Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/YF4M8HFWFErpmz-9FTrd8WEaEeA.roa
File: YF4M8HFWFErpmz-9FTrd8WEaEeA.roa (raw, json)
Hash identifier: oj6o5KH9pgEBTLfo/5GjnKvxH23+spaBsAsHvx7z3PA=
Subject key identifier: 60:5E:0C:F0:71:56:14:4A:E9:9B:3F:BD:15:3A:DD:F1:61:1A:11:E0
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A06730FD83D2F4D5C48731226AB3009207
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/YF4M8HFWFErpmz-9FTrd8WEaEeA.roa
Signing time: Thu 03 Sep 2026 12:14:18 +0000
ROA not before: Thu 03 Sep 2026 12:14:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218965
IP address blocks: 194.231.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 13:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:30:fd:83:d2:f4:d5:c4:87:31:22:6a:b3:00:92:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 3 12:14:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=605e0cf07156144ae99b3fbd153addf1611a11e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:56:4b:16:e7:8f:e2:aa:83:c9:a5:02:8e:66:
b1:50:cf:69:9f:85:08:de:ab:46:85:38:92:d4:f7:
8c:a5:16:ab:83:bf:f1:c4:0b:7f:00:98:d9:c3:5b:
33:15:54:66:ce:05:bc:6b:bf:f0:d4:af:dc:85:a9:
48:6d:a5:a7:ef:0c:d6:99:ab:79:34:25:85:df:99:
ee:09:5d:ec:09:ee:be:7e:00:a9:25:2f:7c:4e:8f:
f2:16:35:69:19:47:e1:4c:39:9f:4b:e3:ec:bf:cb:
61:bb:0b:61:b8:db:b7:a8:f3:03:1d:bc:11:56:06:
3d:98:d9:53:17:b9:f0:db:46:22:37:35:03:81:81:
ba:7c:12:fb:c4:a4:ec:ed:2e:8f:97:3d:45:c4:3c:
bc:17:ad:5b:3d:3b:1b:b6:6a:6f:e8:bc:e3:65:61:
67:a2:df:d4:4c:21:f1:f0:54:3a:69:00:ac:47:1e:
22:f0:87:bb:fe:14:ac:82:69:dc:84:e9:8b:16:3c:
00:24:51:4e:9f:04:a2:35:40:b5:fd:5f:89:c9:dc:
ea:22:4a:92:87:c2:3f:83:20:e4:f9:99:87:fc:4b:
71:c6:9f:de:ea:20:7a:06:f5:23:21:76:2b:14:9e:
f2:dc:ef:7d:8d:d1:e8:83:18:d6:ff:d6:7f:df:b2:
6b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5E:0C:F0:71:56:14:4A:E9:9B:3F:BD:15:3A:DD:F1:61:1A:11:E0
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/YF4M8HFWFErpmz-9FTrd8WEaEeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.149.0/24
Signature Algorithm: sha256WithRSAEncryption
44:39:b0:0a:5c:9a:f3:0d:a8:ef:db:1f:87:ca:8e:52:6e:94:
5f:1f:19:52:63:30:c7:23:92:60:76:49:4b:7c:0d:fd:8f:22:
06:75:84:f0:1e:26:9d:42:d8:97:a8:49:66:cd:80:e7:74:7c:
c4:06:4e:e0:85:db:49:6c:0b:82:77:80:87:f2:ab:89:b6:d6:
c7:65:29:3f:ce:11:87:36:1b:f1:e1:0c:52:85:99:40:87:1b:
27:22:e9:0c:54:f3:5c:3a:8d:72:71:63:dd:ce:c6:c9:bc:f5:
03:6f:f5:d0:6b:ba:31:e7:2a:2b:b2:0d:17:ff:d4:5f:64:01:
16:55:82:f2:5a:6c:44:c8:3e:0c:43:6a:77:09:b2:cd:df:f8:
1f:d8:33:32:35:7c:9b:91:81:fe:19:f7:9b:4d:7c:3c:f4:af:
36:80:be:34:eb:bc:8f:60:cd:34:5e:bb:4f:81:4d:6c:67:b9:
b6:d9:ee:d2:6e:cb:b0:54:4e:a4:18:a0:d1:80:8c:54:c4:41:
cb:72:46:59:2f:5c:f7:6c:66:00:7f:32:63:1e:d3:b2:53:90:
e6:6d:81:b6:35:2c:3d:58:d2:ea:ca:13:ad:c6:88:b7:a4:4d:
55:a9:c6:1e:2d:b8:dc:6f:b8:29:f4:1b:36:31:51:ef:7f:5c:
06:bc:f4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 17:26:48 2026 by rpki-client