Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/yLMk4NjtduNnQJH-ICetprXnCGw.roa
File: yLMk4NjtduNnQJH-ICetprXnCGw.roa (raw, json)
Hash identifier: zUwKNobzVMPOLfGbxGdqtBrclWTjJ+DAuYM5lkZeaec=
Subject key identifier: C8:B3:24:E0:D8:ED:76:E3:67:40:91:FE:20:27:AD:A6:B5:E7:08:6C
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 019F2369483DBD64DE6A663EB6ED39DAC562
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/yLMk4NjtduNnQJH-ICetprXnCGw.roa
Signing time: Thu 02 Jul 2026 15:18:50 +0000
ROA not before: Thu 02 Jul 2026 15:18:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 146943
IP address blocks: 93.120.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 06:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:48:3d:bd:64:de:6a:66:3e:b6:ed:39:da:c5:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Jul 2 15:18:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8b324e0d8ed76e3674091fe2027ada6b5e7086c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0f:bb:84:f1:64:ac:ed:02:e4:4a:8f:30:ed:
3c:96:a2:bb:9b:2e:04:03:26:42:76:18:ee:b0:6c:
d6:a9:f4:fc:28:e6:3f:1b:34:2c:8b:13:4c:8a:97:
16:b3:fd:a8:fa:75:ba:91:b2:ed:3b:49:3a:4f:9b:
a9:bb:da:4a:d6:3a:f0:7a:5a:c6:f2:31:be:14:c3:
3e:1e:06:1c:4a:54:6b:42:d7:a7:2f:dc:b4:90:59:
4e:1f:f4:e8:01:06:f7:65:61:28:94:b7:02:e1:b5:
ea:4f:14:54:39:ac:8e:45:49:41:46:97:cd:5f:f9:
ab:e5:bf:bd:6c:10:85:af:1b:54:c0:5c:aa:cc:d5:
d1:35:c4:30:c5:a4:a5:b6:0c:8c:fc:56:d7:cb:7c:
06:76:ab:4a:ef:a4:3f:60:c2:fe:f4:09:21:9f:98:
29:6a:5a:c8:25:85:59:21:5f:eb:cd:b0:e7:77:84:
62:f2:13:72:f4:bb:18:89:e0:a7:f0:7c:52:1f:ec:
d1:02:66:6d:e2:5f:da:bf:f9:cc:6f:dd:a6:46:d7:
fa:59:06:4c:bd:0f:1e:9d:c0:ee:0d:e2:b6:80:22:
7e:91:e4:84:96:22:66:6f:d0:51:06:1d:bc:79:63:
0b:4e:91:2c:73:44:7f:7c:79:03:96:6d:8e:44:4d:
96:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B3:24:E0:D8:ED:76:E3:67:40:91:FE:20:27:AD:A6:B5:E7:08:6C
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/yLMk4NjtduNnQJH-ICetprXnCGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.120.39.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:eb:bd:99:d2:ba:f1:cc:84:88:22:8d:5c:99:65:29:d5:34:
4d:19:58:c6:e0:c9:af:db:0b:2c:4e:be:00:4e:a8:d0:23:d4:
e9:78:80:1e:0e:ce:f5:ac:10:0f:3e:5e:6e:28:dd:0b:c8:b4:
34:f1:6a:54:fa:8e:27:2f:ba:5c:93:12:78:c0:0a:b4:73:bf:
f3:04:b6:5f:4c:c5:1d:bb:f3:c0:a0:5d:de:36:d4:de:cc:e2:
fd:99:e8:28:0b:0a:f1:c2:f2:4d:71:ee:cf:8c:44:30:6c:bf:
d5:ae:06:d5:de:c0:53:89:53:0d:14:ec:13:4f:53:32:aa:29:
51:f7:c0:06:1c:16:5e:7a:31:56:e1:5f:28:88:b0:21:71:12:
88:07:5d:50:73:69:f0:1d:e2:7f:93:a8:72:53:17:82:7f:27:
8d:e2:24:20:ea:f5:72:70:4f:77:87:9e:40:c3:53:3b:c7:9e:
7f:b5:63:f9:29:d0:97:08:94:81:89:7c:87:6c:7c:57:3c:c3:
8f:5f:25:6c:5d:bc:33:71:64:9d:b4:c8:0a:25:22:dd:01:1d:
a7:aa:65:15:9a:9c:88:1e:5d:4f:61:e3:7a:1b:18:0d:84:43:
69:50:27:4e:e9:97:40:c6:64:6a:7d:e0:51:f2:c3:c4:78:66:
32:58:e6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:23:03 2026 by rpki-client