Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/yo062WtK3aPCw8GfSmsUaEUAqlQ.roa
File: yo062WtK3aPCw8GfSmsUaEUAqlQ.roa (raw, json)
Hash identifier: 7t8JTMWvQ5b+YuFMSIjbxw8YIYrsWUeqYO3jYfd5y6Q=
Subject key identifier: CA:8D:3A:D9:6B:4A:DD:A3:C2:C3:C1:9F:4A:6B:14:68:45:00:AA:54
Certificate issuer: /CN=988296c50d94bbed225f2867231fa5093debea91
Certificate serial: 019F6FB8B57BA8491A17D59011E909A38DAD
Authority key identifier: 98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/yo062WtK3aPCw8GfSmsUaEUAqlQ.roa
Signing time: Fri 17 Jul 2026 10:56:43 +0000
ROA not before: Fri 17 Jul 2026 10:56:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 45.86.48.0/24 maxlen: 24
45.86.49.0/24 maxlen: 24
45.86.50.0/24 maxlen: 24
45.86.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6f:b8:b5:7b:a8:49:1a:17:d5:90:11:e9:09:a3:8d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=988296c50d94bbed225f2867231fa5093debea91
Validity
Not Before: Jul 17 10:56:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca8d3ad96b4adda3c2c3c19f4a6b14684500aa54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b4:8c:e8:a3:f0:3e:3e:de:91:36:0f:d4:06:
ed:08:7c:6a:c1:ff:b9:b7:ac:c1:4e:0b:1f:e6:6c:
e6:8d:34:58:f4:5b:c6:59:a7:2e:a2:5e:c1:af:3e:
20:4b:cf:9c:08:95:f5:05:a5:c8:01:f2:8e:9c:00:
b9:0c:29:71:ee:e8:7f:bc:dd:3a:01:05:fa:07:76:
14:8c:4c:c8:48:27:c6:13:14:07:f0:69:b5:ef:3e:
e0:e7:eb:75:af:45:60:78:1d:03:03:b4:1f:61:d9:
ab:62:4a:b7:da:a4:33:f8:a4:1a:c4:1f:24:ee:55:
bc:e5:02:b6:96:ec:46:00:09:4b:d0:79:d7:c6:78:
cb:0b:d1:8c:b3:12:f8:1a:e3:e6:7d:78:61:9c:f0:
a8:ec:a6:4c:45:b3:56:56:10:ec:b7:2f:1a:6a:45:
04:f7:91:12:c7:c9:90:2e:6f:ba:10:22:6d:c1:9e:
23:1e:8a:65:bb:c4:01:5e:2a:cf:6d:16:62:d3:39:
44:72:73:80:d9:fc:cc:51:30:62:95:b8:de:1d:f3:
ed:9f:08:32:72:3b:8e:74:f6:4a:17:f4:e9:d4:0d:
d5:3d:d8:79:f1:eb:69:d1:14:36:d4:60:4a:58:8c:
53:fb:07:9c:3a:6e:2e:4c:4b:1d:77:a7:5c:e0:b5:
54:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8D:3A:D9:6B:4A:DD:A3:C2:C3:C1:9F:4A:6B:14:68:45:00:AA:54
X509v3 Authority Key Identifier:
keyid:98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/yo062WtK3aPCw8GfSmsUaEUAqlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.48.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:5c:fe:e1:8e:4a:8f:b0:ff:fa:f6:10:97:54:41:41:df:48:
bd:51:3d:b7:d4:b4:09:6b:e8:2d:29:76:93:eb:4b:05:df:fe:
38:fb:f8:c7:78:d9:0b:b8:6c:4b:1b:3f:4b:e8:5b:65:8f:73:
82:b3:30:3d:1d:1d:be:12:e5:b7:30:25:32:72:fa:8f:2b:99:
23:08:7f:dc:56:80:8a:2c:15:be:76:49:57:37:24:c3:0d:43:
d9:51:55:58:d4:80:5a:c4:d9:b7:93:97:a7:48:7a:7d:72:72:
be:f7:48:40:29:e6:2c:2d:b7:37:57:1b:64:45:ad:b3:31:c5:
6c:1d:be:3f:47:86:04:cd:b0:ed:c6:e4:e8:f0:c4:97:08:d6:
60:7b:17:a8:b6:03:87:09:0c:28:9c:8a:eb:27:b2:86:0b:2e:
e6:c9:6c:32:d2:cd:8c:10:af:af:59:8a:74:21:47:0b:fe:26:
11:e6:20:7e:18:dc:ff:ac:75:6e:11:4a:58:5d:2d:b8:23:63:
51:55:ca:52:36:ab:62:39:2d:7a:22:44:47:a4:1c:7e:83:bb:
db:cc:49:c0:60:f9:a2:0c:6d:4b:ac:2b:34:d2:38:9a:2b:ff:
ae:8e:25:40:98:f6:7e:e5:96:fa:50:d4:d3:62:3d:7e:b4:06:
e3:6a:5c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 19:21:43 2026 by rpki-client