Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/b8d92e-38ed-41b5-ac57-de8fc31b7042/1/YluA6nn9_ZeoHJNXusDVsmof_vQ.roa
File: YluA6nn9_ZeoHJNXusDVsmof_vQ.roa (raw, json)
Hash identifier: FecFRAlHvWvToi6q52jEFelhzQj84gV3wBIToo7AuU0=
Subject key identifier: 62:5B:80:EA:79:FD:FD:97:A8:1C:93:57:BA:C0:D5:B2:6A:1F:FE:F4
Certificate issuer: /CN=97c94e99c3d9a25284b2edb6f3eaada7c4e18f3b
Certificate serial: 01A091A55755BF7003A7A7404E32C95CF61A
Authority key identifier: 97:C9:4E:99:C3:D9:A2:52:84:B2:ED:B6:F3:EA:AD:A7:C4:E1:8F:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8lOmcPZolKEsu228-qtp8Thjzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b8d92e-38ed-41b5-ac57-de8fc31b7042/1/YluA6nn9_ZeoHJNXusDVsmof_vQ.roa
Signing time: Fri 11 Sep 2026 18:05:27 +0000
ROA not before: Fri 11 Sep 2026 18:05:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53973
IP address blocks: 194.106.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b8d92e-38ed-41b5-ac57-de8fc31b7042/1/l8lOmcPZolKEsu228-qtp8Thjzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/b8d92e-38ed-41b5-ac57-de8fc31b7042/1/l8lOmcPZolKEsu228-qtp8Thjzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/l8lOmcPZolKEsu228-qtp8Thjzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 23:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:91:a5:57:55:bf:70:03:a7:a7:40:4e:32:c9:5c:f6:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97c94e99c3d9a25284b2edb6f3eaada7c4e18f3b
Validity
Not Before: Sep 11 18:05:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=625b80ea79fdfd97a81c9357bac0d5b26a1ffef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fa:be:74:b4:f0:eb:ec:8c:68:48:a8:7c:73:
dd:0b:69:53:8b:64:a4:af:ac:ed:3f:7d:a0:84:bb:
74:6a:de:ed:95:ea:79:c7:0c:39:98:ef:ea:c3:78:
39:02:14:e2:5e:83:fe:ce:73:c3:e0:0f:9a:cb:90:
ec:14:75:0a:7e:22:b6:a3:b6:60:ee:48:c2:4f:b0:
db:85:27:1c:5f:21:fd:e7:e3:52:1e:a0:c4:ae:67:
cd:d1:30:cc:d3:8f:10:cf:8c:1d:90:c6:24:b4:62:
11:4c:5b:4c:31:51:ef:bc:85:3a:d0:ca:4e:68:9d:
cd:2f:0f:23:63:42:df:36:77:6a:12:7a:d1:2c:87:
82:2b:59:3b:75:53:77:8d:2b:fc:c3:c3:f3:3c:34:
b3:ea:51:fc:09:69:5c:68:6f:ab:2f:3d:74:be:94:
b6:e8:53:04:3a:ca:87:9b:75:2c:ef:ce:9a:92:a7:
79:e5:4b:dd:64:55:4c:ed:11:15:32:55:3e:d1:33:
c4:9d:0d:7c:f2:1a:6c:eb:01:da:5d:4a:60:bf:0a:
9c:06:4a:a6:2a:1b:ac:eb:c7:fd:0b:59:df:65:0b:
b9:8e:ef:92:07:6f:e0:05:9e:59:12:ee:28:0e:c9:
c7:ff:9b:dc:6a:bd:fa:0f:31:dc:19:41:ad:db:5b:
38:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5B:80:EA:79:FD:FD:97:A8:1C:93:57:BA:C0:D5:B2:6A:1F:FE:F4
X509v3 Authority Key Identifier:
keyid:97:C9:4E:99:C3:D9:A2:52:84:B2:ED:B6:F3:EA:AD:A7:C4:E1:8F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8lOmcPZolKEsu228-qtp8Thjzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b8d92e-38ed-41b5-ac57-de8fc31b7042/1/YluA6nn9_ZeoHJNXusDVsmof_vQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b8d92e-38ed-41b5-ac57-de8fc31b7042/1/l8lOmcPZolKEsu228-qtp8Thjzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.106.199.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:f5:b3:ee:f7:7a:5d:d3:b1:d3:3a:59:c0:e9:37:d5:1a:bd:
36:68:0b:8d:47:87:8e:ea:2b:8c:54:2b:94:27:6d:91:af:0d:
3a:6c:eb:ce:ad:81:9c:73:3f:44:74:72:b6:6b:d8:ca:02:9a:
7b:07:3f:a4:c8:89:20:d5:df:57:20:b2:8a:fd:ac:fb:4b:77:
14:f4:8b:9c:06:51:a1:84:eb:fb:48:f5:44:74:51:03:0f:f5:
ed:d1:b5:e5:a8:93:b8:a5:f9:29:0f:0e:21:b4:bd:0f:f5:e1:
4a:66:d5:8c:e9:5c:58:16:7b:32:29:69:e0:30:df:a1:58:97:
60:d7:a3:7c:8c:a4:73:36:a5:57:8a:44:b9:11:8e:e8:1a:30:
9c:37:e7:15:fb:e9:69:54:fb:94:26:a4:5f:59:49:46:45:71:
81:30:1d:91:bd:14:5c:56:2a:9f:21:e8:78:fc:d3:2e:b3:6a:
52:b5:ff:30:47:00:9b:e1:c9:a7:65:35:7a:7e:5f:3a:d7:e4:
06:c6:0c:0c:b0:e3:21:49:c3:e0:0d:c4:61:d2:4b:3b:0d:15:
03:f8:85:2e:c0:02:27:55:16:69:60:30:d0:f4:45:12:12:c2:
e5:8e:63:72:47:3f:79:89:3b:4e:cb:ee:9e:d1:e1:fc:12:64:
d5:cb:77:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 05:36:44 2026 by rpki-client