Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/Y87G3Pw27wWZ9znfpBc9V_SfukU.roa
File: Y87G3Pw27wWZ9znfpBc9V_SfukU.roa (raw, json)
Hash identifier: OHYqCWSov4owlbKweMbBbumLQm1HASPs3OFdZbLMM30=
Subject key identifier: 63:CE:C6:DC:FC:36:EF:05:99:F7:39:DF:A4:17:3D:57:F4:9F:BA:45
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 01A13F3F5CCA694729228550DDEBA0032BBD
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/Y87G3Pw27wWZ9znfpBc9V_SfukU.roa
Signing time: Thu 15 Oct 2026 11:07:59 +0000
ROA not before: Thu 15 Oct 2026 11:07:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200381
IP address blocks: 185.50.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:3f:5c:ca:69:47:29:22:85:50:dd:eb:a0:03:2b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Oct 15 11:07:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63cec6dcfc36ef0599f739dfa4173d57f49fba45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:79:62:99:ab:43:70:3b:71:3f:c9:a7:96:5c:
e6:22:58:f9:23:3f:1b:d6:23:2e:23:c1:31:e3:82:
aa:d9:bb:69:82:5f:b3:3e:2f:1f:49:48:71:cd:08:
c4:5d:1c:f7:f8:5b:54:37:e1:27:cc:a2:f9:91:6d:
d2:66:f2:99:80:5b:77:31:63:5b:02:eb:27:6f:c7:
cf:22:f3:6a:98:11:a3:25:67:2c:4f:15:66:e1:b2:
3c:40:f1:50:82:18:54:00:a7:bf:78:bf:bc:5b:43:
b8:7b:92:85:77:9e:dc:30:c1:60:2a:9e:22:c7:41:
ea:4b:16:b6:80:01:86:49:42:0a:ab:86:23:ea:62:
ff:95:c2:0a:7c:84:0d:9a:4d:f5:4c:99:6a:f3:61:
80:ac:7a:10:58:95:50:86:cf:ce:c6:04:ae:15:b9:
7e:a0:92:a6:9c:21:6b:bf:81:7a:d5:4d:a0:19:9b:
16:f6:56:43:d8:e0:ab:a5:8a:7d:d9:69:b1:35:ec:
ae:86:10:0c:a7:43:bd:eb:a7:22:3e:e3:b8:76:55:
4c:b1:bf:b5:5f:d9:22:09:5f:74:c9:ac:ed:80:88:
ae:35:a7:1b:93:f9:09:48:be:97:00:3b:f9:46:d5:
67:5f:2a:6e:30:df:14:91:4e:9a:7b:b6:fd:2a:1e:
70:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CE:C6:DC:FC:36:EF:05:99:F7:39:DF:A4:17:3D:57:F4:9F:BA:45
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/Y87G3Pw27wWZ9znfpBc9V_SfukU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.151.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:43:31:9e:23:ee:3d:da:83:02:2f:0c:8d:cc:30:9a:ee:af:
58:ed:33:a1:13:a3:69:3b:8f:e8:35:73:89:ed:fb:e3:9a:8f:
26:bc:e5:ca:7e:2a:a3:ca:73:88:63:23:90:39:84:7f:6c:81:
31:d1:92:07:58:3a:1c:64:71:d4:c7:8c:38:14:67:8b:0b:b7:
9a:b9:14:d7:24:81:c2:ad:2f:19:0d:51:1e:30:5e:25:df:e0:
ec:22:0c:b9:e9:44:ff:9d:c8:0d:18:4a:7a:f6:c1:ea:50:32:
68:6b:e4:d1:d4:68:1a:ef:f1:65:48:37:39:7d:39:85:52:df:
02:a6:60:2e:11:dd:61:f2:54:5d:af:0e:d1:ab:91:49:0d:55:
43:63:76:cc:e1:86:d5:e1:13:6a:81:6b:d5:bb:59:d5:03:4f:
88:c0:7c:49:9b:7b:e6:46:17:49:0f:90:e1:5a:9b:b6:e5:68:
11:e5:c4:ad:c1:b9:01:99:2f:dc:ef:64:b9:6b:b5:b3:54:48:
54:a4:3c:f6:a1:79:1e:ed:6a:ff:91:6a:07:22:e4:3e:a0:00:
f2:e5:88:85:37:d2:b1:45:e2:fe:1a:d9:64:05:a7:8e:ae:0c:
5f:c2:7b:7f:2a:9c:60:c3:85:c5:b3:7b:66:c6:66:f7:f6:18:
d5:40:58:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:52:33 2026 by rpki-client