Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/yA2CQChnx3EpiN_3TuOHVzDA_Dc.roa
File: yA2CQChnx3EpiN_3TuOHVzDA_Dc.roa (raw, json)
Hash identifier: JvGltTZCmUOve8Ou1vnPFV1Ww+E5BNMMbd0O8++rizE=
Subject key identifier: C8:0D:82:40:28:67:C7:71:29:88:DF:F7:4E:E3:87:57:30:C0:FC:37
Certificate issuer: /CN=d66d02c2de23ecfafa1bf6e69aaf0a053ad2a937
Certificate serial: 019FF64C1E4FB5090A17D1ED916124373D09
Authority key identifier: D6:6D:02:C2:DE:23:EC:FA:FA:1B:F6:E6:9A:AF:0A:05:3A:D2:A9:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m0Cwt4j7Pr6G_bmmq8KBTrSqTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/yA2CQChnx3EpiN_3TuOHVzDA_Dc.roa
Signing time: Wed 12 Aug 2026 14:06:51 +0000
ROA not before: Wed 12 Aug 2026 14:06:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12389
IP address blocks: 195.3.132.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/1m0Cwt4j7Pr6G_bmmq8KBTrSqTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/1m0Cwt4j7Pr6G_bmmq8KBTrSqTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1m0Cwt4j7Pr6G_bmmq8KBTrSqTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:4c:1e:4f:b5:09:0a:17:d1:ed:91:61:24:37:3d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66d02c2de23ecfafa1bf6e69aaf0a053ad2a937
Validity
Not Before: Aug 12 14:06:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c80d82402867c7712988dff74ee3875730c0fc37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8a:12:5b:a3:81:23:b2:9f:85:7a:f6:fa:18:
64:17:1d:2f:9a:d3:6e:a6:a3:26:53:dd:45:8e:d3:
05:02:f0:11:38:85:e0:98:ea:34:2e:95:98:fd:f6:
7f:19:6e:2d:46:6f:52:4c:a3:09:9e:95:50:94:e6:
e7:e8:c0:1e:66:d3:32:ae:0b:ae:ff:19:ca:93:ee:
37:a9:f0:f7:db:98:ac:03:b6:a2:03:3a:5d:d1:42:
e8:43:b1:07:25:7f:15:0e:82:fc:b4:58:75:f6:f8:
32:52:f4:5c:73:d0:2c:2d:a1:b4:e4:2c:2f:40:8a:
d7:d3:76:31:f6:4e:52:10:88:66:98:5e:28:dd:f8:
9b:cf:e1:bd:cd:84:aa:97:25:60:97:d8:26:bd:6a:
54:8b:c5:ad:c0:66:fb:9a:9b:ec:7f:b7:2b:78:ee:
71:06:d0:0d:73:b8:28:0b:9c:39:e6:f8:a6:73:90:
e1:d2:96:54:95:7b:dc:60:ff:2a:5f:a5:ae:8e:f7:
fe:dc:03:e4:a9:99:2c:35:af:f8:77:91:61:bd:23:
13:67:99:49:c0:22:06:d3:b7:e1:e6:0f:e5:9a:11:
bb:33:22:5c:1f:26:c9:59:68:60:cf:55:18:ae:2d:
7b:4e:6b:a2:5c:03:3c:5a:6d:ce:e2:fc:29:7b:75:
09:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0D:82:40:28:67:C7:71:29:88:DF:F7:4E:E3:87:57:30:C0:FC:37
X509v3 Authority Key Identifier:
keyid:D6:6D:02:C2:DE:23:EC:FA:FA:1B:F6:E6:9A:AF:0A:05:3A:D2:A9:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m0Cwt4j7Pr6G_bmmq8KBTrSqTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/yA2CQChnx3EpiN_3TuOHVzDA_Dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/1m0Cwt4j7Pr6G_bmmq8KBTrSqTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.3.132.0/23
Signature Algorithm: sha256WithRSAEncryption
87:38:05:7d:7a:5d:fb:bd:ba:89:30:4f:8e:59:92:02:a3:c7:
8d:c3:2b:ed:42:35:9e:48:c2:7f:c1:c3:d1:0c:39:ed:5d:df:
78:f2:a7:c6:d7:1a:f1:c4:aa:33:26:9b:cb:e9:cd:3f:c9:c1:
57:f9:f4:90:9b:9c:c0:c7:9b:1b:ca:12:93:4d:35:f3:c0:20:
ab:48:7e:74:79:85:53:df:8e:ce:98:44:66:3d:d7:58:b6:2c:
8f:ee:92:e6:6c:df:19:4d:aa:4e:9a:12:9f:14:dd:49:90:ad:
b3:d3:a4:98:17:1e:93:fd:1b:48:70:db:4e:dc:fc:4d:c5:f1:
59:78:bb:16:09:f6:88:74:83:56:b6:fd:3b:d2:a5:5a:fc:52:
b0:1e:1c:d3:c7:20:6c:5f:dd:93:57:e4:1c:fa:82:02:b8:04:
d7:4a:06:70:19:80:c2:f1:3d:07:a6:c1:76:91:49:33:56:fe:
c0:81:3f:49:bc:ac:99:54:33:e7:05:64:27:47:93:50:f4:d0:
13:e3:42:ea:55:a4:fe:23:09:ba:3f:a7:0e:5c:b1:49:10:aa:
50:f4:dc:2d:95:c2:92:ca:1c:ba:51:c3:3b:0d:34:f5:53:82:
8b:dd:52:91:02:1c:76:94:3f:0a:6d:bf:bb:f7:d6:ba:5c:5b:
cd:fc:96:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:25:36 2026 by rpki-client