Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ycAwJESOp5dF7qq7q75kNhN2eZA.roa
File: ycAwJESOp5dF7qq7q75kNhN2eZA.roa (raw, json)
Hash identifier: ijqU0SiuW/2X6BFjN0stPC/8zDkgNqw6aHXmps4NNu8=
Subject key identifier: C9:C0:30:24:44:8E:A7:97:45:EE:AA:BB:AB:BE:64:36:13:76:79:90
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019DD7C5ACD5F9423E2E0E6B2C2F2230B344
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ycAwJESOp5dF7qq7q75kNhN2eZA.roa
Signing time: Wed 29 Apr 2026 05:45:49 +0000
ROA not before: Wed 29 Apr 2026 05:45:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 32418
IP address blocks: 188.255.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 08:58:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d7:c5:ac:d5:f9:42:3e:2e:0e:6b:2c:2f:22:30:b3:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Apr 29 05:45:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c9c03024448ea79745eeaabbabbe643613767990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:35:c9:98:46:04:15:4a:5f:46:46:5a:0d:fd:
30:bd:6f:fd:04:d3:54:05:cf:b0:a2:63:6e:21:79:
eb:d3:a0:62:1f:c2:f1:fe:b0:a6:b7:42:73:7d:76:
bb:f6:67:08:49:af:10:58:51:99:84:8a:fd:8e:19:
0b:a2:cc:b8:cc:3d:83:45:6b:40:37:fc:c0:fb:37:
68:51:59:ea:96:cb:96:78:77:57:0e:1c:6d:50:1f:
76:29:19:39:c8:4d:4a:db:a9:13:c8:85:0a:4d:22:
a1:65:00:9e:b5:f8:d1:df:f6:e3:6a:f1:45:7e:3d:
28:4b:1d:bc:34:47:e7:6d:53:e0:51:32:58:84:1f:
55:29:d6:a8:25:34:c6:89:51:61:97:11:bf:2c:c8:
9d:db:f3:c6:d0:9a:d6:d8:33:67:11:f3:56:64:f6:
1a:3e:a9:e7:8d:02:c2:2d:ec:3e:e1:06:90:e6:5c:
94:1f:84:f1:6a:7d:ff:53:75:10:74:b5:74:2d:23:
74:da:fd:3d:77:a3:f8:96:17:65:2e:5a:d4:de:c2:
86:3f:d3:b0:71:d5:17:b6:c7:af:5f:06:64:3b:bc:
26:fa:77:e8:66:33:3d:12:97:7d:5a:d2:e5:e3:bc:
47:a1:24:dc:33:2f:16:f3:0b:ed:65:49:57:c5:c7:
30:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C0:30:24:44:8E:A7:97:45:EE:AA:BB:AB:BE:64:36:13:76:79:90
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ycAwJESOp5dF7qq7q75kNhN2eZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.236.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:f0:fd:f0:cb:1d:07:65:33:ac:41:ea:a1:b9:1e:cc:d2:6c:
a7:58:4b:69:f8:0c:9b:23:21:17:b3:2a:3a:88:e4:ec:76:8c:
36:63:3c:76:aa:b8:ca:97:38:35:5d:c5:86:48:17:f6:60:89:
49:4e:cb:43:0d:a5:09:a9:f0:48:3f:86:3e:b4:4e:2e:65:cd:
9c:3f:82:88:fa:a9:f9:1c:74:3a:e1:a5:2f:42:ed:e7:00:b4:
20:63:14:41:aa:bc:07:25:4d:5c:ac:32:ce:33:5f:eb:14:97:
c6:9f:14:68:89:4a:7a:9a:5e:1c:7e:fb:01:64:b8:b2:26:38:
65:a1:8d:0a:8b:da:9f:04:1f:1f:55:4d:f5:a5:85:d0:bb:e8:
db:7b:14:cc:1f:61:e1:71:0b:87:6f:20:79:9d:d4:73:5b:19:
56:26:a9:cb:73:fe:36:cd:c3:bb:46:76:38:18:75:6c:a8:56:
8c:de:94:bd:9d:74:11:05:f6:3e:4b:03:4a:d5:3c:43:2c:3d:
7b:7e:49:fa:27:c2:0d:5e:00:1c:78:02:28:6f:fa:93:a7:e3:
3c:93:71:9b:e0:e5:77:0b:3d:16:c6:01:43:2c:67:8d:f4:25:
37:90:28:ae:9e:c4:92:fb:89:9d:0f:89:e1:50:5a:0e:fd:d6:
8e:5f:79:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 17:32:01 2026 by rpki-client