Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/c95266-25ca-454c-ac24-4f781c8aef0f/1/yZmsh7mjEloDuUu3XP4s7BKMJxI.roa
File: yZmsh7mjEloDuUu3XP4s7BKMJxI.roa (raw, json)
Hash identifier: tKrSiikfwDzL+7Qt8hJm8Ec0+A33IL7KJtAGJrO3uXg=
Subject key identifier: C9:99:AC:87:B9:A3:12:5A:03:B9:4B:B7:5C:FE:2C:EC:12:8C:27:12
Certificate issuer: /CN=4ba1b3e9db4ee5263d0ab1ba7aeffe7c5f5d6aec
Certificate serial: 01A110135C813741178E453A244CD9E776B7
Authority key identifier: 4B:A1:B3:E9:DB:4E:E5:26:3D:0A:B1:BA:7A:EF:FE:7C:5F:5D:6A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6Gz6dtO5SY9CrG6eu_-fF9dauw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c95266-25ca-454c-ac24-4f781c8aef0f/1/yZmsh7mjEloDuUu3XP4s7BKMJxI.roa
Signing time: Tue 06 Oct 2026 07:17:46 +0000
ROA not before: Tue 06 Oct 2026 07:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 262287
IP address blocks: 136.176.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c95266-25ca-454c-ac24-4f781c8aef0f/1/S6Gz6dtO5SY9CrG6eu_-fF9dauw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/c95266-25ca-454c-ac24-4f781c8aef0f/1/S6Gz6dtO5SY9CrG6eu_-fF9dauw.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6Gz6dtO5SY9CrG6eu_-fF9dauw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:13:5c:81:37:41:17:8e:45:3a:24:4c:d9:e7:76:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba1b3e9db4ee5263d0ab1ba7aeffe7c5f5d6aec
Validity
Not Before: Oct 6 07:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c999ac87b9a3125a03b94bb75cfe2cec128c2712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f5:7c:c9:1d:d5:f4:4b:f8:fb:88:c8:4b:9d:
28:a5:a3:de:d2:62:35:9f:9a:c1:ef:6f:e9:43:4b:
da:1f:66:9f:8d:25:e9:4e:38:93:b3:ad:ef:3e:00:
b8:1a:a6:a0:75:59:66:44:de:cd:52:11:d1:ca:3c:
29:b5:35:d1:cf:6f:9b:b6:ee:e7:4a:6c:f2:75:d9:
c3:7f:17:f9:5d:4c:fe:85:2d:f2:80:08:6c:f8:ac:
7c:da:3a:39:c5:ac:f9:58:4b:b1:0a:e1:17:2f:d3:
62:4b:10:dc:e5:02:66:04:e0:ae:37:b2:2c:7c:b6:
8c:cc:7e:92:4d:43:73:ec:a4:b9:85:b5:a0:cd:85:
87:2d:61:b7:d7:63:f1:40:a0:15:27:36:bb:ad:2a:
83:09:b7:90:10:0a:7d:5f:45:37:ab:59:c4:d5:70:
d5:0f:dc:f0:72:d1:42:42:ca:0f:2e:4b:f5:20:70:
65:cb:4a:88:50:0d:c6:1e:c5:c7:9c:bb:48:4e:08:
c1:09:29:76:64:84:40:fa:c5:ff:98:c4:62:ad:34:
42:02:5e:99:ba:46:c2:3d:d2:de:98:97:18:3f:ac:
62:1a:78:b9:a9:40:11:23:90:2c:f4:66:18:71:4d:
1d:97:73:32:4c:9c:1c:6a:90:82:68:00:f4:50:55:
e6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:99:AC:87:B9:A3:12:5A:03:B9:4B:B7:5C:FE:2C:EC:12:8C:27:12
X509v3 Authority Key Identifier:
keyid:4B:A1:B3:E9:DB:4E:E5:26:3D:0A:B1:BA:7A:EF:FE:7C:5F:5D:6A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6Gz6dtO5SY9CrG6eu_-fF9dauw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c95266-25ca-454c-ac24-4f781c8aef0f/1/yZmsh7mjEloDuUu3XP4s7BKMJxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c95266-25ca-454c-ac24-4f781c8aef0f/1/S6Gz6dtO5SY9CrG6eu_-fF9dauw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.176.192.0/24
Signature Algorithm: sha256WithRSAEncryption
95:20:0b:a8:76:21:09:5e:51:c7:49:d3:06:f8:3c:77:aa:a2:
a6:94:eb:a3:0a:cc:1d:bb:85:43:55:6d:33:d0:63:e8:7a:e3:
b6:2b:53:8a:c0:e7:23:91:c8:fa:6e:a4:36:87:21:da:b8:eb:
c4:c4:21:01:ec:02:62:95:26:d6:e1:05:43:d3:ad:e4:c5:03:
88:f7:62:4d:9e:13:5a:69:aa:59:4e:de:b9:74:ff:3b:9e:f0:
f3:6a:ac:b0:6d:74:ee:ea:35:94:7f:e4:e9:67:3b:c0:30:45:
03:a6:1d:70:11:fa:c5:c6:8f:7e:98:24:c8:04:d5:3e:d1:d3:
eb:38:b4:2d:58:0c:d1:f0:36:1d:1c:fe:50:ff:07:e2:1a:41:
1f:1c:60:ef:b4:82:31:55:8d:b3:a6:af:78:20:94:c0:66:d0:
a8:3b:bf:d0:ab:42:ea:3c:f2:d0:a3:52:51:1c:dd:be:c5:54:
17:ca:bd:d9:37:67:45:45:87:63:33:07:5e:59:e1:01:f4:c9:
14:3c:39:82:f7:98:37:ff:7c:a8:b0:49:05:49:0f:0b:2e:3d:
5f:0e:68:8b:6c:43:ed:9e:1f:f8:be:a0:1b:ce:6a:b6:ef:09:
31:b1:65:75:ed:da:d8:76:67:74:90:20:87:85:f4:4b:6e:8a:
19:5a:a9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:17:14 2026 by rpki-client