Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/y82g7JzHf3nPY8Heep_XW0P0lPo.roa
File: y82g7JzHf3nPY8Heep_XW0P0lPo.roa (raw, json)
Hash identifier: 915sGd5DFWPNaKnLsIWJyntUtOaj02nTQpkjEjgoQlc=
Subject key identifier: CB:CD:A0:EC:9C:C7:7F:79:CF:63:C1:DE:7A:9F:D7:5B:43:F4:94:FA
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019F6B2B87ECCC93C8FD6BD295B61D2B04D9
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/y82g7JzHf3nPY8Heep_XW0P0lPo.roa
Signing time: Thu 16 Jul 2026 13:44:02 +0000
ROA not before: Thu 16 Jul 2026 13:44:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401783
IP address blocks: 150.107.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:2b:87:ec:cc:93:c8:fd:6b:d2:95:b6:1d:2b:04:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Jul 16 13:44:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cbcda0ec9cc77f79cf63c1de7a9fd75b43f494fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fa:1e:52:92:0f:83:e0:1b:a9:95:cd:c4:6c:
0b:18:5e:25:a7:77:79:bc:4e:28:7b:81:e3:bc:3b:
76:98:ae:2a:01:cc:8c:ec:c0:93:a4:5b:2f:93:83:
e0:40:ab:c1:3e:73:db:76:bd:20:34:77:cc:17:6d:
00:ad:cb:5f:73:b2:74:0d:31:db:e0:8d:a0:4c:9d:
c5:37:53:f7:6a:ce:a2:f9:21:c7:f3:9c:fe:41:69:
ea:f3:22:63:5e:ac:ee:2a:8c:22:dd:fa:d3:26:f3:
a0:02:aa:38:37:9f:5d:4a:7a:ed:d8:12:d3:07:ba:
85:97:e5:41:2b:3d:c9:e7:7b:b9:d9:95:fc:59:b6:
cd:b2:f4:a1:80:5b:0e:cb:d8:c9:3c:62:28:ab:12:
ea:a9:db:49:ca:f6:83:92:ad:16:60:ef:62:33:53:
4e:5d:31:00:35:d9:2a:86:fc:69:20:b3:52:e5:21:
92:e0:55:6b:68:59:93:58:f7:d0:91:6f:56:01:24:
86:3e:cf:5e:87:53:d6:f7:d4:c0:62:eb:7c:c5:ec:
db:81:d1:30:2c:54:16:58:4e:59:d5:de:47:d1:b4:
3f:96:53:ad:6e:91:8c:2c:87:c9:b5:f9:a9:9d:4d:
3d:df:e9:f5:98:7b:25:1d:a6:4f:39:28:af:85:bf:
5c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:CD:A0:EC:9C:C7:7F:79:CF:63:C1:DE:7A:9F:D7:5B:43:F4:94:FA
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/y82g7JzHf3nPY8Heep_XW0P0lPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.107.48.0/24
Signature Algorithm: sha256WithRSAEncryption
22:5f:28:7f:88:c5:2d:f0:67:34:a4:0c:58:c2:46:38:c2:06:
1f:90:d7:ac:b1:60:d2:e6:47:74:2a:6b:78:97:9f:1a:40:84:
30:db:4a:d8:3e:ec:6b:26:05:4e:ce:eb:69:85:c9:93:53:52:
12:bc:83:28:1d:90:9b:ed:73:f0:34:83:0e:50:07:cc:34:c7:
d8:51:69:08:69:a6:77:0f:2a:d5:7e:89:17:63:d2:75:59:b7:
18:5a:7b:b1:26:db:00:d9:71:99:c7:12:eb:d8:0c:55:96:f5:
4c:7f:c3:96:53:e3:aa:7e:85:52:28:9f:b8:f8:f5:8f:ca:86:
01:74:f9:7b:c5:1d:98:93:cc:e1:c4:b1:4f:9f:26:76:9a:7b:
7a:ab:be:b8:a3:a3:3a:bb:0e:18:8a:93:da:0e:3e:14:09:11:
f2:62:74:ce:95:f5:18:bf:93:91:f9:78:f0:05:a0:e9:85:a2:
2a:98:fc:4f:cb:2e:6b:1a:38:0e:21:bb:ea:57:ca:e4:ac:08:
73:be:f5:aa:f2:e4:c3:83:11:0e:81:52:e9:4b:67:1a:a1:aa:
61:0e:ca:a1:70:94:63:b1:d3:8d:56:63:09:23:c7:d8:2f:e2:
96:64:f1:ea:f7:64:92:a2:18:2a:de:06:8d:06:e2:04:43:04:
1a:04:67:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:43:16 2026 by rpki-client