Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/YXF2ni93IOvIBCTInPSwm_emGx4.roa
File: YXF2ni93IOvIBCTInPSwm_emGx4.roa (raw, json)
Hash identifier: bTUZJVGtVTHwvzmdmHyB5DS1kO2SVHUs+s7WT19tt1w=
Subject key identifier: 61:71:76:9E:2F:77:20:EB:C8:04:24:C8:9C:F4:B0:9B:F7:A6:1B:1E
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0398242253EBC9AE83C2FB5FC29A8E849
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/YXF2ni93IOvIBCTInPSwm_emGx4.roa
Signing time: Tue 25 Aug 2026 15:20:33 +0000
ROA not before: Tue 25 Aug 2026 15:20:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197537
IP address blocks: 176.53.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:42:25:3e:bc:9a:e8:3c:2f:b5:fc:29:a8:e8:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6171769e2f7720ebc80424c89cf4b09bf7a61b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:15:11:1a:24:3f:2d:16:ab:a8:70:90:4f:56:
74:03:29:14:b2:be:85:5d:14:8b:3b:88:b8:df:56:
d6:9f:ba:87:65:73:d9:c8:33:69:2e:e1:cd:18:5a:
19:55:3f:26:80:42:4b:d9:a6:c0:d2:a8:ac:3a:15:
cc:f6:0c:59:ed:c2:1c:15:fe:2d:6c:f8:97:8a:03:
d5:ca:ed:b5:49:84:8f:b5:06:2a:c5:06:a4:56:0f:
d9:1d:dc:af:6e:06:84:50:75:a6:80:9c:8a:a8:55:
51:3a:e7:a1:4b:64:ff:ce:09:52:36:ed:64:c1:4a:
13:2e:49:ac:56:1f:8f:41:d5:8e:73:45:21:56:e8:
c1:ea:10:08:4f:21:7b:ed:71:b4:44:c6:ff:20:98:
d0:cb:80:1d:91:73:4c:b0:89:1e:e8:1d:80:30:ba:
85:ca:1a:53:79:1d:cc:03:7b:a1:af:c9:aa:68:15:
ea:42:04:0f:a7:af:d3:cc:c7:9f:77:dc:f0:48:64:
76:a9:91:dc:18:aa:6a:ce:2b:a0:02:c1:1e:60:0f:
f3:4b:91:13:db:d1:69:e8:f8:06:0a:14:2f:3e:74:
d6:a7:eb:26:d6:67:cc:33:39:51:83:60:04:fd:df:
fa:34:8d:f1:91:ef:15:18:16:e6:f8:17:f4:e3:9d:
90:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:71:76:9E:2F:77:20:EB:C8:04:24:C8:9C:F4:B0:9B:F7:A6:1B:1E
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/YXF2ni93IOvIBCTInPSwm_emGx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.169.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:0f:cd:7b:5d:2b:12:5e:e3:a5:16:e1:60:bd:71:2e:5e:60:
53:b4:fa:93:76:21:80:0b:ae:29:02:2f:66:de:eb:a7:53:48:
2f:81:26:cf:f5:fe:a0:ba:76:14:94:bd:45:f7:db:de:d8:a5:
7b:29:ec:36:59:a6:87:4a:72:56:34:e2:4e:dc:1b:96:96:d9:
ab:28:72:85:f7:7a:71:a0:ea:de:e5:69:83:4e:0f:d0:f4:8a:
88:05:bf:17:fc:4f:69:a4:e7:a0:4d:15:b2:4c:87:02:7c:62:
3c:d8:f1:28:e6:fd:d0:07:d1:f6:b2:56:0c:ec:e8:9b:d7:d9:
0a:82:15:64:29:6a:98:73:34:ac:2c:58:87:f1:f3:27:bc:b6:
14:6f:09:dc:d1:ca:2b:51:94:cc:b0:e9:3d:1b:b4:05:bf:ef:
f7:f6:16:27:c8:6b:b3:23:f2:1e:16:ad:ab:28:f2:d5:95:6f:
60:6a:85:7f:1f:f9:32:8d:38:36:9b:e3:ff:7a:9b:65:42:4c:
e5:42:1d:2e:65:25:ef:9a:bf:0e:fe:65:92:fa:5e:7c:80:55:
a9:07:73:f3:78:f6:3c:c6:29:e0:93:1a:c2:b3:3c:34:1b:31:
5f:66:c5:22:5d:4f:55:fe:48:81:9d:7c:22:28:fc:f6:20:14:
d4:a8:f5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:49:40 2026 by rpki-client