Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/y5QsAUP8a0KTMyiFPS_vh0X1Cnw.roa
File: y5QsAUP8a0KTMyiFPS_vh0X1Cnw.roa (raw, json)
Hash identifier: J4QAZJBI9E9+L2CxkaS931g7vBzggQnYZIFd9vDMKeg=
Subject key identifier: CB:94:2C:01:43:FC:6B:42:93:33:28:85:3D:2F:EF:87:45:F5:0A:7C
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019FFAEE49D46B5B3210EEEDB044FD43EDCF
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/y5QsAUP8a0KTMyiFPS_vh0X1Cnw.roa
Signing time: Thu 13 Aug 2026 11:42:28 +0000
ROA not before: Thu 13 Aug 2026 11:42:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48347
IP address blocks: 45.138.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:ee:49:d4:6b:5b:32:10:ee:ed:b0:44:fd:43:ed:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Aug 13 11:42:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb942c0143fc6b42933328853d2fef8745f50a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:12:49:74:58:c0:62:f4:af:2b:c3:f6:c8:30:
a1:3d:21:ce:d9:26:75:58:c3:ef:5a:bc:dc:7b:3e:
06:5d:0b:c2:3f:f0:82:53:94:f6:97:29:a6:c9:3b:
48:fb:05:77:8b:b8:60:5c:b1:66:75:d0:2f:be:c5:
5f:17:9c:fb:8a:d0:63:63:51:59:f7:82:da:50:c2:
a0:38:c8:73:c7:2c:1c:2c:f7:1c:8c:6d:b6:45:0e:
fa:38:f0:da:d5:4f:b7:3d:e7:75:ac:c6:a8:3c:68:
8d:ba:37:79:05:1e:22:e5:2b:24:53:3a:31:e4:6a:
94:7c:e9:de:c0:26:81:f9:d1:42:ea:de:4b:8f:e6:
67:19:d2:8d:4a:f5:98:cf:41:c8:02:4b:d9:d6:09:
11:7d:0b:ef:18:32:67:07:75:85:a5:fb:26:9e:ef:
a4:13:91:2e:a2:69:1d:d9:10:e5:b2:c7:cc:a5:9c:
ce:cf:f9:e8:20:94:85:ba:f2:ea:9e:da:85:b9:a7:
4e:3e:d6:c9:9c:6d:bd:2e:49:97:0c:ba:a6:e1:75:
d0:c6:0b:9a:b6:e1:1e:c0:fb:91:9a:ff:6a:1f:1c:
35:00:36:a1:8e:db:7b:5a:c7:89:54:72:76:82:f6:
0d:0d:9a:ff:75:37:78:3a:7c:b0:9f:46:6e:c2:7c:
c3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:94:2C:01:43:FC:6B:42:93:33:28:85:3D:2F:EF:87:45:F5:0A:7C
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/y5QsAUP8a0KTMyiFPS_vh0X1Cnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.157.0/24
Signature Algorithm: sha256WithRSAEncryption
81:2f:96:b2:31:42:fa:0a:fe:81:38:91:98:99:d3:b3:3e:d1:
41:9a:0e:66:c3:a1:da:f3:5a:63:18:02:36:b4:4c:39:39:75:
5e:27:ec:b4:bd:f4:28:a7:2a:69:78:df:cd:c4:a6:ed:46:55:
f8:c8:bf:dd:ed:d6:94:4b:89:99:f9:d8:ab:1f:df:86:bc:9a:
3c:11:f8:a0:bb:ee:c9:b7:ea:cd:21:57:84:48:a7:a8:2f:aa:
a0:e3:8c:2a:63:fc:56:23:92:a8:73:05:b0:f6:f4:d9:41:0b:
7d:af:ea:22:19:38:f1:e8:9a:e5:1e:c2:25:42:07:c6:73:00:
f5:f2:97:ef:21:39:38:14:2b:19:29:df:fa:a1:e8:20:62:fb:
4e:91:c6:c5:6d:8d:6c:30:60:9e:19:0d:3f:de:f0:65:0f:8f:
83:f8:b4:ca:c2:30:48:0a:dd:06:28:4b:49:58:5d:e0:20:4c:
eb:58:25:09:f3:96:2c:8f:c6:d7:91:0c:58:c4:0c:d9:93:c5:
b3:58:81:04:67:8b:ef:f3:40:05:72:bb:db:56:45:49:64:9c:
4c:99:7e:48:09:cb:72:65:17:72:12:52:24:9c:3b:a2:0c:03:
2b:19:ec:17:3d:4a:2a:50:1f:a1:20:64:ab:b0:98:7b:ec:69:
f9:35:5a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 17:44:25 2026 by rpki-client