Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yLH62CVCxiY5dJIt1NWJQyYRntw.roa
File: yLH62CVCxiY5dJIt1NWJQyYRntw.roa (raw, json)
Hash identifier: eUY1BjCPgg/HW65iKRobR6dqXZ9hH2dNvwlzepDr9x4=
Subject key identifier: C8:B1:FA:D8:25:42:C6:26:39:74:92:2D:D4:D5:89:43:26:11:9E:DC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019D0F61A5469A20C84E7808A0031CA08F78
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yLH62CVCxiY5dJIt1NWJQyYRntw.roa
Signing time: Sat 21 Mar 2026 07:52:30 +0000
ROA not before: Sat 21 Mar 2026 07:52:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204415
IP address blocks: 94.156.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 02:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0f:61:a5:46:9a:20:c8:4e:78:08:a0:03:1c:a0:8f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 21 07:52:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8b1fad82542c6263974922dd4d5894326119edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:13:02:d8:af:87:23:ac:22:2b:52:ff:f3:11:
c5:c8:c9:c1:5f:81:e1:0b:bc:4b:81:e8:1a:08:a8:
a5:44:2a:f9:7c:e1:85:5e:10:a9:dd:a4:6b:ae:21:
09:99:33:bf:9e:2d:e6:17:b1:e3:54:ef:ce:93:d9:
50:59:58:74:b2:ac:10:95:06:c5:62:09:1c:74:9b:
a8:f3:e1:ce:e8:b9:bb:73:6e:ae:e3:57:de:c9:83:
a4:c6:69:2d:9a:30:50:97:b3:34:6b:0d:c4:f5:99:
ab:d5:10:75:69:c8:4e:2c:50:20:72:96:27:2a:b4:
10:d5:58:14:f5:3b:c0:c6:be:08:5a:86:fe:ac:9a:
de:bb:e0:a7:96:c0:5d:94:4f:8c:bd:9d:cb:3a:77:
27:df:0a:84:e7:ef:eb:fb:96:5a:2f:ab:a7:ea:f0:
79:d4:c3:af:44:68:fe:ff:44:11:e9:1a:a8:64:b8:
68:c5:cf:e3:36:5c:24:65:c6:33:47:f8:cf:51:2e:
be:75:14:45:26:4a:ef:ff:03:1d:46:03:0c:bf:f5:
7b:38:0b:14:9b:34:3b:08:d0:8b:6a:47:e6:55:4e:
81:17:a4:67:5f:2c:29:8a:7f:e2:aa:b8:c7:e1:17:
67:75:bc:12:88:9e:6a:4f:76:9f:c1:fe:50:87:aa:
fb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B1:FA:D8:25:42:C6:26:39:74:92:2D:D4:D5:89:43:26:11:9E:DC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yLH62CVCxiY5dJIt1NWJQyYRntw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.8.0/24
Signature Algorithm: sha256WithRSAEncryption
18:7d:fb:4c:2d:29:dd:eb:ab:12:4f:5a:9a:35:40:cf:98:22:
75:b7:cc:07:27:1e:49:4b:11:45:e4:46:23:6d:91:74:85:37:
8f:7b:a3:1f:8e:9b:9e:67:63:55:70:76:f0:80:ff:2f:65:12:
51:d6:56:30:c5:d8:92:1f:8b:d2:d4:25:2f:1d:a8:53:37:04:
c3:e1:70:04:3a:08:f9:6a:e9:0a:32:a3:69:50:d7:fa:14:65:
d4:7b:91:80:13:5e:82:61:e3:77:2c:69:05:2f:26:86:84:ea:
e2:3b:08:87:21:9c:0a:c9:dd:cd:e7:35:21:70:3c:6c:cd:29:
a8:1c:54:2d:a7:3c:d9:0c:a4:37:94:c3:94:fe:ad:36:cc:04:
a7:30:ff:fb:e6:9b:7a:78:69:55:83:13:d5:69:b2:b3:65:21:
28:2c:7d:1c:43:34:af:60:58:4b:70:94:e1:c4:40:be:94:a3:
fa:97:dc:e5:1b:32:01:09:4d:f3:e9:12:d2:83:3c:07:6d:2d:
a8:72:17:f7:65:b3:50:a8:f3:d6:4a:4d:11:8d:58:a0:9e:97:
90:59:65:0d:1c:8e:e0:90:b0:b8:76:68:43:91:e0:f3:e7:d0:
f7:45:53:53:19:4c:d4:6a:2e:64:a4:f6:f5:56:44:74:11:31:
d2:3c:39:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 12:22:43 2026 by rpki-client