Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/Y98J5H8dP6uynLQgUuV7Sd4ksx8.roa
File: Y98J5H8dP6uynLQgUuV7Sd4ksx8.roa (raw, json)
Hash identifier: n8Cvg8mAyn8pit8Uif+5s8ZG43rBWsDPc3DD9USosKg=
Subject key identifier: 63:DF:09:E4:7F:1D:3F:AB:B2:9C:B4:20:52:E5:7B:49:DE:24:B3:1F
Certificate issuer: /CN=e84d35d4d6459ef5f3553ea310e0c65bb3b0f0d9
Certificate serial: 01A0D9EABB1089B48A6780754E7541B033F3
Authority key identifier: E8:4D:35:D4:D6:45:9E:F5:F3:55:3E:A3:10:E0:C6:5B:B3:B0:F0:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/Y98J5H8dP6uynLQgUuV7Sd4ksx8.roa
Signing time: Fri 25 Sep 2026 18:53:54 +0000
ROA not before: Fri 25 Sep 2026 18:53:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215411
IP address blocks: 87.192.36.0/24 maxlen: 24
87.192.37.0/24 maxlen: 24
87.192.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ea:bb:10:89:b4:8a:67:80:75:4e:75:41:b0:33:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84d35d4d6459ef5f3553ea310e0c65bb3b0f0d9
Validity
Not Before: Sep 25 18:53:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63df09e47f1d3fabb29cb42052e57b49de24b31f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:51:ed:f8:57:23:4c:f5:8b:c5:96:70:12:c8:
75:80:c7:d2:78:ae:bb:37:36:ce:16:1e:75:17:cd:
59:c0:73:6e:2b:62:bf:cb:29:58:af:a2:eb:5b:6d:
19:1a:15:af:07:3e:9d:35:a0:b5:e1:37:7f:aa:85:
e5:4e:f3:ed:d9:df:9f:ef:ae:1e:a4:fb:4a:63:ef:
a0:49:7b:ed:b9:c3:f6:4f:81:69:ae:56:21:88:67:
32:9b:24:7a:89:02:dc:9b:02:cc:ec:ce:26:9a:52:
b7:98:59:19:75:f7:17:b0:e7:86:41:bf:7d:61:e1:
5d:57:44:11:b8:d3:91:4c:73:7a:39:fa:ee:6f:ce:
c1:e4:2a:76:d9:80:55:6e:a8:9a:a1:0d:13:33:79:
8c:44:cf:df:5b:38:f3:36:e7:be:7b:8b:eb:bb:52:
9c:4c:46:91:ba:04:70:2a:dd:0d:ca:c3:ba:81:a0:
a5:42:7b:9f:76:ac:70:eb:24:e9:3f:98:65:c3:41:
d2:59:6b:bf:6f:02:5a:7f:19:d3:a2:db:f1:8e:fa:
ef:12:fb:22:06:66:ce:7b:80:ec:fd:1f:19:5d:44:
88:16:ce:7f:2a:93:63:a8:ff:b2:fa:57:bb:64:49:
af:2a:09:e8:22:2c:5d:a4:76:44:45:48:6a:ca:da:
56:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:DF:09:E4:7F:1D:3F:AB:B2:9C:B4:20:52:E5:7B:49:DE:24:B3:1F
X509v3 Authority Key Identifier:
keyid:E8:4D:35:D4:D6:45:9E:F5:F3:55:3E:A3:10:E0:C6:5B:B3:B0:F0:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/Y98J5H8dP6uynLQgUuV7Sd4ksx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.192.36.0-87.192.38.255
Signature Algorithm: sha256WithRSAEncryption
a0:2b:54:35:a3:ff:81:97:a2:57:30:58:41:61:fa:bf:89:95:
1e:f3:36:b4:b3:b4:9b:50:40:ef:8f:fe:68:42:9f:e9:0d:be:
dc:69:f8:24:6b:b6:c3:36:50:cc:d9:75:34:25:47:10:22:59:
d4:18:7d:11:e8:96:5c:06:55:c1:6a:bb:b3:d4:5c:06:e7:50:
8e:bb:6c:86:fa:b5:95:aa:de:1d:43:cf:49:58:cf:91:9c:fa:
dd:8d:0b:7e:62:3d:49:41:f9:18:76:58:22:7b:46:b4:6d:87:
d5:41:89:fc:68:66:32:8b:c9:71:b6:0e:c9:39:32:2b:88:65:
f3:c7:c6:a6:cb:ad:75:32:ec:84:9c:a5:f1:70:6c:e8:0d:51:
4e:ea:3d:40:b4:5d:7e:39:69:f1:87:4d:72:47:3c:3d:3e:9e:
6a:80:f7:15:e4:ee:75:43:b6:71:5f:b9:a1:b4:01:63:35:bb:
92:5f:df:4d:1c:6b:89:73:82:a1:7d:31:5b:c3:98:85:c5:de:
8e:f8:dd:0c:e5:6d:b4:f8:91:b8:0a:91:11:03:8a:06:24:94:
bf:86:31:2e:bd:0c:9c:72:a4:9f:c2:e8:24:2f:18:dd:19:96:
0a:06:68:bd:03:24:7e:90:a4:b7:08:b1:0b:4d:a3:25:1e:60:
35:0c:86:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:14:03 2026 by rpki-client