Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/pY0j-96u4J9fmRyp27A07mS_nkc.roa
File: pY0j-96u4J9fmRyp27A07mS_nkc.roa (raw, json)
Hash identifier: DYOaKS3dTRlvFOAMpWKFol+rOoVkO1JC60DIfTZaLhc=
Subject key identifier: A5:8D:23:FB:DE:AE:E0:9F:5F:99:1C:A9:DB:B0:34:EE:64:BF:9E:47
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019FC67F3FEECA77A7E9C345C863BB485658
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/pY0j-96u4J9fmRyp27A07mS_nkc.roa
Signing time: Mon 03 Aug 2026 07:20:55 +0000
ROA not before: Mon 03 Aug 2026 07:20:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15856
IP address blocks: 80.96.114.0/24 maxlen: 24
193.231.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:7f:3f:ee:ca:77:a7:e9:c3:45:c8:63:bb:48:56:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Aug 3 07:20:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a58d23fbdeaee09f5f991ca9dbb034ee64bf9e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:47:cf:b1:85:32:50:bf:8d:d1:48:7c:32:fc:
f3:43:c6:5f:3d:52:69:1a:7e:be:c1:1b:7c:f9:b3:
79:c1:1d:6c:44:41:15:e9:32:d0:14:ee:1e:cf:7a:
a2:8e:24:48:d8:a7:cd:7c:1a:52:4d:08:98:44:63:
b2:76:bf:85:44:f0:ad:52:fe:d4:ba:d6:ac:d4:cb:
ad:5c:c0:ec:e2:12:e1:9a:a5:ff:db:c1:f4:2f:9b:
16:e0:90:68:78:31:1c:f3:71:7e:6a:8c:5f:29:c1:
97:41:6d:f2:c4:9b:0b:f8:9c:55:e3:97:f4:35:fa:
df:17:24:94:ad:1c:b1:3b:4e:f9:9c:b7:d5:9f:d5:
c2:57:90:ff:80:e8:b7:81:3e:b6:c6:77:89:31:5e:
64:60:99:17:cc:cb:00:46:a8:e9:c3:21:13:90:8a:
a9:ff:4f:a8:0d:2a:41:bb:24:ec:10:d0:4f:bb:52:
c1:c6:db:52:af:e6:d9:0a:a7:58:6c:bb:8f:85:be:
ee:fd:53:c6:d9:57:68:e5:bf:11:e6:42:31:6e:d5:
df:3a:26:15:43:c0:30:1f:4a:84:9c:5f:83:93:f7:
06:5d:b5:fc:d2:14:27:01:55:e6:1e:eb:de:05:f6:
b8:c7:85:da:7e:7e:85:3c:05:4e:a5:80:20:16:38:
4d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8D:23:FB:DE:AE:E0:9F:5F:99:1C:A9:DB:B0:34:EE:64:BF:9E:47
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/pY0j-96u4J9fmRyp27A07mS_nkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.114.0/24
193.231.122.0/24
Signature Algorithm: sha256WithRSAEncryption
72:67:c7:69:a4:a5:61:b8:a7:34:64:03:f8:16:52:11:29:71:
8b:c0:17:1e:9e:fa:32:a5:04:64:6c:7a:f7:eb:45:7c:0f:33:
12:f0:14:61:e2:33:ac:6a:89:39:bf:fc:e6:66:c3:d7:05:6f:
91:f5:2f:73:f1:54:6d:b3:d1:ae:23:68:d4:08:6e:a6:80:cb:
ce:f7:cf:1d:75:07:1e:4d:c4:b8:09:fa:4f:cb:5c:1c:d5:e1:
8d:c1:28:16:49:72:26:17:dd:4e:7b:29:d0:31:21:52:5f:83:
64:f0:5e:38:c2:17:03:92:3d:45:cc:a9:20:04:33:c8:7e:45:
66:1a:d8:bc:04:5e:19:dd:65:87:64:d5:5d:5c:9b:19:a6:55:
37:98:48:86:ab:08:54:f4:f8:be:a5:f1:7c:67:a5:ba:54:6f:
cb:8d:ad:d9:8c:37:d5:b7:eb:f9:cc:2e:be:1e:a1:ff:cf:a9:
dd:86:7f:5c:24:f2:b4:33:88:29:2c:7d:a1:ab:aa:e2:8f:ec:
5b:6b:2e:b8:eb:3b:fc:33:07:48:71:0e:01:87:49:c1:28:1a:
42:6f:88:7e:4d:42:f7:fa:1a:1c:63:fe:df:16:9f:81:b9:1a:
18:6e:d4:35:94:2f:f8:31:7d:9d:de:a6:c3:97:a2:d7:01:eb:
f0:33:b5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:35:40 2026 by rpki-client