Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/yF8L1puSFQ1FrD58Xc4G7CVaa-4.roa
File: yF8L1puSFQ1FrD58Xc4G7CVaa-4.roa (raw, json)
Hash identifier: UoXPx27v5kpQSQjO96icjRk2Ax/d8OdPzqWgLXo6hq4=
Subject key identifier: C8:5F:0B:D6:9B:92:15:0D:45:AC:3E:7C:5D:CE:06:EC:25:5A:6B:EE
Certificate issuer: /CN=9893aef5fb507ef0e35b682daa8e7abc03c3a2af
Certificate serial: 019F23684680701C91949187ECBA2AEEB5D9
Authority key identifier: 98:93:AE:F5:FB:50:7E:F0:E3:5B:68:2D:AA:8E:7A:BC:03:C3:A2:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJOu9ftQfvDjW2gtqo56vAPDoq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/yF8L1puSFQ1FrD58Xc4G7CVaa-4.roa
Signing time: Thu 02 Jul 2026 15:17:44 +0000
ROA not before: Thu 02 Jul 2026 15:17:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12480
IP address blocks: 194.174.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJOu9ftQfvDjW2gtqo56vAPDoq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:46:80:70:1c:91:94:91:87:ec:ba:2a:ee:b5:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9893aef5fb507ef0e35b682daa8e7abc03c3a2af
Validity
Not Before: Jul 2 15:17:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c85f0bd69b92150d45ac3e7c5dce06ec255a6bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9d:cd:30:a2:8b:5a:20:63:9b:4a:08:92:2e:
bb:fd:f2:38:df:bf:4b:d1:1d:cb:29:55:46:7f:b7:
3e:4c:37:96:de:1e:f0:8e:22:ad:5d:24:4d:88:9f:
4d:18:bb:0b:78:34:df:f7:c6:7d:5e:ee:39:0c:20:
96:4f:fb:43:7b:1e:a2:51:a5:6c:2b:4d:f3:94:47:
ad:1b:26:5d:75:5c:56:1a:e2:6f:d5:b8:cb:b5:53:
28:41:d8:ba:53:4f:0d:9b:d5:ea:61:88:02:ca:3d:
ba:5c:18:fb:e5:c0:b2:c4:24:a6:5c:36:3b:c8:6c:
81:4e:36:bc:38:7a:07:83:6b:ce:22:4b:e8:57:ee:
16:4a:32:6b:ea:8b:6a:f6:09:6f:ef:9c:ee:d9:82:
45:5a:a8:81:b2:2e:70:42:fe:74:30:97:3d:44:8a:
ab:72:01:10:1e:c6:bf:e5:68:8f:8f:94:fe:da:4a:
14:67:44:af:4a:f7:76:30:fe:5b:05:7a:d8:e1:ef:
2a:5f:9d:47:d3:74:0b:70:9a:04:c8:af:fa:31:c4:
64:2b:f1:af:ba:6e:9f:9d:08:7d:b8:d0:2f:a4:24:
d1:49:b6:b6:23:5b:98:6e:b1:ab:e9:9b:1b:c7:0d:
8c:ac:ae:3c:ac:b4:5e:6d:53:1d:02:b3:3e:3b:2e:
2a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5F:0B:D6:9B:92:15:0D:45:AC:3E:7C:5D:CE:06:EC:25:5A:6B:EE
X509v3 Authority Key Identifier:
keyid:98:93:AE:F5:FB:50:7E:F0:E3:5B:68:2D:AA:8E:7A:BC:03:C3:A2:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJOu9ftQfvDjW2gtqo56vAPDoq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/yF8L1puSFQ1FrD58Xc4G7CVaa-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.174.11.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:c9:e2:a4:90:83:61:ac:75:64:9a:9d:13:64:c4:96:5d:8e:
6e:1f:62:3a:22:10:a9:f0:13:76:b8:a9:7c:7e:d4:df:88:f8:
f8:b4:6c:f7:30:14:ce:26:e1:9f:1c:3f:da:ac:33:d1:6e:07:
c3:3e:f6:3c:8b:8c:e6:45:9e:71:37:d6:15:37:f1:ef:03:12:
28:50:3c:c7:fb:52:46:e9:3e:77:47:ba:86:a1:36:ba:2a:b5:
c9:50:a5:27:26:57:ea:34:98:2d:9f:a9:ed:ba:59:aa:9b:30:
95:24:e2:9c:9a:d9:6c:fe:1a:b2:98:90:15:9a:f0:b9:ac:88:
fb:64:cc:9a:a5:bf:b4:f6:95:99:91:ad:7a:79:59:35:38:53:
4e:a8:f5:c8:57:25:8d:1d:b0:24:d6:21:d3:35:da:fd:4e:6d:
42:3f:10:1a:ea:e7:8c:9b:d6:61:81:89:39:34:89:d0:d3:15:
bc:62:29:c2:31:e9:48:dd:7e:dd:b1:a7:8e:67:8b:f6:26:93:
b3:07:bf:cc:aa:02:c1:1e:ed:6a:e9:a4:33:ea:66:88:a7:cf:
fe:1a:0b:ca:be:02:d7:bb:b4:bd:eb:c1:c1:ef:93:99:e9:e4:
ef:30:6c:d2:78:90:63:2b:b0:04:03:4c:95:69:29:5c:5d:eb:
19:99:85:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:50 2026 by rpki-client