Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/yzb33J_TSUGconlwuZQ-C76Iv3M.roa
File: yzb33J_TSUGconlwuZQ-C76Iv3M.roa (raw, json)
Hash identifier: pbqUjm0+WTbb3C+E1+eqMTIxj74nhtNQcn4k0MNN9wQ=
Subject key identifier: CB:36:F7:DC:9F:D3:49:41:9C:A2:79:70:B9:94:3E:0B:BE:88:BF:73
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A0D904F0215678EF647A3F06B517591321
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/yzb33J_TSUGconlwuZQ-C76Iv3M.roa
Signing time: Fri 25 Sep 2026 14:42:54 +0000
ROA not before: Fri 25 Sep 2026 14:42:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4766
IP address blocks: 89.30.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:04:f0:21:56:78:ef:64:7a:3f:06:b5:17:59:13:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Sep 25 14:42:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb36f7dc9fd349419ca27970b9943e0bbe88bf73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:93:42:2f:48:fe:d3:e5:b7:4c:71:34:22:02:
b6:dd:97:96:53:bf:da:9e:7f:4a:83:f6:29:25:ad:
a0:31:91:a5:15:ae:97:62:2e:7f:79:75:18:af:ce:
17:f4:5d:f8:8e:78:17:55:99:54:b0:6a:6f:01:82:
49:b5:72:9f:e5:3c:41:51:27:e2:5e:36:fa:5e:53:
7e:70:49:b7:97:1c:e8:94:7a:8c:2c:f5:cb:3a:d0:
ef:c4:bf:21:2d:6e:f4:53:d9:cd:6d:c4:ec:cd:bc:
65:1f:e5:11:f5:53:2c:88:52:68:79:90:23:cb:04:
02:e4:43:a6:39:09:55:4b:42:93:dc:d4:6a:78:78:
fd:7c:75:0f:82:a2:bf:3c:96:ca:f1:68:af:5a:bf:
60:47:35:42:83:8b:23:26:5b:bf:70:49:8b:1e:27:
a3:c0:e8:7c:a3:ca:c2:cc:7b:ce:f7:48:9e:be:9a:
ba:4d:24:eb:09:70:9a:e6:f9:de:2d:46:6e:31:0b:
1e:24:62:d1:58:ed:41:21:9a:62:b2:4c:18:64:ff:
2a:24:73:e8:2d:ea:fe:23:6c:a3:20:12:ff:4e:af:
fe:41:7b:7a:3f:26:02:b6:3d:4c:c9:c4:66:9e:39:
bf:28:a2:82:7b:e7:53:85:bb:8c:4f:23:1d:8f:c1:
03:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:36:F7:DC:9F:D3:49:41:9C:A2:79:70:B9:94:3E:0B:BE:88:BF:73
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/yzb33J_TSUGconlwuZQ-C76Iv3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.30.184.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:64:84:ed:00:22:de:c2:22:32:9c:cd:14:33:ad:d4:9d:e9:
af:43:0d:cd:77:23:81:74:df:e7:70:1f:7a:0b:8c:b0:16:e9:
50:fc:0e:b0:54:38:83:34:ff:08:92:7e:b7:0e:6d:14:ee:79:
b7:ef:ee:f8:65:86:1a:b6:c6:c3:8e:c9:18:99:20:3a:44:fe:
5c:9a:14:f0:32:fc:50:0e:de:32:51:01:3d:d0:32:35:75:36:
28:9c:c8:37:5f:5b:76:10:87:38:48:e3:3a:23:36:c3:a4:ed:
bb:0a:5c:76:8d:73:37:51:1f:59:dd:4a:4a:df:e5:92:88:94:
23:07:6b:95:1c:26:bf:e3:e5:8c:30:ad:0b:ac:2e:e0:a4:e0:
81:c9:c5:16:4b:56:7a:b3:3d:48:b3:94:eb:a4:ba:e0:bd:fc:
38:a2:0c:2b:4e:e2:e4:2d:41:fc:85:f5:75:69:88:c8:b0:55:
a3:04:22:10:55:7e:e6:74:78:9b:81:a9:28:5f:dd:5b:11:4c:
14:2e:83:d5:06:b5:dd:7f:3d:52:af:14:33:46:d0:8f:1e:f3:
bc:29:4a:13:b7:e2:41:e0:71:9d:b3:84:eb:73:5d:16:05:b5:
cf:21:30:e9:db:53:18:68:f5:d0:91:c5:c6:d0:7c:9e:77:d2:
1d:0f:13:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:11:46 2026 by rpki-client