Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/yWNqLsauinjwUp2IURrK1lRtWBI.roa
File: yWNqLsauinjwUp2IURrK1lRtWBI.roa (raw, json)
Hash identifier: LpvftI79u+NhKl+qc1VO3zOQiE2fcP3PJj5L5sc/ad4=
Subject key identifier: C9:63:6A:2E:C6:AE:8A:78:F0:52:9D:88:51:1A:CA:D6:54:6D:58:12
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A03E62367351564750700E1879354370A1
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/yWNqLsauinjwUp2IURrK1lRtWBI.roa
Signing time: Wed 26 Aug 2026 14:03:38 +0000
ROA not before: Wed 26 Aug 2026 14:03:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44547
IP address blocks: 37.221.77.0/24 maxlen: 24
185.231.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:62:36:73:51:56:47:50:70:0e:18:79:35:43:70:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 26 14:03:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c9636a2ec6ae8a78f0529d88511acad6546d5812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b2:f0:7d:ba:bf:be:7e:57:d5:06:2a:ba:7c:
4d:6c:4f:66:2b:34:21:a9:dc:cc:a9:44:d4:bf:fa:
83:40:a9:34:15:6e:8d:1f:4f:68:51:7f:fa:0a:36:
1a:e1:49:9d:ed:13:19:fb:dc:dd:e8:16:8e:31:35:
e2:f7:aa:a7:3e:fc:bc:03:98:8c:21:27:de:54:f6:
bf:1d:6d:44:b7:3f:6f:5b:49:44:f3:8b:fb:08:11:
88:74:02:ea:4c:51:13:30:77:d4:95:52:9d:e6:72:
c7:c0:e3:02:e2:81:5e:18:b6:e9:cb:4b:e5:8f:d9:
98:b3:8c:ce:00:3a:f1:63:ab:13:ec:cf:b3:7c:cb:
25:d0:3f:74:fa:ae:18:8f:41:15:c3:ef:5b:e0:f1:
49:19:dc:44:4a:97:b4:05:a4:40:ce:22:53:f9:86:
5f:c2:49:5c:05:cc:3a:11:1f:d2:59:c4:ac:b4:e3:
2b:25:05:fc:1d:e9:87:7c:54:23:5c:6b:06:42:cc:
20:35:b4:ec:17:5e:55:c2:f1:04:07:e3:94:f6:93:
25:c1:e9:77:ee:d6:9b:25:5a:43:46:8b:af:e8:a3:
5e:71:bf:d8:70:2c:f1:06:5b:51:62:b9:86:d0:e7:
13:83:78:bd:1f:e7:16:0f:04:b4:33:2d:c7:8b:a1:
a2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:63:6A:2E:C6:AE:8A:78:F0:52:9D:88:51:1A:CA:D6:54:6D:58:12
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/yWNqLsauinjwUp2IURrK1lRtWBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.77.0/24
185.231.226.0/24
Signature Algorithm: sha256WithRSAEncryption
23:ea:e1:4a:05:bf:ee:fb:60:79:85:1a:7f:29:07:a9:a7:47:
5d:75:6a:27:c4:24:31:dd:c1:a3:6e:16:8f:b1:d9:41:b9:f1:
47:f4:57:83:96:e9:e3:2d:15:8d:f2:60:57:0e:27:a6:a9:1e:
eb:01:07:d1:2e:be:cd:d1:15:1c:0e:96:e3:7d:91:ac:84:59:
81:3d:0e:d4:f4:96:49:78:e3:03:81:27:b8:4c:e6:c5:cf:9b:
43:e0:39:a2:26:a1:f4:d3:20:5f:e1:a0:de:74:c4:18:8f:3c:
f4:aa:32:ce:a0:74:55:1b:1c:39:c7:66:7d:1a:e5:05:de:6f:
9c:7f:74:2d:95:41:94:e4:04:2d:4b:de:95:d3:4b:f4:4c:2f:
a8:16:dc:19:46:9b:6b:94:72:79:9e:23:c3:ea:79:38:f0:2c:
89:78:13:04:37:f4:ce:da:f7:94:55:12:db:1f:db:66:a8:6b:
96:79:d0:57:a5:15:6f:45:6b:95:fa:40:9b:38:ca:83:67:e2:
41:5f:e5:55:0a:75:85:0e:88:31:31:cf:9b:d0:7c:d6:09:47:
a3:0e:5a:ce:a0:8c:8d:e0:d7:09:60:4e:34:46:f7:ed:3b:fa:
91:43:c0:f9:04:98:6b:ab:b3:8b:b3:75:70:fb:4e:19:16:a4:
ad:8d:c9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:05:04 2026 by rpki-client