Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/y77AsbnLZZ9Gpf-awIgJ-K3iLPg.roa
File: y77AsbnLZZ9Gpf-awIgJ-K3iLPg.roa (raw, json)
Hash identifier: fN33swimyf0FNqpjR7zufE/D8/hak7qq7wpRll0Z8cE=
Subject key identifier: CB:BE:C0:B1:B9:CB:65:9F:46:A5:FF:9A:C0:88:09:F8:AD:E2:2C:F8
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 019FB34ADF03464C89B1234A8F8D8A96DDCE
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/y77AsbnLZZ9Gpf-awIgJ-K3iLPg.roa
Signing time: Thu 30 Jul 2026 13:50:56 +0000
ROA not before: Thu 30 Jul 2026 13:50:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402276
IP address blocks: 185.209.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 20:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b3:4a:df:03:46:4c:89:b1:23:4a:8f:8d:8a:96:dd:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Jul 30 13:50:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cbbec0b1b9cb659f46a5ff9ac08809f8ade22cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ed:e8:f7:76:34:58:a4:cd:94:f1:fb:14:e9:
2b:26:88:d2:d6:75:4a:17:fb:4f:02:07:50:ee:99:
7e:08:62:94:87:c2:6b:fc:97:ac:6c:d8:b1:44:1c:
be:71:ec:5b:2d:6c:71:c3:a8:2b:1d:76:e0:00:da:
02:62:b4:fd:61:83:84:c2:2d:51:e7:a5:1e:6a:4b:
e5:da:60:88:aa:e6:9f:a3:5e:47:c9:b0:12:c9:ed:
d2:b8:82:64:72:43:91:62:26:86:31:b0:f3:de:54:
3d:60:a6:3e:dd:b4:7c:2e:26:3e:de:04:36:a8:96:
09:91:c6:a7:82:d2:af:fb:53:de:8f:15:8b:43:61:
2d:f0:36:63:91:f3:19:26:77:46:95:87:80:cc:a6:
4d:be:23:7f:65:00:f5:5f:00:7b:5c:9a:3c:c2:3e:
c3:94:f4:eb:ac:21:71:68:17:f7:cd:3b:e2:c2:53:
ff:61:c3:61:73:54:0c:81:c1:89:de:c1:50:0f:ef:
d1:a9:18:85:d9:d0:18:16:0e:86:64:a2:b0:56:20:
60:d3:64:e5:b3:86:b5:ed:f8:6f:a1:ac:e7:19:f0:
22:4a:38:44:60:98:7e:73:38:27:9a:a3:43:25:5f:
cd:ba:96:d2:1e:7a:22:37:8b:cf:2c:89:2d:3a:c3:
d7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BE:C0:B1:B9:CB:65:9F:46:A5:FF:9A:C0:88:09:F8:AD:E2:2C:F8
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/y77AsbnLZZ9Gpf-awIgJ-K3iLPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.131.0/24
Signature Algorithm: sha256WithRSAEncryption
79:c0:5d:89:83:47:77:78:46:58:db:ed:69:53:a2:c5:66:87:
ca:40:3b:05:42:22:1b:b9:0f:76:af:5f:49:aa:24:44:8b:79:
8f:2d:66:f7:f4:01:04:d6:d8:2a:b8:2f:b6:75:db:09:c5:80:
c3:af:60:de:9c:4f:50:fb:54:e0:0f:09:5d:da:2a:b0:6e:c2:
96:a6:c1:f5:cf:99:1e:31:f7:c5:68:23:9c:00:c0:18:ef:90:
ec:d4:f1:d8:5a:02:41:c4:75:2a:f0:89:4d:ed:85:a1:ff:a3:
0f:9b:1a:61:69:ab:b2:a5:8c:f6:9c:7e:bb:1f:74:80:fa:49:
d1:f9:d5:38:8b:8c:73:dd:3e:65:43:b5:b7:e6:be:ce:ca:15:
33:06:44:ca:c0:19:4e:98:71:2a:ba:19:fa:6a:45:1b:8c:32:
99:04:6d:c2:dc:01:85:9e:5d:34:3b:5c:1b:55:3b:5e:88:35:
5f:fd:18:43:dd:4e:4d:a8:aa:2e:2f:b5:f5:3d:e9:dd:70:32:
48:12:60:08:20:0c:d4:df:8e:95:ad:c3:27:fa:8b:c8:a0:d9:
f6:6a:9b:16:c2:18:53:e3:45:83:77:37:7e:55:f7:e8:79:75:
b1:a0:94:63:91:1c:ce:20:a4:f9:76:98:6a:91:b1:99:d1:bb:
57:3e:8b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 02:26:29 2026 by rpki-client