Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/yhyo6N8T_jlgqBiSp9u4HODDJAY.roa
File: yhyo6N8T_jlgqBiSp9u4HODDJAY.roa (raw, json)
Hash identifier: ZbLXH53bFSpirAT0DF7gh3+pix9m1b4MjfXMYWXGj70=
Subject key identifier: CA:1C:A8:E8:DF:13:FE:39:60:A8:18:92:A7:DB:B8:1C:E0:C3:24:06
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019EDCA877287E2EECAF00D9EB7BB9DF7286
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/yhyo6N8T_jlgqBiSp9u4HODDJAY.roa
Signing time: Thu 18 Jun 2026 21:34:48 +0000
ROA not before: Thu 18 Jun 2026 21:34:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213690
IP address blocks: 195.162.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 19:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:dc:a8:77:28:7e:2e:ec:af:00:d9:eb:7b:b9:df:72:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 18 21:34:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca1ca8e8df13fe3960a81892a7dbb81ce0c32406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a3:45:9d:b0:cd:a6:35:28:a6:a2:ff:41:52:
b7:14:1b:7f:56:c7:d7:8f:8e:01:b1:72:9e:e1:8e:
5f:3e:1d:35:a9:6c:37:d8:5b:5a:c9:9c:0e:ae:ae:
17:b5:64:1c:87:34:c5:48:6d:94:64:83:49:90:56:
61:fb:6c:56:4a:d4:ea:70:49:3a:6a:c2:64:40:46:
91:bf:29:8f:90:53:9f:aa:3c:43:f3:4f:68:49:a6:
e2:db:90:05:bf:d8:a0:10:11:26:c7:a7:c9:81:c9:
e0:82:fd:fe:99:5a:6e:61:97:45:31:b8:b1:e3:d4:
1e:62:fc:2c:ed:e4:85:b3:f3:21:dc:97:b9:43:a8:
dd:9b:ae:ee:a8:7b:5a:42:d0:e3:b7:02:6a:c5:2b:
a4:f4:fc:42:fd:ce:8d:d3:e3:db:29:54:fd:ce:eb:
74:50:8e:34:0e:63:16:1a:1b:8f:c7:d8:63:b0:a6:
4e:77:e1:e9:f5:76:4d:98:c4:f4:6d:c8:3f:a2:cb:
8f:2b:e0:ca:f4:e5:42:52:06:bf:00:9a:f6:cc:82:
50:bf:d6:7f:f9:63:bb:ae:ee:d4:11:10:de:71:83:
de:ad:69:50:a7:79:a5:c9:5a:8d:f8:09:42:04:21:
59:55:d1:6f:c4:a8:a9:26:ad:03:d1:42:06:33:d5:
c7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1C:A8:E8:DF:13:FE:39:60:A8:18:92:A7:DB:B8:1C:E0:C3:24:06
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/yhyo6N8T_jlgqBiSp9u4HODDJAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.162.242.0/24
Signature Algorithm: sha256WithRSAEncryption
49:83:df:7c:b1:ea:cc:ad:bb:0f:b9:f1:bc:93:6c:8e:08:94:
d5:ac:1f:fc:26:25:a9:be:3b:47:e8:d4:42:47:d0:ef:4b:fb:
0b:a6:79:7d:89:1d:77:bc:61:af:3b:4e:d3:8c:32:d4:76:d7:
12:ee:c9:02:61:d3:5c:35:54:af:02:72:02:d6:cc:4b:94:94:
6d:26:1f:ec:59:23:c3:a0:89:ba:c0:32:1b:5a:82:5b:51:14:
79:df:29:bb:cd:89:f4:a8:ad:4c:17:db:a3:9f:89:7a:1f:5b:
b5:4c:3c:f1:0e:17:f3:a4:20:e8:2f:11:95:29:e9:b2:b9:50:
b2:f1:73:d5:cc:25:d0:2b:f0:4b:65:14:73:c0:98:32:3a:cf:
4b:89:7b:1f:f8:77:d9:40:1d:0f:e6:1d:89:05:71:f3:7a:79:
74:2d:6f:d6:e1:52:57:ef:05:89:9e:94:0a:95:4d:7b:20:03:
76:a8:c8:37:02:d0:12:2f:37:97:49:f9:90:3f:83:39:a7:7b:
4a:7b:31:07:91:99:1e:ec:78:d1:30:41:e0:69:ec:5c:83:5e:
85:a3:54:6a:38:a6:1e:7a:ef:c5:67:aa:3d:86:27:c2:4e:0b:
7e:a3:2a:60:84:91:08:87:17:55:6e:00:b0:8c:0d:f0:d0:0e:
1a:0d:fe:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 01:33:11 2026 by rpki-client