Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/YeB1DjkbIzEHjDxVf6g0D0VyRSo.roa
File: YeB1DjkbIzEHjDxVf6g0D0VyRSo.roa (raw, json)
Hash identifier: pA6NBSEIs/hkUINClTfk7nBxNzOhtAHMNVaVGcMYLCQ=
Subject key identifier: 61:E0:75:0E:39:1B:23:31:07:8C:3C:55:7F:A8:34:0F:45:72:45:2A
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A03982314AE79D2179C151FC1BCAE94592
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/YeB1DjkbIzEHjDxVf6g0D0VyRSo.roa
Signing time: Tue 25 Aug 2026 15:20:28 +0000
ROA not before: Tue 25 Aug 2026 15:20:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6205
IP address blocks: 212.87.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:31:4a:e7:9d:21:79:c1:51:fc:1b:ca:e9:45:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61e0750e391b2331078c3c557fa8340f4572452a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:28:e1:40:34:1d:5e:fc:25:ba:4f:66:c6:5f:
2a:f0:55:3b:14:a9:6a:1e:01:9c:b7:ae:a3:c4:6a:
13:d7:3e:64:ca:f6:84:6c:cf:8a:9d:09:c6:97:6e:
27:da:38:16:e5:9a:e3:85:40:5b:c7:f3:72:a6:f3:
c1:0e:0e:4f:94:91:58:b3:27:5e:f2:d3:24:2a:09:
1e:24:a7:d0:d1:a2:5d:0c:f7:b4:e1:42:fe:ae:8b:
af:c9:9d:a3:b1:09:16:d5:95:9f:a9:7d:b9:7a:39:
f7:e9:f8:e3:92:46:66:b0:3e:7d:dd:df:8d:a2:40:
66:68:82:7f:cf:2c:81:f0:47:de:e1:46:72:e1:f9:
3c:33:cb:64:8a:b1:9a:8b:09:56:e9:9d:d0:1e:02:
2c:0f:15:a0:cb:fd:29:e5:de:4a:63:b6:59:9b:f2:
3d:3f:8f:2f:02:95:0e:0f:35:ca:e6:96:f6:72:36:
8f:03:42:95:80:4f:cc:1c:89:9d:f4:94:af:0d:a4:
0a:1c:ce:f0:e3:06:9e:fa:62:10:16:99:5e:10:54:
cb:ac:80:4c:e0:ff:fb:58:bb:6b:33:ac:6c:c6:7f:
97:ee:5d:a1:3c:87:33:06:d9:1b:45:d8:d0:6c:47:
0c:e5:a3:10:0b:9b:e0:df:00:a6:40:fc:e4:d6:f3:
f3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E0:75:0E:39:1B:23:31:07:8C:3C:55:7F:A8:34:0F:45:72:45:2A
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/YeB1DjkbIzEHjDxVf6g0D0VyRSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.197.0/24
Signature Algorithm: sha256WithRSAEncryption
78:e2:75:8e:d4:d2:e2:ef:5c:4d:b7:0c:39:a6:9b:7c:1e:01:
b9:b2:d8:75:f9:00:6e:f1:e7:f3:fe:75:8a:15:0e:59:2c:04:
a2:c7:02:89:c4:d8:34:08:55:85:2e:64:c7:24:a6:4a:90:ae:
fb:c1:5c:a1:ce:d7:cb:8d:44:75:72:21:c5:c6:60:0d:aa:45:
38:7b:9e:88:c0:f2:ab:5a:8f:4d:fc:3f:66:be:26:69:4b:29:
ae:d2:09:b5:ac:21:f1:3e:84:63:4e:a8:69:6b:50:af:05:9e:
6d:b5:79:f2:30:f6:42:e5:dd:c2:22:a6:4b:6e:d1:6d:6e:1a:
41:91:8c:b0:54:18:8b:85:25:44:51:d3:3a:0b:20:bb:df:e4:
0e:49:29:6e:09:bc:54:a8:cb:43:3a:53:dd:7f:9a:a7:3a:1d:
0d:bb:d4:6e:0f:30:16:4f:c3:ab:9b:df:6a:d2:e3:0a:11:47:
5d:d7:17:b6:f7:3f:09:22:72:a0:6c:50:55:7c:86:1d:07:fa:
3d:b1:c0:90:58:ce:44:ef:48:55:13:0f:9b:e8:19:3b:0b:ae:
a6:56:42:fc:db:58:15:36:15:9f:2d:11:93:a4:4c:87:eb:76:
8b:fa:ae:c3:d1:ea:6b:18:30:13:81:d0:7e:31:2f:a8:60:a2:
53:f9:75:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:05:04 2026 by rpki-client