Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/yiV9PB-FBe5SszwOM0DIzgziU_o.roa
File: yiV9PB-FBe5SszwOM0DIzgziU_o.roa (raw, json)
Hash identifier: FGEWP1g824Rg8O5wlb1+EuBwhdQIHoDXSYri//4LGvs=
Subject key identifier: CA:25:7D:3C:1F:85:05:EE:52:B3:3C:0E:33:40:C8:CE:0C:E2:53:FA
Certificate issuer: /CN=40db58d152df4ee4f224c476e663e77117ac7cfa
Certificate serial: 019F2368AF2AF5E43D04132D2012B606889F
Authority key identifier: 40:DB:58:D1:52:DF:4E:E4:F2:24:C4:76:E6:63:E7:71:17:AC:7C:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNtY0VLfTuTyJMR25mPncResfPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/yiV9PB-FBe5SszwOM0DIzgziU_o.roa
Signing time: Thu 02 Jul 2026 15:18:10 +0000
ROA not before: Thu 02 Jul 2026 15:18:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203123
IP address blocks: 185.144.8.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/QNtY0VLfTuTyJMR25mPncResfPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/QNtY0VLfTuTyJMR25mPncResfPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNtY0VLfTuTyJMR25mPncResfPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:af:2a:f5:e4:3d:04:13:2d:20:12:b6:06:88:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40db58d152df4ee4f224c476e663e77117ac7cfa
Validity
Not Before: Jul 2 15:18:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca257d3c1f8505ee52b33c0e3340c8ce0ce253fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d2:5a:6a:97:06:70:e0:40:0b:a2:0e:54:33:
0e:65:66:fd:08:1d:cd:e1:66:ea:9b:9f:b4:77:93:
e1:dd:b9:3f:5f:b9:42:af:8b:c9:54:66:6e:0c:3c:
40:c4:ce:d0:c8:71:b5:78:e8:c1:22:51:3d:97:7d:
18:66:be:91:74:dc:46:76:5f:9b:7d:aa:82:a5:8f:
e3:2d:67:f1:c8:9d:6e:7b:32:52:38:bc:40:87:14:
a8:c8:e0:15:73:db:fe:97:d7:dd:f6:23:cf:0d:08:
89:3b:58:d8:23:0f:07:21:84:86:f8:af:aa:78:d6:
46:df:ab:49:52:c1:5c:19:a3:7b:6b:09:2b:a6:9e:
e9:de:bf:fd:d9:9f:0c:5a:cb:82:d4:0f:99:1e:16:
b3:49:8b:9f:06:30:de:1c:1c:ad:e3:1b:b3:23:2e:
af:fa:96:65:e7:c0:5c:b8:f0:1d:41:44:e4:6c:f7:
e8:e4:18:18:54:b4:1d:ee:d7:1d:bc:f8:b3:6b:2f:
ee:9b:ed:59:df:bb:25:78:89:e5:24:21:e0:9d:d0:
e2:8a:92:63:e8:72:48:41:69:3a:51:32:60:e7:6f:
a3:5d:93:ad:15:e4:3f:e2:9d:e8:fe:71:a0:98:9f:
9d:f4:1f:23:c9:4b:67:c2:34:53:36:62:c1:62:2f:
ad:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:25:7D:3C:1F:85:05:EE:52:B3:3C:0E:33:40:C8:CE:0C:E2:53:FA
X509v3 Authority Key Identifier:
keyid:40:DB:58:D1:52:DF:4E:E4:F2:24:C4:76:E6:63:E7:71:17:AC:7C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNtY0VLfTuTyJMR25mPncResfPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/yiV9PB-FBe5SszwOM0DIzgziU_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/36720e-ebf2-4b41-8cc2-faff211ea4c6/1/QNtY0VLfTuTyJMR25mPncResfPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.8.0/22
Signature Algorithm: sha256WithRSAEncryption
41:9c:79:7f:d0:82:68:34:dc:5a:ba:31:30:e8:3d:07:3c:5a:
d2:c5:c2:dd:6f:e9:2e:6b:06:96:6b:8a:f3:1d:14:58:df:53:
03:36:5a:a9:73:9f:c2:67:28:ff:e7:6c:24:f4:e4:f1:9b:8d:
19:2a:18:1f:66:6f:18:e2:a5:c4:92:84:12:c6:07:fa:e3:1c:
9d:22:6d:bd:d6:11:36:85:19:ff:91:a3:f9:78:39:48:6b:83:
75:c1:8d:07:cc:86:6b:28:72:95:ab:07:28:ff:12:88:3d:c0:
23:ff:bf:c8:58:9f:f7:13:a9:c6:6a:6a:94:ae:84:d2:9a:05:
b1:90:25:ec:84:9f:1a:63:eb:be:61:10:04:28:9b:d9:a9:8a:
3d:39:eb:f7:63:4a:a1:f6:ce:62:fc:fd:a0:55:80:ec:1f:90:
83:82:cc:3c:75:88:c8:23:ef:e3:47:a9:24:3c:12:97:21:46:
35:ea:9e:87:fd:26:82:3e:4f:d1:53:d3:25:be:dd:d3:11:12:
38:e2:07:a3:40:13:7a:c8:55:4b:cb:e2:2d:36:b1:19:45:71:
77:df:06:26:8b:9f:3b:28:0b:38:e0:07:52:06:07:bf:db:b7:
65:7d:3b:2b:83:be:f5:3b:0d:54:3b:78:17:91:23:1d:4c:00:
1c:a6:5e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:26:38 2026 by rpki-client