Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/yA4JiVwMsPC8b_lAalSRE5XDqvI.roa
File: yA4JiVwMsPC8b_lAalSRE5XDqvI.roa (raw, json)
Hash identifier: 7JkBIxqsxmSvyJK9Es3ixzE0LnajlyCTLaUIqQjK5pQ=
Subject key identifier: C8:0E:09:89:5C:0C:B0:F0:BC:6F:F9:40:6A:54:91:13:95:C3:AA:F2
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019D06479CDB88D9414090299BE4A6CB994F
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/yA4JiVwMsPC8b_lAalSRE5XDqvI.roa
Signing time: Thu 19 Mar 2026 13:27:29 +0000
ROA not before: Thu 19 Mar 2026 13:27:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17497
IP address blocks: 37.148.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:47:9c:db:88:d9:41:40:90:29:9b:e4:a6:cb:99:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Mar 19 13:27:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c80e09895c0cb0f0bc6ff9406a54911395c3aaf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ca:47:87:be:74:78:21:de:fd:4b:ce:7f:9a:
a3:d1:96:14:2c:89:d5:22:23:27:9f:48:40:7e:1b:
b5:53:e2:bd:a7:92:c2:74:c8:10:94:75:a1:0b:7b:
36:f5:dc:79:d3:db:2f:af:95:67:6f:92:40:63:51:
eb:1a:b8:b2:3a:a6:54:7a:fb:60:d1:d5:25:9b:f6:
89:55:6b:af:8c:14:6f:13:38:34:77:16:46:94:88:
66:b6:70:1a:24:bc:fd:22:1e:b2:1e:00:a0:45:92:
ea:0c:71:f5:d0:95:20:5f:8a:71:d1:82:4f:63:a4:
2d:c8:3c:5a:40:60:5b:f0:03:fa:4f:d8:ab:74:3f:
7a:65:e0:fd:19:dd:a1:ef:ca:67:c8:4e:52:24:8e:
37:3f:ad:2b:16:1f:c4:f4:28:1e:34:0f:f8:75:9f:
8c:0a:93:e9:0b:54:36:02:57:5e:ea:80:7b:20:80:
28:71:32:f1:40:65:e9:a4:88:1a:4a:35:4d:f8:c7:
3e:bc:9d:7b:75:d0:c5:10:0a:df:35:41:01:11:66:
6c:18:72:77:11:fb:de:17:8d:1e:f2:c4:80:16:e5:
ae:76:9c:c0:eb:0e:a7:05:47:0d:06:6d:14:e8:ef:
2e:6f:4a:44:ce:12:99:6d:98:95:bd:c0:aa:b6:b5:
24:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0E:09:89:5C:0C:B0:F0:BC:6F:F9:40:6A:54:91:13:95:C3:AA:F2
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/yA4JiVwMsPC8b_lAalSRE5XDqvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.128.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:9a:a7:d3:35:ca:f9:a8:ce:9f:50:29:14:9a:e9:13:7d:26:
4a:a4:92:da:2d:c5:c6:98:82:7b:18:07:a8:48:15:b8:09:43:
a5:31:05:55:50:ed:31:bb:d1:b9:96:cb:ef:51:14:c1:a2:d0:
54:89:18:59:ad:ad:38:e5:65:bf:5c:ea:92:c8:02:10:ef:cb:
bd:93:7a:d9:a2:7e:e2:e1:8a:07:d6:ee:9b:a6:c3:bf:41:ad:
b8:ce:e2:50:b3:71:97:54:2e:a1:82:b6:04:e1:3c:06:ca:2e:
18:c2:a0:db:b4:77:48:97:83:0b:30:8e:e2:2c:ea:31:c6:28:
de:f0:7f:71:86:cc:b6:87:d9:d0:27:bc:8c:90:9f:d5:31:6f:
80:69:38:c5:12:82:59:c5:61:1e:52:3b:59:d1:38:80:bb:bd:
b4:dd:3b:8d:4d:2d:fc:f2:e5:e2:95:a5:21:cf:53:5a:d8:5f:
86:be:d6:cd:36:f7:49:b2:38:38:90:13:e5:a1:e5:8f:44:ea:
c1:11:21:d3:2e:b6:7a:3c:b6:36:fd:c0:8e:b8:b5:f7:f7:f6:
98:2c:0f:a8:28:6a:ff:f9:03:a7:15:b2:a0:f7:5a:9d:1f:bc:
6a:9f:0f:a3:8b:b0:a7:a2:2b:69:3c:7f:b1:89:68:b6:62:5c:
34:e4:0a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:46 2026 by rpki-client