:e7:76:a8:bc:19:3b:90:94:64:36:3a:
01:4a:52:c3:73:c3:ec:41:d9:02:48:cd:99:01:73:3e:3b:03:
3e:fc:f7:fa:cf:dc:b7:e9:d1:72:10:27:d2:0c:e3:e9:76:a8:
1d:87:6b:76:b1:8b:5f:e1:c1:ad:be:00:85:17:14:34:90:3d:
f5:0a:4c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 14:01:29 2026 by rpki-client