Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/y3WPRMJs-4Fjubl4VuKFfxKVlBU.roa
File: y3WPRMJs-4Fjubl4VuKFfxKVlBU.roa (raw, json)
Hash identifier: rtvEWsPLZYCdPMFY+GaC4LON6ikhfMQuVKxw4V3nCsQ=
Subject key identifier: CB:75:8F:44:C2:6C:FB:81:63:B9:B9:78:56:E2:85:7F:12:95:94:15
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019D6E6278413CE2D949BB88B4060FBE94FE
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/y3WPRMJs-4Fjubl4VuKFfxKVlBU.roa
Signing time: Wed 08 Apr 2026 18:37:20 +0000
ROA not before: Wed 08 Apr 2026 18:37:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214916
IP address blocks: 87.232.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Apr 2026 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6e:62:78:41:3c:e2:d9:49:bb:88:b4:06:0f:be:94:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Apr 8 18:37:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb758f44c26cfb8163b9b97856e2857f12959415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:be:49:d7:54:a4:65:96:2a:77:ed:b7:c3:02:
18:bf:f0:6b:87:be:9d:bb:66:06:22:2f:70:2f:c7:
ce:d8:e8:ff:f3:6f:28:f3:21:e1:00:40:fd:dd:4d:
8e:b0:2d:2d:94:d4:a1:b0:7e:d6:f5:9c:eb:3b:54:
08:e8:87:df:4e:96:ed:37:7f:73:29:ca:43:38:48:
06:21:dd:eb:56:c2:75:65:07:05:1d:03:a5:67:86:
86:c5:9d:f7:29:7c:ca:a0:27:54:c4:75:85:de:49:
66:ab:d3:82:1a:fd:80:f1:c3:7d:d2:60:58:2b:fb:
ef:4b:39:a4:49:45:96:7e:3b:7a:47:e4:10:02:09:
79:00:60:07:aa:8b:86:b2:ab:36:7a:99:04:a6:6d:
0a:6e:3d:6c:7c:b4:2c:12:5d:ec:75:3d:5e:61:eb:
fe:b0:5f:c2:ad:60:2d:a2:4e:63:eb:ff:ba:93:b9:
cc:17:60:ae:5c:32:23:d3:84:d2:71:0c:b7:ae:de:
39:96:e7:8b:60:69:1e:1e:5d:b1:d6:11:98:23:70:
15:0f:63:ff:9f:9c:f2:6d:0f:4e:30:da:98:27:b2:
75:fa:fd:b0:7b:e7:c7:41:fe:e4:bc:ca:86:a3:72:
fc:23:1a:ba:47:2b:33:ed:1f:30:c9:0e:7e:a1:e9:
31:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:75:8F:44:C2:6C:FB:81:63:B9:B9:78:56:E2:85:7F:12:95:94:15
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/y3WPRMJs-4Fjubl4VuKFfxKVlBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.115.0/24
Signature Algorithm: sha256WithRSAEncryption
39:05:bf:7a:7a:2e:be:bd:f1:0d:20:df:94:81:4b:b5:ce:4a:
ed:e0:77:28:4d:7d:f6:bf:44:56:dc:42:9b:10:8a:23:08:ce:
2d:13:f9:6f:08:3d:17:e3:8c:68:34:81:63:35:4a:10:47:7c:
9a:c4:d5:ce:34:69:98:04:cf:ee:39:1f:39:09:ef:fa:d2:e3:
47:39:c1:7a:b0:df:5f:90:5f:89:4b:33:3f:ed:25:f6:34:05:
19:4e:ab:fa:c9:45:c8:7a:cb:94:e1:a9:32:74:ee:7d:45:59:
ef:b1:fe:bc:0b:63:e9:4b:f1:b0:04:ab:39:bd:bf:91:0f:e5:
c1:f8:79:83:38:26:74:7e:44:19:9d:f2:98:fd:2c:0f:db:d8:
74:c6:36:0c:29:9c:3c:b9:2a:20:cc:9a:0f:70:0c:02:36:b8:
50:43:f6:13:51:a1:75:bd:19:38:34:ac:f4:3d:9c:ff:b8:87:
91:8f:c8:4e:65:cb:ff:f5:20:ec:a3:e4:f0:6f:01:e7:fa:42:
3c:1b:cd:bc:16:7b:28:2a:e3:dc:ed:94:02:0e:1e:95:96:9c:
6f:aa:d5:62:99:8f:66:6f:5c:2d:98:cc:2b:c4:2e:67:56:ef:
17:31:c4:19:81:e1:81:e3:05:6d:96:7e:00:2f:5e:c9:9f:3d:
8a:a4:f3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 18:08:46 2026 by rpki-client