Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/yfN0eh47RKgu4eje0NcB0Hz1jCI.roa
File: yfN0eh47RKgu4eje0NcB0Hz1jCI.roa (raw, json)
Hash identifier: 9CI3Vvro4OhZO5yyzykpH+TxiYCfo4vQdso2YZzsjg0=
Subject key identifier: C9:F3:74:7A:1E:3B:44:A8:2E:E1:E8:DE:D0:D7:01:D0:7C:F5:8C:22
Certificate issuer: /CN=5151824c12bd3e2af7a987524a7a33a8f19d81e7
Certificate serial: 01A139DCC96521826D298D1787C90040D190
Authority key identifier: 51:51:82:4C:12:BD:3E:2A:F7:A9:87:52:4A:7A:33:A8:F1:9D:81:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UVGCTBK9Pir3qYdSSnozqPGdgec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/yfN0eh47RKgu4eje0NcB0Hz1jCI.roa
Signing time: Wed 14 Oct 2026 10:02:13 +0000
ROA not before: Wed 14 Oct 2026 10:02:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201775
IP address blocks: 195.226.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.mft
rsync://rpki.ripe.net/repository/DEFAULT/UVGCTBK9Pir3qYdSSnozqPGdgec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:dc:c9:65:21:82:6d:29:8d:17:87:c9:00:40:d1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5151824c12bd3e2af7a987524a7a33a8f19d81e7
Validity
Not Before: Oct 14 10:02:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c9f3747a1e3b44a82ee1e8ded0d701d07cf58c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:31:63:c8:f6:eb:51:79:e6:1a:f5:94:7e:45:
68:d5:3a:81:a2:7f:86:22:8c:66:32:5e:5c:5f:18:
61:cf:1a:d2:25:fb:d1:00:cd:c3:74:4f:dd:15:2a:
f2:2d:df:c8:70:b2:5b:f4:ba:5b:d7:5d:27:cc:b0:
05:05:3a:71:f6:ba:ad:92:41:56:14:ff:df:83:75:
b2:c5:97:cc:cc:5d:24:dc:85:95:a4:91:29:b1:9a:
ab:7b:98:01:e6:f0:17:6b:01:1f:2f:3f:89:7b:d4:
ae:2b:e9:8d:02:8d:69:ab:00:80:57:bd:ef:d9:c6:
7c:b9:ca:74:ab:32:42:07:7c:c8:7d:4b:ac:fb:bf:
1f:6f:c9:29:d9:e9:cc:5c:20:35:d6:dc:38:85:f0:
8b:ed:6d:ac:b7:75:87:f8:e6:43:5b:f2:d2:15:b2:
4f:67:31:d3:e7:c4:9a:21:ac:3b:d1:14:8d:9b:49:
58:b9:9d:98:5f:19:ad:df:19:83:61:b2:f9:3a:07:
b4:06:5f:4a:8a:17:84:61:33:2b:73:b3:ec:9e:46:
61:e8:81:31:45:dd:79:cf:37:80:07:4b:f3:73:0d:
04:e4:f8:d8:b0:28:3b:d4:b7:bf:1a:5e:b7:2d:8e:
ec:84:53:44:19:89:6e:79:25:89:af:96:24:6c:03:
38:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F3:74:7A:1E:3B:44:A8:2E:E1:E8:DE:D0:D7:01:D0:7C:F5:8C:22
X509v3 Authority Key Identifier:
keyid:51:51:82:4C:12:BD:3E:2A:F7:A9:87:52:4A:7A:33:A8:F1:9D:81:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVGCTBK9Pir3qYdSSnozqPGdgec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/yfN0eh47RKgu4eje0NcB0Hz1jCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/94d485-5d19-46bc-b336-faafe478bdce/1/UVGCTBK9Pir3qYdSSnozqPGdgec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.226.211.0/24
Signature Algorithm: sha256WithRSAEncryption
39:9d:5d:de:5b:3a:2e:65:5d:a9:18:28:4d:10:84:48:fc:f8:
40:96:c9:4f:15:b3:f7:80:61:bc:7e:a2:a4:8f:95:be:d6:88:
08:cb:05:81:f2:c5:2e:a4:65:27:43:5b:ab:2a:f3:8a:1b:b2:
d7:ef:62:60:b2:a8:66:a3:fa:46:a8:d1:11:16:81:a4:bc:74:
b6:59:18:01:42:fe:ff:b6:4c:0f:45:69:fb:17:13:e0:c6:63:
38:0c:23:68:41:42:b6:f3:7b:4b:b0:25:09:2c:f2:bd:59:de:
3d:4f:fc:60:10:04:ed:6d:09:f8:7c:7d:c3:83:bf:e3:7b:58:
f3:15:e4:c5:52:96:3d:7a:ae:a8:d5:5f:a6:35:73:5a:05:0b:
26:e3:07:72:ca:bc:ad:2c:a5:82:83:95:95:02:fb:7c:d1:a3:
9b:ea:6c:26:a2:85:0c:cf:57:43:f1:77:b1:d0:de:fc:5b:10:
dc:ec:9f:6e:7d:8f:67:5c:57:78:74:7d:01:9e:bd:42:df:37:
d6:57:69:0e:96:59:b1:c0:ad:10:d1:c2:92:88:5b:64:50:df:
67:7d:63:eb:e5:8a:c6:4d:f9:19:51:f8:1f:37:d5:43:69:b2:
e1:45:77:6e:09:dc:51:dd:e6:d8:67:8b:bd:ac:a3:23:9c:34:
60:4c:ad:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:12:08 2026 by rpki-client