Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Yyjf5T4j8_LR2l_PDiqgZEKgorE.roa
File: Yyjf5T4j8_LR2l_PDiqgZEKgorE.roa (raw, json)
Hash identifier: B9q3Gxf6cFCpQX15KKaR42uMVgZHY+iDJ+t7F3N4anA=
Subject key identifier: 63:28:DF:E5:3E:23:F3:F2:D1:DA:5F:CF:0E:2A:A0:64:42:A0:A2:B1
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01A177FA7599CF6B056B2AFE7DF0777931B3
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Yyjf5T4j8_LR2l_PDiqgZEKgorE.roa
Signing time: Mon 26 Oct 2026 11:31:05 +0000
ROA not before: Mon 26 Oct 2026 11:31:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401322
IP address blocks: 185.199.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:fa:75:99:cf:6b:05:6b:2a:fe:7d:f0:77:79:31:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Oct 26 11:31:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6328dfe53e23f3f2d1da5fcf0e2aa06442a0a2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fd:57:f8:69:f0:19:19:c5:e7:1c:d4:e2:14:
60:46:a5:47:88:93:90:22:28:02:91:75:76:9e:7e:
28:60:45:f7:b6:1a:80:64:32:bd:63:17:20:ff:67:
4d:f7:88:06:78:d9:40:aa:9b:9b:9b:42:a1:dd:03:
18:af:17:e4:b0:94:90:f7:5e:ab:fe:7f:a2:ae:f5:
16:3e:fb:ef:d6:98:c9:7e:51:00:1b:70:17:d4:17:
18:83:d5:4e:6d:f7:ff:a7:1c:23:ff:43:af:08:9d:
6b:7e:cf:00:f2:65:92:df:65:e1:3c:e5:79:19:36:
96:c4:cc:74:51:58:04:cd:94:89:81:03:8c:df:94:
77:08:ca:0f:02:83:2c:4a:76:b4:13:d6:3a:43:93:
5a:57:af:0a:4d:b0:13:06:f9:24:a0:1e:a9:7c:b5:
32:49:0e:92:e3:cc:66:d5:73:6f:fe:91:8f:4b:fa:
5f:0f:cd:5a:1e:ea:c1:e2:65:69:9a:92:f4:7d:10:
df:dd:88:80:b0:69:9d:a6:32:f4:65:11:29:f1:2f:
02:81:52:88:b7:45:99:eb:20:67:c0:6a:36:2a:b7:
94:f6:dc:6b:46:37:6d:c0:f3:16:88:e1:14:69:4d:
16:fc:0f:aa:c9:01:15:a5:49:ba:40:f3:fb:68:05:
ae:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:28:DF:E5:3E:23:F3:F2:D1:DA:5F:CF:0E:2A:A0:64:42:A0:A2:B1
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Yyjf5T4j8_LR2l_PDiqgZEKgorE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.213.0/24
Signature Algorithm: sha256WithRSAEncryption
83:fe:b1:93:d9:62:2f:e1:28:49:68:4e:68:e2:fd:2f:2c:19:
f5:d0:10:48:7f:dc:f9:ae:d0:73:a5:4d:ed:b5:d2:7b:aa:4b:
bc:62:fb:a4:99:21:8b:d4:c2:a3:73:63:94:98:b0:c2:80:5d:
83:bf:f3:6d:47:2a:65:c7:56:98:e4:49:d7:90:9c:81:78:bf:
86:be:e5:be:f4:3a:77:b9:90:f2:6e:87:24:37:ad:8b:04:db:
de:ff:8b:a1:5b:e4:56:af:2a:3c:03:a4:7a:37:c0:90:ca:c9:
03:e6:15:4f:b5:5b:0e:2b:1f:87:61:c8:39:8e:e2:b7:79:90:
44:36:6d:5f:a5:e6:43:b9:7e:57:8d:a0:ca:1d:f3:2c:d7:54:
8f:5e:58:ea:5f:16:a0:7f:a7:13:37:80:65:0c:8c:1a:f8:43:
99:e4:07:ec:52:c3:50:b8:38:42:bb:39:94:65:31:34:c8:60:
9e:3b:00:ce:1f:d5:11:6b:59:1a:fd:c6:af:d6:1e:10:15:31:
ae:77:10:27:82:20:47:6e:f1:99:c4:44:9f:e9:3a:9a:dd:bf:
b5:3f:2b:8a:8d:bb:43:3a:19:88:41:74:b3:4f:53:e4:ef:69:
7e:71:5d:20:64:75:4b:c5:9d:9b:c6:f6:56:76:80:83:96:11:
5a:f3:c9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:44:39 2026 by rpki-client