Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ybUnhncN-JOAsPRj2XqbDz6-2UM.roa
File: ybUnhncN-JOAsPRj2XqbDz6-2UM.roa (raw, json)
Hash identifier: Ks6RHQUEOa2+dNVg9/hPorS8mPEX5yrmePl9RftAdf8=
Subject key identifier: C9:B5:27:86:77:0D:F8:93:80:B0:F4:63:D9:7A:9B:0F:3E:BE:D9:43
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01A0620C7BB2842550F4670C404C68BD9B73
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ybUnhncN-JOAsPRj2XqbDz6-2UM.roa
Signing time: Wed 02 Sep 2026 12:16:20 +0000
ROA not before: Wed 02 Sep 2026 12:16:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.144.213.0/24 maxlen: 24
45.151.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:0c:7b:b2:84:25:50:f4:67:0c:40:4c:68:bd:9b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Sep 2 12:16:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c9b52786770df89380b0f463d97a9b0f3ebed943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b5:d4:e7:f0:0f:62:4b:60:c4:bb:cd:1c:bb:
f3:a4:a5:47:b7:db:5d:8b:d3:46:e5:7f:30:cf:62:
a6:18:20:15:e5:d6:e3:a5:96:55:a7:de:72:40:1f:
ea:8e:5f:73:32:fa:73:16:e9:c7:af:2d:64:cf:70:
93:d2:ee:8d:63:d4:69:1d:59:6c:f3:94:34:d7:f4:
7d:c1:7a:97:d6:a0:3b:13:39:51:45:f6:15:8d:82:
b9:ed:0d:76:12:bc:af:72:69:a5:fc:3e:9f:d9:a0:
2e:b4:46:f5:30:e2:de:8e:e7:7c:a3:8d:82:59:0f:
e3:4c:4f:ff:cb:08:6c:31:13:14:19:3e:9b:4b:58:
25:b4:c8:67:ce:0b:24:c5:1e:f3:03:02:92:ea:2f:
6d:df:31:5a:c0:e8:b4:9b:86:f7:bf:9f:52:8a:8b:
66:07:9b:55:2e:a2:24:86:95:cc:19:fe:13:3d:b7:
7d:a8:01:e3:37:c4:fa:bd:b9:11:af:38:fe:54:63:
e5:14:01:14:fe:ef:0e:af:34:3e:d5:fc:d0:dd:7e:
1f:2b:88:16:25:7e:e2:a3:86:37:e4:0f:ec:c2:ad:
8e:74:3e:55:20:2b:85:d8:e7:a8:ad:58:1d:a3:f9:
78:95:e1:9e:66:ae:13:a1:5f:e3:50:54:ab:9e:38:
f3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B5:27:86:77:0D:F8:93:80:B0:F4:63:D9:7A:9B:0F:3E:BE:D9:43
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ybUnhncN-JOAsPRj2XqbDz6-2UM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.213.0/24
45.151.3.0/24
Signature Algorithm: sha256WithRSAEncryption
03:09:87:a3:0e:17:27:0e:6a:97:eb:4f:ab:f4:1b:3e:d9:bd:
bc:1f:ab:31:12:73:6e:d4:9b:7c:30:e4:9b:b3:67:f8:f5:8d:
af:89:62:45:f2:cf:ad:aa:92:ef:a4:89:b6:10:fb:9f:34:0f:
34:81:76:20:f4:56:eb:f3:fd:28:79:8b:a4:1b:05:cf:7f:f3:
02:ef:b3:21:e7:7d:d5:0b:e7:a7:e2:bf:6a:cc:8f:25:c8:6a:
0e:f4:75:73:8d:f8:e8:28:d1:e3:47:aa:df:d8:a8:b2:32:6c:
16:ca:37:27:1d:3d:92:af:a7:03:e0:3f:6a:38:88:cb:1b:5b:
0c:c4:bc:c1:1b:03:48:8b:94:11:f4:cc:fa:f4:e2:5b:3a:0f:
fb:d5:85:ec:8d:dd:44:89:b8:90:07:f8:7b:c2:59:a4:3f:19:
63:fe:21:5f:8b:33:c8:85:7c:b8:5e:00:35:64:c6:27:08:30:
32:db:c2:f7:db:7a:49:6c:02:c7:c8:33:b4:18:ca:bb:bd:97:
3d:27:39:9e:3c:6a:7e:5e:07:82:22:37:78:24:83:d0:90:93:
dd:b0:10:e6:c7:d2:9c:0d:51:d8:25:ef:f1:5b:3f:f1:41:11:
91:07:d6:08:2c:e2:07:a4:63:ba:1c:57:52:6e:3f:93:3f:d2:
68:1c:63:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 12:18:36 2026 by rpki-client