Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/YFcRJIWw3vxIzvkY-8u-8c691f8.roa
File: YFcRJIWw3vxIzvkY-8u-8c691f8.roa (raw, json)
Hash identifier: THB+jxktyZjvUxZ1NJSg5XToUQ22aa8mKJXvRtR7GBE=
Subject key identifier: 60:57:11:24:85:B0:DE:FC:48:CE:F9:18:FB:CB:BE:F1:CE:BD:D5:FF
Certificate issuer: /CN=f5882f33f7480dcc7b87637aea76368289d75c2d
Certificate serial: 01A043088EA99483117D16410CDD018C75EB
Authority key identifier: F5:88:2F:33:F7:48:0D:CC:7B:87:63:7A:EA:76:36:82:89:D7:5C:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/YFcRJIWw3vxIzvkY-8u-8c691f8.roa
Signing time: Thu 27 Aug 2026 11:43:49 +0000
ROA not before: Thu 27 Aug 2026 11:43:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3292
IP address blocks: 195.10.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:08:8e:a9:94:83:11:7d:16:41:0c:dd:01:8c:75:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5882f33f7480dcc7b87637aea76368289d75c2d
Validity
Not Before: Aug 27 11:43:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6057112485b0defc48cef918fbcbbef1cebdd5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:16:19:28:08:a9:e5:c7:e0:e4:85:d8:35:ec:
87:7f:70:ef:ee:24:92:f0:b9:59:b5:19:f4:28:23:
f6:dd:d2:f8:5e:07:c5:68:ac:4b:5c:3d:62:02:d5:
26:f2:98:3e:33:4a:71:95:16:31:d0:77:f8:73:4b:
6a:57:cf:fc:35:0f:ea:74:32:d1:64:0c:c1:bd:10:
7c:f7:53:1b:56:cf:87:48:1c:92:15:62:75:ed:cb:
f7:c2:8a:52:9a:04:c3:31:9e:aa:b9:ea:c4:09:01:
3b:5b:37:6f:51:67:1b:a6:22:50:4d:95:e4:1b:ea:
6f:f5:50:16:dc:2a:dc:94:a2:58:c4:aa:b9:d0:4a:
01:66:16:97:ff:0d:57:0e:97:b3:ba:f6:fc:5f:81:
2e:1c:4e:fc:99:1a:b5:8c:b9:e4:73:a9:a7:e8:ef:
60:76:38:dc:d0:54:82:92:b4:09:2b:d8:86:42:fc:
bc:c2:07:87:fa:60:81:4a:db:41:66:3b:2b:17:de:
e4:13:b0:88:32:96:8e:36:fe:19:72:de:fa:bc:35:
52:69:47:69:c5:4d:18:e5:fe:df:49:f5:98:8e:8d:
7a:82:4c:81:c7:61:52:d0:8e:aa:5e:41:0c:d7:6e:
37:f7:5f:b6:a0:6c:8e:8e:2c:7f:4e:38:5f:62:49:
46:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:57:11:24:85:B0:DE:FC:48:CE:F9:18:FB:CB:BE:F1:CE:BD:D5:FF
X509v3 Authority Key Identifier:
keyid:F5:88:2F:33:F7:48:0D:CC:7B:87:63:7A:EA:76:36:82:89:D7:5C:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/YFcRJIWw3vxIzvkY-8u-8c691f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.10.207.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:94:91:32:0f:be:e5:d7:fe:ae:05:7c:30:74:18:c2:90:c9:
92:b5:18:9f:8e:35:c7:cf:53:e1:bf:05:ba:a9:62:fa:90:2b:
61:cc:d4:ec:e1:77:8e:d1:c3:91:c2:b8:4c:53:b3:3b:0d:d7:
9a:38:64:d4:f1:e4:6b:73:56:0a:51:40:d1:f9:5c:d1:59:6b:
bd:ff:ed:4f:41:16:50:98:7d:6b:e2:e3:f0:ca:38:fb:28:af:
f5:9f:a4:4e:8e:62:b3:c5:d2:d2:76:6f:73:42:4e:4c:41:af:
00:90:ff:b2:c5:61:eb:e2:c1:be:39:8b:da:36:f2:e6:6a:ff:
57:9e:d9:94:26:4a:d3:31:67:fc:ff:f1:37:fd:0e:c5:c0:b1:
a6:e5:92:f8:09:26:24:21:aa:d6:7b:93:1e:cf:ee:04:dd:bd:
9d:ee:7e:91:3c:85:b2:33:16:69:ee:d1:70:bd:f8:5c:6e:d6:
de:7f:dc:61:d0:f3:80:24:c6:14:e1:17:40:63:62:0c:33:a1:
24:b3:8a:92:42:06:9d:9e:aa:8f:4b:e2:79:50:4f:7e:86:25:
04:00:ae:57:fe:7a:83:c3:ab:b8:a7:03:b1:76:a5:30:89:b3:
73:b5:9d:12:7a:2e:ed:30:95:c6:4e:c4:36:a9:c2:92:7b:72:
a3:9c:95:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 22:57:11 2026 by rpki-client