Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/yvCCpk4_0puwnurWWSMz-GRqa9g.roa
File: yvCCpk4_0puwnurWWSMz-GRqa9g.roa (raw, json)
Hash identifier: plmFtmIHnJ65gF4go6f2ImnNM5YPATO4+CT4TY1gN5c=
Subject key identifier: CA:F0:82:A6:4E:3F:D2:9B:B0:9E:EA:D6:59:23:33:F8:64:6A:6B:D8
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019E3ABB09DF0F04DB20884E1306DC6CCD61
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/yvCCpk4_0puwnurWWSMz-GRqa9g.roa
Signing time: Mon 18 May 2026 10:56:36 +0000
ROA not before: Mon 18 May 2026 10:56:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200081
IP address blocks: 45.140.166.0/24 maxlen: 24
2a0e:4006::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 00:11:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3a:bb:09:df:0f:04:db:20:88:4e:13:06:dc:6c:cd:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: May 18 10:56:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=caf082a64e3fd29bb09eead6592333f8646a6bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:22:93:95:b4:65:77:6b:db:c9:f3:d5:12:68:
b0:3e:a3:21:e3:24:31:b4:79:d0:04:b6:be:6f:13:
e9:fb:8a:d2:d6:02:8c:62:e1:2d:be:6a:94:e3:ea:
d3:b7:0f:62:59:f8:d8:dc:14:b1:20:84:68:c4:3b:
03:ba:8c:8d:78:e1:fd:3e:83:78:97:b3:8a:57:9d:
da:20:11:b9:d9:6b:f0:30:dd:c3:22:a7:c1:63:98:
74:40:f7:72:e5:75:27:df:66:6d:40:4d:90:67:00:
36:87:ef:08:f5:b3:d6:fa:72:2d:d7:42:94:16:9e:
fb:de:e9:5e:2a:ba:68:9b:a3:fc:db:f5:f6:cd:c5:
6d:b1:e5:79:d5:cb:32:4d:72:35:0e:0b:b2:fd:bd:
75:7b:51:f0:0b:f6:82:b3:bd:5a:13:4f:57:d8:63:
48:62:30:9c:4a:c3:a0:e5:19:d5:6f:51:a8:ce:af:
6b:b8:b0:e7:c8:f2:93:81:02:3e:f9:38:8d:c9:c2:
80:a0:12:cb:9b:67:26:26:a9:dc:24:58:29:25:1b:
10:a6:57:99:97:5f:a2:0b:70:0f:09:0a:68:97:e7:
b0:2e:c1:3f:62:ab:e5:5e:62:dc:4f:e4:3c:fa:f8:
de:91:ce:51:dd:0d:5a:d0:09:c9:cf:8a:10:59:f4:
10:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F0:82:A6:4E:3F:D2:9B:B0:9E:EA:D6:59:23:33:F8:64:6A:6B:D8
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/yvCCpk4_0puwnurWWSMz-GRqa9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.166.0/24
IPv6:
2a0e:4006::/32
Signature Algorithm: sha256WithRSAEncryption
87:f9:4d:cd:d9:13:c6:e6:6c:18:69:f8:5e:46:49:32:bb:2a:
82:63:84:63:bd:08:93:a3:63:32:f2:e9:87:a5:29:cf:10:29:
d6:e5:10:1b:74:e6:c1:03:05:97:68:a7:fa:bb:93:ab:26:b2:
67:ca:3a:a7:26:25:36:d8:c4:c8:2a:ba:eb:53:25:93:45:b3:
d7:3c:cb:05:5e:79:ae:c4:7f:65:b6:dd:37:a5:ad:ad:49:29:
50:f4:bd:04:f6:b0:10:f9:c8:74:19:e3:0f:20:74:ed:8a:42:
0e:7a:22:aa:fd:a4:2a:21:25:0c:88:a2:06:f2:64:89:19:d4:
15:4e:f8:74:7f:16:f1:d9:a5:7a:e0:2d:94:e9:6f:2e:03:b7:
47:73:4c:69:58:dc:36:76:ca:eb:43:99:33:78:52:98:50:90:
38:8b:7b:ad:e4:c7:e1:80:15:53:61:4b:0f:5f:db:bc:56:37:
b8:3a:ea:c1:ae:39:f6:c0:73:e6:99:6d:c4:9f:5a:00:f5:0d:
90:27:a1:57:09:2f:73:c4:d4:3c:68:b1:ef:7e:78:dc:db:d4:
22:55:27:31:c0:3d:f6:d4:de:74:52:a6:82:f7:c5:5d:fa:75:
85:81:4f:b7:83:6f:7a:f6:ed:d2:89:e3:7d:ac:e5:5a:6b:33:
45:ae:f7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:21:30 2026 by rpki-client