Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/Yyd_YvlD8uowDxxmixgFWBYqZdA.roa
File: Yyd_YvlD8uowDxxmixgFWBYqZdA.roa (raw, json)
Hash identifier: 0W1A1n6VOoftwUSKqW1jE3B0LfMdIV7E6yqGqdLCuo4=
Subject key identifier: 63:27:7F:62:F9:43:F2:EA:30:0F:1C:66:8B:18:05:58:16:2A:65:D0
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0398234928C9EE8BA2AEECFFF44259F6E
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/Yyd_YvlD8uowDxxmixgFWBYqZdA.roa
Signing time: Tue 25 Aug 2026 15:20:29 +0000
ROA not before: Tue 25 Aug 2026 15:20:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24940
IP address blocks: 139.28.242.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:34:92:8c:9e:e8:ba:2a:ee:cf:ff:44:25:9f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63277f62f943f2ea300f1c668b180558162a65d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ed:92:cf:9a:00:1a:a7:ca:ba:d3:19:ab:cf:
d6:03:4a:41:55:40:cc:28:62:07:7f:c0:38:86:58:
53:3f:49:15:a6:c2:58:bf:a3:ad:83:22:e0:dc:f0:
ef:1b:db:9a:5e:09:24:91:cd:8f:19:06:e5:fd:dc:
24:5a:21:60:be:30:1a:03:2c:74:7c:bf:77:50:9c:
19:42:af:cf:be:56:90:31:fa:c5:71:02:eb:8a:8f:
1e:8e:ce:9a:6b:33:30:38:0a:48:06:6a:e4:49:bb:
6e:5e:e5:73:ea:31:05:7c:ea:e7:5c:1a:b7:30:b4:
16:a8:a4:5a:76:c4:ae:94:ea:e9:f2:93:75:9e:7a:
23:01:c5:25:6f:dd:0a:3d:fe:8f:2c:04:31:0a:7f:
53:2c:f9:71:05:c4:36:49:36:82:a1:63:6b:b2:36:
34:9e:da:8a:a7:b2:38:d7:f0:cb:53:15:af:5b:cd:
ba:56:f4:fc:c7:14:36:df:b5:8b:05:6e:5e:8f:bd:
36:46:2e:ee:c3:ad:1f:fc:d8:11:c4:0b:42:ce:bc:
92:2e:9d:6f:e5:3a:57:06:fa:2b:86:1e:bf:70:5d:
ae:ac:1b:36:4a:e2:85:b8:36:96:79:d9:0b:64:b1:
b5:80:79:d1:ab:e2:6e:7e:01:85:bb:ae:92:13:30:
2e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:27:7F:62:F9:43:F2:EA:30:0F:1C:66:8B:18:05:58:16:2A:65:D0
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/Yyd_YvlD8uowDxxmixgFWBYqZdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.242.0/23
Signature Algorithm: sha256WithRSAEncryption
03:67:08:29:78:90:c6:48:48:0f:7d:73:68:c7:63:cb:f6:9b:
72:8a:0d:84:2f:73:b4:3f:9f:c3:bc:de:86:e7:31:ed:3e:a9:
cc:14:04:35:03:53:73:b8:08:dc:04:9d:e9:40:f7:e5:5d:72:
8a:bf:80:33:db:93:ee:a4:3c:74:2b:b1:84:42:60:a9:cc:05:
ce:0d:d6:79:67:34:93:64:43:a5:56:d5:94:7b:0a:34:87:f5:
b6:b7:56:63:a0:d7:93:44:c0:7c:35:2b:1c:84:dd:2f:2e:8f:
c9:34:8d:bc:61:26:f7:62:94:7b:d6:86:61:75:58:6a:7d:63:
79:23:5c:bf:25:45:2c:a9:22:c3:3a:e5:30:f0:db:57:9c:72:
6f:36:a0:24:f7:c4:24:d5:36:ad:13:dc:08:6a:b6:83:69:cc:
44:8e:88:66:2e:79:af:08:c9:23:33:8f:5b:16:4b:a4:4e:7f:
f2:5d:e3:bd:5f:64:a4:23:8c:3c:a2:7c:8f:6f:03:39:92:ad:
1e:bf:1a:06:64:05:de:88:31:ea:af:aa:7b:37:fa:a3:1e:e4:
da:ef:4c:92:df:30:94:71:21:4b:6f:b6:0b:e6:8f:cc:3a:df:
d6:67:55:e3:10:a5:8d:d3:cf:6f:f3:04:67:94:38:e2:ba:ff:
9a:3b:09:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:05:02 2026 by rpki-client