Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/1yqa6lZRZYeSSmivZYQ4ikxatJs.roa
File: 1yqa6lZRZYeSSmivZYQ4ikxatJs.roa (raw, json)
Hash identifier: mjuZrhc0o+MFW3BdDUEXnqT8NQB8vf4lE8Az17wZWTc=
Subject key identifier: D7:2A:9A:EA:56:51:65:87:92:4A:68:AF:65:84:38:8A:4C:5A:B4:9B
Certificate issuer: /CN=9e795dd011953414715cc6875dfd39c61e5181c8
Certificate serial: 019DAEA0FB5ACF69CB56A238F517F35B31B1
Authority key identifier: 9E:79:5D:D0:11:95:34:14:71:5C:C6:87:5D:FD:39:C6:1E:51:81:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnld0BGVNBRxXMaHXf05xh5Rgcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/1yqa6lZRZYeSSmivZYQ4ikxatJs.roa
Signing time: Tue 21 Apr 2026 06:01:18 +0000
ROA not before: Tue 21 Apr 2026 06:01:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207243
IP address blocks: 185.161.228.0/22 maxlen: 22
185.161.228.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/nnld0BGVNBRxXMaHXf05xh5Rgcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/nnld0BGVNBRxXMaHXf05xh5Rgcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nnld0BGVNBRxXMaHXf05xh5Rgcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ae:a0:fb:5a:cf:69:cb:56:a2:38:f5:17:f3:5b:31:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e795dd011953414715cc6875dfd39c61e5181c8
Validity
Not Before: Apr 21 06:01:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d72a9aea56516587924a68af6584388a4c5ab49b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:85:dc:10:58:53:9e:5e:1a:09:4b:ea:66:ca:
33:6e:62:63:01:a3:cb:0e:73:ca:4d:67:ae:3a:69:
11:b4:7f:67:1b:60:7d:50:97:86:cd:44:80:80:26:
58:48:72:12:9e:a3:12:a6:2e:68:69:7c:db:65:42:
c6:05:0f:e5:18:b0:ce:d6:85:50:3f:21:1f:61:36:
0f:84:78:ed:c2:bb:13:d5:e9:ec:4f:96:8b:d0:19:
4a:22:46:a3:bc:e7:e5:86:00:ec:bc:05:04:91:fb:
ba:ff:16:a7:b2:19:61:7d:b5:e5:03:e5:43:6e:60:
db:88:66:79:cb:05:7d:7c:a4:69:58:42:a5:4a:58:
dd:a1:6f:36:8f:82:b2:34:2e:4e:73:59:5a:c5:6a:
10:af:ec:e4:69:52:c0:c7:29:d3:09:94:19:7b:ae:
4b:07:6e:e1:36:55:86:8a:44:56:8a:8c:35:75:fe:
f9:a4:07:14:f5:17:ab:04:6d:8d:bd:d5:8f:6e:43:
a6:e4:40:0d:08:38:92:04:06:41:60:91:27:2b:41:
9b:5a:50:81:e5:f9:2f:72:5f:2b:a5:fc:64:ab:e4:
72:a4:ab:68:13:7b:61:85:9b:d5:d6:2b:a7:8f:69:
42:70:a5:1d:93:cf:f5:bf:ca:0b:29:e3:08:4c:a1:
b9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2A:9A:EA:56:51:65:87:92:4A:68:AF:65:84:38:8A:4C:5A:B4:9B
X509v3 Authority Key Identifier:
keyid:9E:79:5D:D0:11:95:34:14:71:5C:C6:87:5D:FD:39:C6:1E:51:81:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnld0BGVNBRxXMaHXf05xh5Rgcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/1yqa6lZRZYeSSmivZYQ4ikxatJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/nnld0BGVNBRxXMaHXf05xh5Rgcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.228.0/22
Signature Algorithm: sha256WithRSAEncryption
07:30:ed:e3:65:da:ec:d6:71:53:7b:c6:4e:34:d4:2e:b1:1f:
d0:83:8e:6b:3f:6a:03:53:08:a2:3d:0b:a8:d2:ff:c2:08:4d:
1f:0a:eb:17:16:b1:a7:06:28:67:da:c0:6b:f9:ca:79:51:ab:
01:79:b8:a2:52:3d:e4:7a:5c:f6:3f:6b:a3:4f:13:f4:f7:48:
ff:c8:bc:a0:36:ee:6f:4d:9b:c6:aa:7b:5f:6d:d4:81:fe:e1:
72:87:4e:41:18:75:95:5f:f6:f1:b3:bf:d9:d6:00:21:17:80:
df:dd:53:da:3c:2b:9a:b7:09:2e:b4:37:a9:ef:2d:15:6c:41:
e6:30:a6:63:1a:56:fe:4c:fe:c1:18:65:f2:3e:0a:4a:6f:33:
90:cc:21:10:0d:14:a0:e0:5b:a2:9e:86:58:08:64:2a:ac:b6:
2b:c0:05:e8:9f:cd:36:38:4a:c6:a7:ad:73:ce:4d:66:a7:ab:
c2:46:fe:cb:61:eb:8a:af:2f:7a:0c:d8:a2:70:7c:6a:22:93:
1b:23:95:27:25:b8:65:c7:fa:0b:7a:38:fa:e7:0f:29:9f:24:
9f:50:c0:a9:7b:fe:e0:0c:8e:15:6f:cd:39:92:40:e3:93:96:
56:fe:c3:02:de:04:1a:18:69:6e:7a:f0:54:76:8e:d5:0f:1f:
3d:27:55:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:40:08 2026 by rpki-client