Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/yLdJIjgYrWUQ7TDFqO7qNYlFDjU.roa
File: yLdJIjgYrWUQ7TDFqO7qNYlFDjU.roa (raw, json)
Hash identifier: dXZjSLlSeRIZKGocGL3yryQVuOVReJZI8cSiDLaCvDc=
Subject key identifier: C8:B7:49:22:38:18:AD:65:10:ED:30:C5:A8:EE:EA:35:89:45:0E:35
Certificate issuer: /CN=940a74ddb75c69a845d7cc569aeda2667f141b46
Certificate serial: 019F23686C5B5A49783B7E185224804D1280
Authority key identifier: 94:0A:74:DD:B7:5C:69:A8:45:D7:CC:56:9A:ED:A2:66:7F:14:1B:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/yLdJIjgYrWUQ7TDFqO7qNYlFDjU.roa
Signing time: Thu 02 Jul 2026 15:17:53 +0000
ROA not before: Thu 02 Jul 2026 15:17:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204540
IP address blocks: 185.112.172.0/24 maxlen: 24
185.112.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:6c:5b:5a:49:78:3b:7e:18:52:24:80:4d:12:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a74ddb75c69a845d7cc569aeda2667f141b46
Validity
Not Before: Jul 2 15:17:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8b749223818ad6510ed30c5a8eeea3589450e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:36:de:dc:ea:ed:15:f4:79:18:25:44:03:79:
6c:d9:a8:63:04:5b:e8:a2:b7:88:4b:b1:77:2e:2e:
e8:8b:ed:5a:6b:b7:f2:9c:ec:b2:37:14:c0:56:a8:
61:2b:1c:d0:c2:a2:34:a8:0a:80:ae:26:d4:37:c1:
3d:68:ce:fb:48:0f:66:de:a7:d1:d4:b6:8d:aa:78:
dd:20:90:a8:48:63:9e:e5:b7:a5:70:01:3c:a2:6d:
d9:e3:e4:5f:f7:bd:10:71:35:87:4a:b3:a7:16:90:
7d:f2:54:a9:6f:9a:7c:90:5f:16:93:4d:9c:37:37:
c4:b5:40:7e:78:11:31:3c:67:76:46:6f:d8:a2:c2:
89:fe:db:0b:50:64:a9:c2:a7:da:72:35:9e:65:c1:
99:5f:f6:ae:78:a2:03:c6:53:5f:37:8f:be:7a:0f:
b7:af:6d:36:88:87:57:12:47:56:3b:ae:88:b6:ce:
2e:e3:9d:7d:3f:c2:80:cf:d2:a5:91:4b:f9:98:ea:
f2:d1:42:39:ec:63:f8:bf:25:67:f9:d5:cb:4c:a4:
57:25:fa:c6:c9:15:f0:36:39:d2:bb:e0:81:90:41:
23:6f:15:b2:fc:27:48:3e:1f:35:08:50:a2:ae:37:
99:31:3c:a3:d8:9a:0f:bf:8d:c1:4b:80:bd:ea:e4:
dc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B7:49:22:38:18:AD:65:10:ED:30:C5:A8:EE:EA:35:89:45:0E:35
X509v3 Authority Key Identifier:
keyid:94:0A:74:DD:B7:5C:69:A8:45:D7:CC:56:9A:ED:A2:66:7F:14:1B:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/yLdJIjgYrWUQ7TDFqO7qNYlFDjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.172.0/23
Signature Algorithm: sha256WithRSAEncryption
50:47:ca:c0:60:b7:d5:fc:05:32:71:36:2e:d1:8b:e7:ce:97:
a5:8d:17:e7:4b:cb:2b:64:3e:2e:25:38:8b:d4:c7:de:55:52:
a2:6d:45:b4:3c:0b:51:19:bd:62:e2:72:c1:65:99:d3:09:78:
0d:68:3f:aa:3e:bd:be:ea:51:41:80:30:63:2a:7c:a4:11:86:
4f:49:48:49:c1:a5:70:4c:09:f4:86:ea:e3:8c:6f:32:4a:b5:
4c:4f:69:73:7a:47:26:33:57:1a:63:75:1a:eb:db:4c:23:19:
17:97:3b:b9:78:f5:c8:18:9b:7d:8d:7b:6a:8f:ba:ce:02:df:
5d:2e:e2:31:54:e6:ea:c8:b8:9e:6f:a5:f3:2c:e4:d3:bd:f9:
be:bf:44:ff:ac:ee:1e:a3:65:cb:ef:b8:e4:ad:87:68:5b:3b:
3f:5c:68:29:ff:b4:63:d4:09:1f:04:f2:c1:26:b2:93:12:ba:
5e:61:0c:36:a1:1f:72:61:b0:0b:ce:c7:2b:ae:78:54:2b:c7:
c3:25:44:19:12:2a:d4:45:1a:f8:78:4a:3d:17:49:1e:90:1f:
0c:81:3a:43:5a:33:4f:fd:f5:4d:5e:bc:5f:6d:be:30:60:1e:
32:14:b6:81:09:81:c7:c1:a8:77:46:2b:c7:fb:ee:0d:fc:29:
50:7a:c1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:25:02 2026 by rpki-client