Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/yoDY0V96Fumy7Ey8abkzpW6Lqms.roa
File: yoDY0V96Fumy7Ey8abkzpW6Lqms.roa (raw, json)
Hash identifier: nnjJ03yvJVhSkIkoxeOPNJ8bGZJAjfomnWRvx0DYW6M=
Subject key identifier: CA:80:D8:D1:5F:7A:16:E9:B2:EC:4C:BC:69:B9:33:A5:6E:8B:AA:6B
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 019F4208587A345157AE742802E62D9BC1D8
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/yoDY0V96Fumy7Ey8abkzpW6Lqms.roa
Signing time: Wed 08 Jul 2026 14:01:10 +0000
ROA not before: Wed 08 Jul 2026 14:01:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213751
IP address blocks: 5.56.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:08:58:7a:34:51:57:ae:74:28:02:e6:2d:9b:c1:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Jul 8 14:01:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca80d8d15f7a16e9b2ec4cbc69b933a56e8baa6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d0:0f:a3:aa:f4:e8:33:9f:29:fa:a0:2e:18:
be:27:c8:07:f7:81:68:bc:df:df:b4:a6:66:59:7e:
3c:df:be:40:91:12:53:f0:8d:f7:67:93:9c:de:78:
92:ed:28:08:a5:b8:d5:c8:33:12:0f:6a:0f:5c:23:
7f:66:25:05:6c:a1:18:77:ad:96:f6:7f:b6:d6:07:
09:87:a1:78:44:93:02:20:eb:43:7d:7e:11:53:2e:
2b:92:7d:a5:ae:91:df:25:34:41:83:ec:f9:8d:96:
5a:36:39:39:30:9c:92:8b:24:76:01:d8:ab:4c:e1:
61:95:f7:f4:a0:8d:21:01:a1:b7:01:e3:76:83:1f:
48:77:7a:a1:ea:30:50:2e:8f:5e:52:6f:26:9e:6e:
0c:54:0b:34:f6:4b:7f:39:9b:48:3f:26:2f:6f:b2:
19:c3:41:f2:fb:88:63:02:2f:9c:33:b7:d5:60:26:
07:c7:17:7b:21:43:9a:c9:16:3f:ea:71:a8:49:49:
3c:a4:0e:8b:99:7d:c4:31:17:e4:46:51:81:fa:bf:
1e:eb:3d:40:d7:40:48:e6:4e:94:91:8d:57:50:5c:
19:14:c2:a5:02:10:ec:1f:8d:f4:39:6e:c7:32:ec:
8d:eb:d8:fb:b1:22:4c:31:04:37:08:d8:50:66:14:
9e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:80:D8:D1:5F:7A:16:E9:B2:EC:4C:BC:69:B9:33:A5:6E:8B:AA:6B
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/yoDY0V96Fumy7Ey8abkzpW6Lqms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.30.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:d2:61:6f:de:bd:b1:5f:36:06:7c:f4:53:07:b9:e4:2e:ae:
55:c0:56:b2:11:21:23:8b:2e:b2:7b:62:e6:32:ed:bd:d2:6f:
6e:30:71:61:32:f5:e5:9d:9a:58:fe:11:2a:79:34:14:99:29:
9c:99:25:40:d5:51:d5:c1:bd:c2:b9:60:2e:fb:71:b0:82:58:
22:8e:19:1b:9c:62:03:10:ff:c0:02:b0:be:e1:5d:ca:00:f0:
e2:05:60:a7:37:c6:c7:84:ce:0f:7c:e1:ab:93:10:47:2c:51:
23:e0:50:8f:f0:9b:1c:b5:41:06:5d:74:ee:a0:f5:a6:69:4a:
36:4e:71:bf:63:39:4e:94:d7:99:0c:f9:91:5c:ce:0d:eb:0e:
50:db:ea:5e:bb:5a:32:d8:94:0a:a8:44:bc:33:2f:76:8d:cf:
b4:a9:4d:80:22:9f:75:04:6d:02:37:73:9f:15:e7:42:f2:15:
46:5d:16:e5:e9:1d:5e:e0:38:0a:61:be:a0:09:40:89:9a:06:
97:d2:90:33:89:43:6b:dc:c6:50:e1:cf:13:74:79:d1:74:7b:
6f:50:9b:9d:f9:84:53:64:f8:51:66:ac:c9:91:75:16:8e:24:
ec:55:40:a8:9a:ef:36:93:4f:56:06:00:d5:af:da:0e:a1:e0:
36:e6:a3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:01:50 2026 by rpki-client