Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/C-YG1j20epL-RxBdm-hTM8r-QyU.roa
File: C-YG1j20epL-RxBdm-hTM8r-QyU.roa (raw, json)
Hash identifier: N2y2mVn+9KBtbEC+UmPj+ixx+p1JXSM8fCvPkBHiMes=
Subject key identifier: 0B:E6:06:D6:3D:B4:7A:92:FE:47:10:5D:9B:E8:53:33:CA:FE:43:25
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019FEC013BB5765A103AA28593CB2B1AB582
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/C-YG1j20epL-RxBdm-hTM8r-QyU.roa
Signing time: Mon 10 Aug 2026 14:08:51 +0000
ROA not before: Mon 10 Aug 2026 14:08:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 274427
IP address blocks: 217.76.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ec:01:3b:b5:76:5a:10:3a:a2:85:93:cb:2b:1a:b5:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Aug 10 14:08:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0be606d63db47a92fe47105d9be85333cafe4325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6e:11:10:e6:4f:3f:5c:c5:69:d6:22:e6:3a:
b8:63:dc:6b:70:b1:3d:d1:86:d0:88:2b:d9:12:75:
3d:c0:bc:9c:94:1b:7e:f6:1d:ad:36:7c:55:07:51:
e3:78:26:83:bf:46:be:6f:f1:69:1e:0b:9d:4d:96:
d0:c0:4c:b0:9e:36:fb:3d:b8:d4:3c:92:76:99:fd:
75:c4:e9:03:f1:2f:29:46:3c:71:8e:e0:27:5c:72:
3c:8d:e9:e6:99:de:8a:90:8f:2e:f0:e0:24:bd:14:
ee:92:9a:21:f1:22:d2:e3:71:2f:90:f5:52:65:8c:
f5:d3:ee:f4:ed:38:e8:e2:27:14:db:a3:7c:24:6f:
65:e8:ac:77:32:5d:18:9f:bb:51:48:7f:36:72:5b:
c1:ff:a3:cd:9a:ef:b1:88:31:4e:b6:59:f8:25:ce:
f1:e3:15:4e:37:34:15:59:e7:60:b2:13:20:32:51:
a6:17:8f:5c:ea:87:6d:40:9c:45:a3:52:c5:62:27:
64:21:f2:1e:24:44:b5:48:9b:8e:5c:00:c6:94:29:
ba:1d:61:ad:94:a2:2a:8e:d9:25:01:2d:f6:91:7e:
af:72:5a:8f:7b:64:1f:9e:06:f3:62:fd:41:98:20:
e6:11:50:fa:fd:7c:5f:e1:4f:49:89:3d:fb:ff:8b:
97:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E6:06:D6:3D:B4:7A:92:FE:47:10:5D:9B:E8:53:33:CA:FE:43:25
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/C-YG1j20epL-RxBdm-hTM8r-QyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.76.246.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:e8:23:3d:42:14:26:fd:d1:f6:12:84:01:90:29:b2:20:96:
68:6b:f6:08:59:fc:43:b7:d1:9c:c9:01:63:ef:64:15:a5:39:
5a:91:91:d9:6d:86:b6:9a:83:3b:2c:84:7f:c3:b6:de:ea:73:
25:f8:91:7d:15:6e:4f:e7:c2:21:61:01:b8:f9:fc:b6:cf:29:
e8:cf:fc:6e:3f:bd:72:34:c6:40:46:e1:e7:a1:75:81:fb:41:
70:8f:3f:ea:d3:54:5f:b5:19:f5:e8:15:6c:80:7c:20:a6:33:
d8:78:95:d1:96:04:19:27:b0:31:ee:8f:08:06:23:13:f0:c9:
fe:6d:17:7e:7e:3e:34:65:f5:8f:ab:3e:19:78:61:9e:72:62:
65:56:aa:b6:aa:63:31:a5:0a:3f:ee:58:50:f7:df:27:79:4c:
65:99:25:f3:73:22:08:68:18:72:41:60:2f:26:9f:e9:db:60:
a3:a4:df:a1:66:54:fa:53:04:ac:6d:78:cb:0a:33:7a:dd:cc:
35:8b:f9:1b:2a:b5:db:4c:a3:4c:b7:06:3b:46:b2:5c:dc:44:
4f:0b:d6:37:dd:59:32:3d:94:74:bd:3c:ab:97:de:bb:8b:3a:
9d:15:2d:18:38:a9:4c:e7:5c:71:c3:a5:7a:a3:e8:91:42:2e:
cd:5a:ae:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 14:27:00 2026 by rpki-client