Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/9ycxm4HV4M6oBtkQ0FxIq397L0I.roa
File: 9ycxm4HV4M6oBtkQ0FxIq397L0I.roa (raw, json)
Hash identifier: XqZtCHd2v7KOJd8ycJJagKyRkmCuxO52upsQm7ENKi4=
Subject key identifier: F7:27:31:9B:81:D5:E0:CE:A8:06:D9:10:D0:5C:48:AB:7F:7B:2F:42
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01A024D2C5124CF47498F0F28D38A57755A4
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/9ycxm4HV4M6oBtkQ0FxIq397L0I.roa
Signing time: Fri 21 Aug 2026 14:56:27 +0000
ROA not before: Fri 21 Aug 2026 14:56:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48678
IP address blocks: 185.254.29.0/24 maxlen: 24
193.35.152.0/24 maxlen: 24
193.35.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 18:47:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:d2:c5:12:4c:f4:74:98:f0:f2:8d:38:a5:77:55:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Aug 21 14:56:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f727319b81d5e0cea806d910d05c48ab7f7b2f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:01:dc:96:3f:de:d3:16:8c:6f:35:0c:3d:2f:
a2:81:a9:c9:97:06:f5:60:3a:12:5c:79:03:be:71:
40:de:0c:ff:bc:09:47:3b:95:69:11:57:f8:8d:e9:
df:4d:a1:d1:8d:63:87:95:99:d2:84:7a:49:cd:96:
f9:da:2d:3a:a4:6d:4f:d5:6e:e8:37:36:ff:01:60:
c7:0a:0e:76:6c:68:f1:0c:d2:c6:cd:00:ec:e3:5f:
7f:cb:e3:b5:7f:0f:d0:1d:a8:97:14:22:35:ba:f1:
37:53:85:9b:b4:db:88:99:60:12:77:fc:83:fc:a9:
89:36:75:46:48:59:91:f5:21:43:28:1a:0c:83:71:
f6:29:b4:51:c1:e4:2d:3f:dc:db:c0:94:a3:b0:71:
a4:9e:50:f2:1a:99:04:32:90:a9:69:af:1f:d4:67:
b8:bc:6d:24:8b:5d:f8:c1:63:49:1d:3d:dc:88:4f:
30:04:a3:2a:a9:55:88:3e:0f:2b:bc:0a:d8:c0:15:
61:12:78:29:90:22:79:cb:cc:a3:ac:e2:cf:c2:84:
d7:52:b9:2d:3a:08:c1:82:8c:5c:74:cd:79:26:f8:
31:44:ce:8c:37:b1:91:18:01:00:45:b4:df:1b:2a:
f5:10:0c:ce:c8:25:60:7e:ca:5c:27:ae:f7:f1:9b:
82:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:27:31:9B:81:D5:E0:CE:A8:06:D9:10:D0:5C:48:AB:7F:7B:2F:42
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/9ycxm4HV4M6oBtkQ0FxIq397L0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.29.0/24
193.35.152.0/24
193.35.155.0/24
Signature Algorithm: sha256WithRSAEncryption
42:8c:2b:b8:7f:27:81:07:fd:23:92:18:bf:dc:2c:51:48:2a:
77:a1:dc:9a:de:49:62:6c:ca:d4:ef:bb:03:f8:d5:a5:0b:76:
c6:ce:9d:57:02:41:f2:bf:a2:e5:99:a4:b2:96:7e:4e:ec:c0:
56:4c:b0:0d:dc:cb:f0:e5:55:50:6f:ee:64:d7:3d:55:9e:ea:
28:cb:ba:a7:6e:e3:a9:87:25:ef:b9:ac:1b:c8:33:6a:23:d2:
08:1a:c1:2b:91:fb:ae:20:1a:26:12:f0:91:ed:ad:e2:00:e7:
fa:93:16:78:6d:6f:c7:38:5e:09:e8:0e:b4:9f:5d:37:e9:3c:
0a:ae:e5:e6:3e:f5:c0:61:01:0e:c5:e4:fa:dc:7f:d0:65:cc:
25:7a:62:2d:63:aa:0a:16:3c:2b:3f:f0:10:8f:54:c0:41:ba:
26:80:a0:1b:b6:aa:ea:8d:20:d4:61:19:1c:4a:f2:c2:cd:36:
f7:33:9e:aa:87:da:1a:6c:45:73:9f:eb:83:77:92:f3:3b:fc:
b4:41:f4:17:89:47:96:69:5d:55:43:4a:9b:7b:65:16:13:fb:
38:da:8f:18:38:c3:bd:f1:de:5e:b4:b8:7f:ae:4f:3f:e7:66:
ba:6d:1b:3c:fe:e8:5d:6e:19:33:38:44:6e:b2:44:53:7f:39:
13:7e:1a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 01:40:51 2026 by rpki-client