Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/ry5IS54v26xST5YEhnRJezPP1Mc.roa
File: ry5IS54v26xST5YEhnRJezPP1Mc.roa (raw, json)
Hash identifier: 1xU0EKr/v9WzC3t1M0QSdfptQGpsaiTxbU1IkxqE9c4=
Subject key identifier: AF:2E:48:4B:9E:2F:DB:AC:52:4F:96:04:86:74:49:7B:33:CF:D4:C7
Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial: 019FE7174B5B048487475CF94F5EFC519175
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/ry5IS54v26xST5YEhnRJezPP1Mc.roa
Signing time: Sun 09 Aug 2026 15:14:51 +0000
ROA not before: Sun 09 Aug 2026 15:14:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 212.66.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 15:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e7:17:4b:5b:04:84:87:47:5c:f9:4f:5e:fc:51:91:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Validity
Not Before: Aug 9 15:14:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af2e484b9e2fdbac524f96048674497b33cfd4c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5a:14:84:c5:3d:4a:c4:47:83:f2:f3:d8:e9:
ee:25:00:96:86:69:02:cb:c3:ac:b5:17:82:65:57:
6b:a5:3b:fd:f9:55:b8:49:71:00:8d:3c:9b:18:3f:
64:cc:20:eb:03:3f:e4:01:d8:64:83:ed:28:d7:80:
ea:5f:af:a6:48:84:2d:ad:4e:3d:9c:37:86:bc:6b:
03:3e:88:7c:4d:3c:fa:53:2e:08:1e:53:9f:b6:3e:
5e:0e:62:e7:91:17:c9:5c:4d:03:3b:0c:af:4c:6d:
e0:94:97:76:50:42:51:d6:98:33:fe:63:c1:0c:c4:
f5:0a:fa:a9:84:f6:82:3e:b2:a3:c6:9a:e0:9a:49:
de:2b:fa:49:ce:f5:68:90:1f:2d:6f:b8:82:9e:e6:
4a:31:61:4a:cf:e5:5c:32:2e:91:19:29:0b:68:04:
ea:c8:b0:bf:68:a2:ab:57:a4:aa:db:03:3a:2c:59:
5f:9e:52:c8:e9:86:6f:65:f2:13:f1:83:0d:0c:cd:
ff:e3:fb:57:10:6e:f4:57:27:b7:a0:2a:e7:1a:14:
82:20:fa:57:24:13:ae:db:1a:5d:18:43:a5:a7:64:
ca:8f:3a:27:12:18:7d:d8:12:9a:d6:84:e1:d3:5e:
e7:0f:a5:db:79:28:0d:3b:19:a6:84:5c:b4:63:66:
8d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2E:48:4B:9E:2F:DB:AC:52:4F:96:04:86:74:49:7B:33:CF:D4:C7
X509v3 Authority Key Identifier:
keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/ry5IS54v26xST5YEhnRJezPP1Mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.66.48.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:e8:93:1f:c9:a1:29:6b:19:20:a9:d1:ab:a2:19:a9:9d:7c:
5f:ce:0e:6e:e8:2c:f5:73:34:18:96:93:10:55:39:99:93:a4:
77:9d:06:f7:d0:e3:a6:1f:09:d7:9d:3c:2f:ca:31:c5:aa:1e:
d0:fc:3e:41:0e:ec:78:df:59:1c:69:42:05:f0:91:22:dc:33:
22:f7:4e:28:61:9d:16:da:d3:b3:ad:c8:32:3c:63:76:5b:aa:
d6:f7:10:3b:f5:81:0f:64:d0:e2:ef:fe:21:83:15:f0:f2:9d:
bf:ae:0f:4f:9f:a7:96:9f:ab:45:c0:2e:82:cb:9d:5b:12:d2:
d3:e4:86:9b:23:0f:8b:61:19:2f:d7:0f:f8:d4:c4:6d:08:8a:
84:5b:00:fa:17:87:2d:55:01:3e:27:2c:36:e1:f8:78:71:5d:
2f:71:eb:b7:b4:66:46:39:26:44:8c:4c:dc:4e:d9:f7:3a:dd:
67:03:98:58:f9:77:5d:5f:d6:70:f5:4b:14:ef:fd:77:0c:74:
d9:dc:a1:bb:90:80:88:52:e1:17:b2:6f:b3:a7:83:17:87:ad:
ec:ea:9f:d8:8b:92:67:8d:e8:72:d2:03:8a:9b:ab:be:7d:81:
53:14:2e:4b:74:a5:2d:2d:a1:da:99:2b:1d:e8:cc:3c:b1:bf:
7f:53:5e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 21:25:14 2026 by rpki-client