Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/yytX6z-UgD_m9pf3_kgEgiT2POQ.roa
File: yytX6z-UgD_m9pf3_kgEgiT2POQ.roa (raw, json)
Hash identifier: 3RbgmrnsRsLF2URHt+dab8OKV2m4vBqwqKQUl1xF2CI=
Subject key identifier: CB:2B:57:EB:3F:94:80:3F:E6:F6:97:F7:FE:48:04:82:24:F6:3C:E4
Certificate issuer: /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Certificate serial: 019E04999F900720D4374AE9E9F66B920486
Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/yytX6z-UgD_m9pf3_kgEgiT2POQ.roa
Signing time: Thu 07 May 2026 22:40:37 +0000
ROA not before: Thu 07 May 2026 22:40:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214366
IP address blocks: 150.40.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 May 2026 16:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:04:99:9f:90:07:20:d4:37:4a:e9:e9:f6:6b:92:04:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Validity
Not Before: May 7 22:40:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb2b57eb3f94803fe6f697f7fe48048224f63ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8c:9e:f7:de:bb:c8:a9:7a:01:4f:d3:0d:99:
19:44:10:50:00:0f:f6:b8:6d:a8:24:45:64:23:f1:
63:93:54:3c:63:60:53:8c:42:24:2e:1d:4f:54:79:
34:2b:dd:9b:6a:16:d2:59:8d:94:4b:91:8e:c1:fa:
30:c9:27:5d:3d:12:6e:57:3c:5c:cd:2b:14:bf:5d:
75:ca:e4:ca:5d:d6:0b:68:58:76:39:5b:f9:82:69:
8f:08:aa:0e:8b:9b:58:f0:30:74:c7:1f:5c:c0:1a:
c8:ee:7c:eb:56:99:a3:d3:fa:17:82:03:38:81:e4:
b2:87:37:4a:b4:1b:a8:72:66:54:86:d3:48:ae:94:
33:2f:ea:26:37:ed:80:5b:12:48:d9:dd:db:3d:0d:
cc:61:eb:fc:5b:47:08:15:83:bc:79:b0:82:84:18:
47:9a:7c:b2:35:60:1b:13:ae:b9:30:d9:a2:2a:d8:
9a:0d:88:d4:d0:ad:86:b2:dd:3e:a5:27:2d:8c:0b:
1a:af:f4:f5:11:71:d3:08:aa:a2:3a:ed:e1:9f:1e:
ee:be:d0:50:5a:4a:b5:00:c2:27:6c:e9:4d:b7:b8:
2a:21:18:b9:31:06:9a:f2:5c:b2:22:38:3c:ea:01:
b4:c3:95:da:99:40:66:9b:da:fb:45:eb:a3:a8:5a:
56:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2B:57:EB:3F:94:80:3F:E6:F6:97:F7:FE:48:04:82:24:F6:3C:E4
X509v3 Authority Key Identifier:
keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/yytX6z-UgD_m9pf3_kgEgiT2POQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.40.101.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:bb:a3:a5:a4:22:fa:63:49:3b:de:a6:da:ee:08:fb:63:bc:
10:33:c7:51:1f:18:72:5e:09:8a:e1:9b:a1:a0:1e:69:01:40:
37:99:9e:d0:a9:81:93:c3:2f:1d:07:bc:f8:dc:2a:be:c9:32:
d6:90:29:2a:cf:69:86:6b:63:1c:97:ba:c2:41:e1:45:11:ff:
78:ca:21:87:87:b1:db:5f:45:f4:49:cc:b3:f8:9f:c9:d5:c9:
9c:c5:54:1e:13:1a:50:82:df:64:48:8b:c0:97:cb:1d:c3:25:
59:33:a3:7b:85:12:fe:28:eb:f6:9b:23:a6:d5:f2:9f:a8:28:
39:b5:a0:24:59:cb:44:60:60:e7:6d:ad:41:51:e5:49:34:76:
77:d8:df:16:ac:38:96:54:ff:ee:35:9e:0d:2f:00:a6:23:7a:
e7:81:34:45:79:0b:c8:97:53:55:66:7f:a9:38:56:5f:bc:ff:
aa:33:8e:3e:1d:9a:c9:2c:cf:a9:fb:9a:4c:73:5c:b0:28:18:
45:76:85:0a:6d:a9:38:fd:f4:6c:64:ed:14:47:fa:af:2f:e6:
37:86:c5:fc:85:47:13:89:59:00:45:00:f2:39:96:fe:43:78:
57:4e:7b:a2:7a:bd:35:bd:da:3c:19:e8:f2:90:6a:c5:12:75:
5e:44:73:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 19:13:23 2026 by rpki-client