Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Y_jD6XfBGC3j1T4Uy_rcOPU_LbU.roa
File: Y_jD6XfBGC3j1T4Uy_rcOPU_LbU.roa (raw, json)
Hash identifier: 3ky9pLDHWdQLzf5p8PePoy070w7qJI1DOvNViZYREg0=
Subject key identifier: 63:F8:C3:E9:77:C1:18:2D:E3:D5:3E:14:CB:FA:DC:38:F5:3F:2D:B5
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 019FF60C0909B32B88853C39381D52AEA3C5
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Y_jD6XfBGC3j1T4Uy_rcOPU_LbU.roa
Signing time: Wed 12 Aug 2026 12:56:51 +0000
ROA not before: Wed 12 Aug 2026 12:56:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15830
IP address blocks: 80.242.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:0c:09:09:b3:2b:88:85:3c:39:38:1d:52:ae:a3:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Aug 12 12:56:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63f8c3e977c1182de3d53e14cbfadc38f53f2db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0a:d5:f6:54:0c:5b:48:0b:3f:bc:f5:fc:be:
bf:2a:25:90:00:43:06:d7:ed:6e:a4:d3:aa:99:1c:
4a:f6:5d:44:9b:57:94:51:a4:07:77:81:0d:29:85:
50:0c:a3:5a:30:84:96:f8:04:8b:26:79:14:d1:94:
c1:bf:55:df:38:7b:f6:1e:c6:45:4e:a5:62:93:f8:
4b:d3:04:42:a7:f7:cd:d4:b5:b1:10:2b:17:79:ad:
38:5c:71:13:f0:25:00:df:d1:83:c1:1d:46:4b:4a:
ee:63:36:84:f1:3e:7b:e1:50:bf:7c:ff:bb:4e:d1:
8b:e3:bd:b5:df:c2:1d:0d:a3:1d:85:67:3b:6b:58:
ae:08:6b:ec:03:26:59:29:48:16:c8:3d:9d:ef:99:
11:f8:22:7a:09:28:9f:dd:5b:cf:2d:c4:cb:61:8a:
67:76:03:30:87:bc:5e:1b:85:0c:39:26:47:3a:bf:
97:d5:0a:51:eb:bd:56:08:18:d5:58:62:5e:ec:e1:
2a:55:ab:d3:57:dd:95:68:4a:94:1b:df:4f:39:fb:
fd:1e:4a:65:45:43:fd:e3:dd:39:58:f8:38:d5:58:
5a:9b:bd:5a:49:e9:dd:6f:64:47:1e:e8:0d:df:04:
84:17:a4:8b:e2:3f:df:0f:e9:d8:ef:27:c3:4e:20:
8f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F8:C3:E9:77:C1:18:2D:E3:D5:3E:14:CB:FA:DC:38:F5:3F:2D:B5
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/Y_jD6XfBGC3j1T4Uy_rcOPU_LbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.242.141.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:36:11:e0:4a:bb:14:b9:dd:f5:c4:4a:e9:74:52:d6:5e:67:
12:02:cd:2f:21:62:86:85:e7:ed:ef:19:af:ec:45:b4:68:74:
f0:dc:3a:8a:42:91:a7:90:fd:ea:c8:30:b9:4e:42:57:5b:c2:
e2:72:77:3f:b0:fd:56:d7:7f:6a:68:4c:dc:b7:4f:87:9c:34:
bc:cb:82:69:76:cd:2c:ad:30:2f:9f:bd:61:7d:0a:96:8a:45:
1b:d7:f2:17:68:85:44:5f:45:b1:0f:e4:c4:fa:52:d7:f1:ba:
d1:f0:28:d2:a9:b8:15:02:e5:a0:d6:3f:e7:b4:04:83:3e:56:
49:d3:8e:e1:9a:54:db:95:de:c3:28:d6:28:ce:30:3f:7b:b1:
ec:37:69:1f:41:27:cc:c7:df:95:e7:a0:b7:0d:13:d3:e8:3e:
07:cf:d3:dd:a5:9b:01:4b:dd:6c:dc:cf:28:2d:18:a4:eb:c8:
77:ca:f2:f7:8c:d6:d9:89:1c:fc:5b:67:35:52:d1:30:c1:cd:
d6:ef:99:17:cc:e5:a8:27:77:9c:25:9e:f4:8e:5b:03:98:4f:
03:82:b4:d4:fd:d2:48:05:a4:8e:6f:75:68:19:9c:08:2e:4a:
4f:31:10:40:34:e4:df:94:24:ec:89:a0:03:be:a4:76:59:75:
ca:4e:d4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:49:38 2026 by rpki-client