Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/428325-203e-41f8-9a9f-e2065dc0b122/1/YVo4YW8l9CG0wbI3efO23UaQ8bw.roa
File: YVo4YW8l9CG0wbI3efO23UaQ8bw.roa (raw, json)
Hash identifier: yB3HoVytKDU5v9fh0ZTJG3JbErBKhBuuXJyupWQ2A4Y=
Subject key identifier: 61:5A:38:61:6F:25:F4:21:B4:C1:B2:37:79:F3:B6:DD:46:90:F1:BC
Certificate issuer: /CN=040c6496edb2c7ed76981805e954d72baf2d8e82
Certificate serial: 01A0D7DE820AFC1EAB8AB8D4414CD40CC413
Authority key identifier: 04:0C:64:96:ED:B2:C7:ED:76:98:18:05:E9:54:D7:2B:AF:2D:8E:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BAxklu2yx-12mBgF6VTXK68tjoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/428325-203e-41f8-9a9f-e2065dc0b122/1/YVo4YW8l9CG0wbI3efO23UaQ8bw.roa
Signing time: Fri 25 Sep 2026 09:21:18 +0000
ROA not before: Fri 25 Sep 2026 09:21:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38719
IP address blocks: 176.74.24.0/21 maxlen: 24
185.184.152.0/22 maxlen: 24
185.184.153.0/24 maxlen: 24
185.184.154.0/23 maxlen: 23
2a00:fd80::/32 maxlen: 32
2a00:fd80:aaaa::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/428325-203e-41f8-9a9f-e2065dc0b122/1/BAxklu2yx-12mBgF6VTXK68tjoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/428325-203e-41f8-9a9f-e2065dc0b122/1/BAxklu2yx-12mBgF6VTXK68tjoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BAxklu2yx-12mBgF6VTXK68tjoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 21:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:de:82:0a:fc:1e:ab:8a:b8:d4:41:4c:d4:0c:c4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=040c6496edb2c7ed76981805e954d72baf2d8e82
Validity
Not Before: Sep 25 09:21:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=615a38616f25f421b4c1b23779f3b6dd4690f1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:80:59:46:0a:9a:85:6c:3e:56:98:44:b5:5d:
44:b7:c8:b0:8d:c4:c8:25:d4:89:73:ff:e6:f1:76:
9c:45:55:63:f7:f9:f2:e1:f7:37:11:e9:99:78:51:
54:3c:c1:5d:bd:93:5f:f0:65:ad:a9:e1:0d:11:85:
b0:ea:15:88:a9:cf:4c:b4:5e:e2:2a:da:8b:8c:e0:
9f:83:91:a3:69:93:35:f5:62:dd:c8:13:21:ce:7f:
d9:60:ed:e8:63:b1:3d:d7:c9:da:1b:06:de:56:5c:
e4:55:3f:4b:44:a4:8b:eb:fd:84:a2:9c:18:72:d8:
f1:80:da:b9:e5:bd:8e:f9:40:83:f4:46:02:6a:5d:
8c:fd:8d:94:54:74:e2:8f:e1:51:3b:0a:27:64:66:
af:d0:63:6c:a3:88:e1:e8:3a:88:be:78:ee:3b:70:
93:d2:b9:e3:1a:34:92:db:1b:e0:40:5b:ee:72:95:
d7:8e:80:08:93:a0:74:ae:4a:50:89:9f:40:c7:fb:
63:1d:1b:f3:14:85:04:63:39:4c:d2:ea:ec:4c:1f:
5f:f4:7f:14:72:4c:44:1b:6d:96:55:62:0f:d6:ae:
67:c7:48:a5:3a:8a:09:ed:90:d9:1b:7a:08:f1:86:
ad:c8:a6:ba:7c:1a:83:84:3d:d9:01:90:a9:ce:78:
79:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5A:38:61:6F:25:F4:21:B4:C1:B2:37:79:F3:B6:DD:46:90:F1:BC
X509v3 Authority Key Identifier:
keyid:04:0C:64:96:ED:B2:C7:ED:76:98:18:05:E9:54:D7:2B:AF:2D:8E:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BAxklu2yx-12mBgF6VTXK68tjoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/428325-203e-41f8-9a9f-e2065dc0b122/1/YVo4YW8l9CG0wbI3efO23UaQ8bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/428325-203e-41f8-9a9f-e2065dc0b122/1/BAxklu2yx-12mBgF6VTXK68tjoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.74.24.0/21
185.184.152.0/22
IPv6:
2a00:fd80::/32
Signature Algorithm: sha256WithRSAEncryption
c7:31:dc:4c:91:b7:63:0d:ab:2e:89:3c:f6:52:38:f7:ea:b2:
26:a6:fb:89:75:b0:01:55:51:2b:80:a9:45:bf:b0:71:b3:82:
33:57:44:f0:39:59:86:ff:d3:d6:37:fb:74:6c:00:9a:32:c6:
78:df:e3:c6:a0:ef:c5:4e:9a:0c:8e:03:21:ad:e1:4a:68:90:
b1:83:c7:38:b1:f3:d6:c0:41:f6:7b:c5:de:74:cd:7c:e9:22:
4f:39:e5:f7:fd:59:df:a4:5e:ef:1e:c3:26:b6:66:e4:5f:1f:
c2:b1:e8:7b:c3:ea:2f:ef:67:be:82:bf:bd:61:56:75:7b:fd:
c5:d6:ef:7f:ad:6c:3f:e0:71:5d:7e:be:64:2b:e3:b9:5c:0b:
da:2a:b7:9b:15:12:38:4c:81:6a:26:33:ca:43:2c:30:e4:01:
55:19:32:87:8d:2e:3e:ea:61:09:8a:41:cf:d9:4e:b6:14:0f:
a7:60:4a:d3:5a:e3:34:98:8e:5c:d3:de:d5:b7:82:c6:13:a3:
d9:48:05:fa:7c:0b:d5:5d:09:d0:52:27:3e:79:8a:4b:2a:1d:
79:8b:92:19:ba:df:f8:fc:6c:a4:59:54:35:2c:dd:2a:5c:a1:
49:a9:7c:b7:6b:fc:3c:0c:c9:79:e6:c5:61:7d:5c:2f:4b:d3:
f9:f0:26:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:58:34 2026 by rpki-client