Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/yVxGRjP76X2tNQ24AA7xo_6KamE.roa
File: yVxGRjP76X2tNQ24AA7xo_6KamE.roa (raw, json)
Hash identifier: tJJ6FsCqwNoqBTq/q2hQl8Glf/rugrEzVdnho7DXGx8=
Subject key identifier: C9:5C:46:46:33:FB:E9:7D:AD:35:0D:B8:00:0E:F1:A3:FE:8A:6A:61
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 01A11C7C8B523C74B7FA7E87C9C84B9FED90
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/yVxGRjP76X2tNQ24AA7xo_6KamE.roa
Signing time: Thu 08 Oct 2026 17:08:06 +0000
ROA not before: Thu 08 Oct 2026 17:08:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30042
IP address blocks: 185.179.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 17:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:7c:8b:52:3c:74:b7:fa:7e:87:c9:c8:4b:9f:ed:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Oct 8 17:08:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c95c464633fbe97dad350db8000ef1a3fe8a6a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3f:5e:7b:dc:47:49:a1:4e:42:13:f7:9c:07:
04:1e:f6:ca:6a:48:06:8f:3b:2c:59:f9:4b:4a:ca:
52:8d:5c:d5:dc:95:55:14:41:d4:b9:9b:c7:b9:0e:
2d:e2:22:3e:b1:56:f6:67:c8:64:3a:3c:bd:35:70:
e7:23:03:49:b5:42:df:97:40:d4:f2:1b:cd:91:0e:
45:05:01:4c:6c:f4:74:34:c5:15:3e:34:a7:78:46:
85:da:a8:ad:4b:d3:27:27:1f:98:b7:4a:97:69:9d:
82:1a:f4:3e:d1:db:a4:44:d0:6b:cf:57:37:a6:9f:
9f:ea:8b:3a:a5:73:40:a7:df:33:8a:f7:eb:56:9f:
7b:61:b9:63:95:d4:2c:e3:e0:63:a0:d8:db:c7:0a:
08:c9:c4:e7:d4:21:02:9c:40:4d:a7:11:3b:cf:eb:
df:df:f8:05:35:cb:df:3d:28:59:de:4f:c7:07:e0:
54:6c:c6:e9:95:f5:36:80:16:bb:fc:29:14:42:b5:
0e:0d:c3:18:84:8d:ba:6b:20:9b:3a:d2:84:10:14:
88:19:6e:df:d7:60:6b:30:0d:87:66:eb:d3:80:6e:
ad:04:b7:07:80:9f:dd:69:e2:6e:b0:26:80:51:10:
fa:22:2f:ee:03:d9:dd:17:75:e5:e9:5c:fc:b7:8e:
ca:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5C:46:46:33:FB:E9:7D:AD:35:0D:B8:00:0E:F1:A3:FE:8A:6A:61
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/yVxGRjP76X2tNQ24AA7xo_6KamE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.217.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:43:4a:0b:1d:0e:88:76:e9:c0:74:05:4f:a5:2d:e0:bd:8f:
e2:11:9e:68:9a:58:af:ec:e7:c7:7e:55:d4:4d:5f:40:65:ad:
b8:26:4d:0f:43:ce:35:3a:41:9d:de:1e:85:85:f2:10:87:0e:
e6:db:b0:35:83:e0:86:20:d6:6b:5c:e3:ee:87:06:b2:d2:d2:
ee:1d:30:e6:33:c4:cf:03:56:d6:0e:90:9c:13:99:d6:ad:aa:
c9:5f:11:b9:c9:5f:c5:50:dd:7c:de:09:8d:ea:0a:07:d0:16:
b1:6a:4e:08:1d:7a:bf:16:e1:6f:70:9a:bd:ee:63:a7:97:b8:
27:d4:d8:41:b6:b7:7e:c7:69:1b:70:bb:2e:93:da:5e:a5:9e:
86:46:4a:5c:66:9b:f7:7a:7d:aa:60:33:8b:7b:b2:58:c5:5a:
cc:94:56:98:a7:19:25:ad:a0:61:c2:8d:c9:86:fd:b1:09:fa:
43:6b:ef:a6:ba:38:02:ee:d5:7f:a2:c9:65:63:51:bb:5c:b4:
be:e2:02:d2:21:fd:4a:fd:5b:5a:00:46:fa:f8:dd:92:42:a3:
2f:07:f6:ab:b8:00:c8:42:ce:8b:e2:18:cc:b1:79:e3:7b:84:
f5:67:da:0d:c1:4e:86:8d:d3:78:16:7b:b4:09:18:af:f9:50:
06:42:fd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:16:58 2026 by rpki-client