Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/Yfi7MUIVXQqbg1C82iKiGDNumqg.roa
File: Yfi7MUIVXQqbg1C82iKiGDNumqg.roa (raw, json)
Hash identifier: 2sxGn69QVvco7Us4OUWBJG4j6XnLH42EKG1hbOQHeSI=
Subject key identifier: 61:F8:BB:31:42:15:5D:0A:9B:83:50:BC:DA:22:A2:18:33:6E:9A:A8
Certificate issuer: /CN=1fe65f2b616c0bdb6606db0a02f3903d8a20d9bd
Certificate serial: 019F236936901CB6070E378EDDC4FE310F81
Authority key identifier: 1F:E6:5F:2B:61:6C:0B:DB:66:06:DB:0A:02:F3:90:3D:8A:20:D9:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/Yfi7MUIVXQqbg1C82iKiGDNumqg.roa
Signing time: Thu 02 Jul 2026 15:18:45 +0000
ROA not before: Thu 02 Jul 2026 15:18:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25003
IP address blocks: 192.115.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:36:90:1c:b6:07:0e:37:8e:dd:c4:fe:31:0f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe65f2b616c0bdb6606db0a02f3903d8a20d9bd
Validity
Not Before: Jul 2 15:18:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61f8bb3142155d0a9b8350bcda22a218336e9aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:40:d2:81:d8:a5:c6:b5:cf:bc:dc:48:2f:d5:
6c:3b:3f:d8:2a:fc:f8:17:44:dc:6e:2e:00:2d:a7:
11:22:76:d5:d6:2a:ad:56:9f:1d:8b:67:a9:15:90:
e4:a7:85:93:98:3d:fc:64:ff:62:9d:f9:6d:9c:cb:
53:cd:4f:18:9f:ca:ae:0f:47:c5:1b:9a:e5:51:8d:
5c:6c:d6:f0:3f:04:0b:28:ff:1f:ee:ef:40:85:de:
f7:fd:aa:1b:d7:1f:2b:c3:96:d4:53:bf:44:1f:74:
65:4f:f5:40:cc:f8:2a:bd:fa:4e:b1:bc:73:c2:0d:
72:b5:c6:db:dc:67:dd:e3:0c:b9:3a:9c:de:15:8b:
1e:92:86:a5:e5:77:1e:41:b1:22:16:62:12:96:db:
0f:32:27:c6:1b:46:3f:02:01:54:ba:e5:28:1f:3a:
cf:a4:6e:5f:c4:bc:bd:1e:ba:23:70:c7:40:2b:fb:
cb:37:df:22:bd:77:1c:9e:60:b8:f1:81:ef:9a:b8:
e0:9c:8e:56:dc:c5:55:86:6e:e9:26:31:36:00:db:
65:c7:6e:cc:55:75:61:fa:ea:3e:b7:8b:c0:7a:8b:
02:aa:77:b2:fa:47:33:71:93:a5:d6:2f:9a:8d:9e:
fb:55:87:d1:61:ad:10:c2:0b:29:47:38:69:49:1c:
92:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F8:BB:31:42:15:5D:0A:9B:83:50:BC:DA:22:A2:18:33:6E:9A:A8
X509v3 Authority Key Identifier:
keyid:1F:E6:5F:2B:61:6C:0B:DB:66:06:DB:0A:02:F3:90:3D:8A:20:D9:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-ZfK2FsC9tmBtsKAvOQPYog2b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/Yfi7MUIVXQqbg1C82iKiGDNumqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/H-ZfK2FsC9tmBtsKAvOQPYog2b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.115.44.0/22
Signature Algorithm: sha256WithRSAEncryption
42:41:52:77:e8:24:65:ae:1c:27:63:a8:76:1d:fb:7d:f8:da:
70:2f:70:8b:41:36:20:ae:a4:bd:10:82:3a:00:d2:a1:50:6a:
ef:8b:97:bf:c5:35:77:3e:db:9a:58:b2:d4:8a:92:ae:43:19:
53:70:33:a4:c9:59:90:f7:6b:b3:9c:9f:bf:fa:69:27:a1:9c:
2d:35:dc:89:89:33:12:a0:39:a6:5d:75:48:87:03:43:95:1c:
1f:a1:81:ca:70:2a:9e:8b:5b:d7:99:32:a3:6b:8a:7e:2f:d2:
c7:75:99:22:18:a5:43:f1:51:d6:62:aa:0d:4a:84:a2:01:14:
a2:af:a7:58:e3:b7:6d:36:1d:59:31:70:76:04:12:ff:93:8f:
6f:24:f1:12:10:f1:5e:8e:3b:5e:5a:1e:5c:9d:c5:40:89:58:
95:cd:29:51:84:24:48:77:dd:bc:94:09:58:22:20:e9:76:18:
75:17:d3:d9:27:99:7a:57:f4:96:f9:c9:4d:28:65:e5:7e:81:
2d:21:01:d9:6b:d8:2b:0a:8a:0b:5d:52:49:09:d3:0e:b6:31:
e1:9a:c2:e7:f2:9b:20:7e:17:18:7d:5b:0e:d6:59:6a:b1:c1:
77:68:10:34:a0:15:38:df:a2:15:89:a3:28:52:3f:eb:ac:76:
a0:a8:80:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:57:27 2026 by rpki-client