Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/YtSMX1szMqffjUsreY7EufsJc5E.roa
File: YtSMX1szMqffjUsreY7EufsJc5E.roa (raw, json)
Hash identifier: Gxyvk3oIm8+FDduKzxtkWcMJR9Ba0cJtW8p8r9jPrGM=
Subject key identifier: 62:D4:8C:5F:5B:33:32:A7:DF:8D:4B:2B:79:8E:C4:B9:FB:09:73:91
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019DC03FE8C7718519CC1206CE9666C5F0B1
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/YtSMX1szMqffjUsreY7EufsJc5E.roa
Signing time: Fri 24 Apr 2026 16:08:27 +0000
ROA not before: Fri 24 Apr 2026 16:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 264825
IP address blocks: 185.181.32.0/23 maxlen: 23
185.181.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 22:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c0:3f:e8:c7:71:85:19:cc:12:06:ce:96:66:c5:f0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Apr 24 16:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62d48c5f5b3332a7df8d4b2b798ec4b9fb097391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b2:d5:bc:c0:9a:1e:94:d0:4e:ab:c5:5d:67:
88:28:9f:c8:ba:8b:73:b5:fd:88:c9:a2:ee:b4:c1:
c0:52:ac:75:25:3f:a7:2b:63:d2:70:7a:b2:ca:68:
71:8c:41:dc:cc:96:20:c6:e2:70:10:7e:95:77:11:
af:73:0c:e9:ce:08:6a:03:9a:23:f1:28:0d:73:1a:
e6:aa:0a:00:65:0d:da:02:08:8d:92:19:9b:06:ab:
7b:c7:8d:27:74:4a:fd:7d:2c:6f:11:10:34:34:f1:
ab:1f:70:dc:ea:34:ea:8c:68:ac:fb:8e:d7:83:82:
e9:49:49:4b:cc:ce:4c:56:2b:d2:f9:20:32:04:1d:
85:d4:97:e3:07:0a:65:47:1e:bc:9f:b5:f2:b3:b7:
68:b8:d9:7c:c3:ff:77:bf:aa:88:de:52:b4:52:81:
b1:91:8b:fb:ac:61:03:6d:c2:d8:0e:9d:c6:73:4d:
2e:7b:d4:52:ba:e5:69:19:13:84:10:f0:2e:ae:5a:
e0:7f:2c:4f:91:0d:4b:d3:5a:4c:2a:85:d7:3a:1f:
1b:9b:bb:83:0b:5f:e0:93:b8:b2:9a:45:09:d0:4b:
cd:30:11:c4:66:78:df:71:87:8f:49:a9:e3:0f:49:
f3:c7:94:87:bd:6b:70:d6:28:6e:6d:55:44:13:9c:
63:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D4:8C:5F:5B:33:32:A7:DF:8D:4B:2B:79:8E:C4:B9:FB:09:73:91
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/YtSMX1szMqffjUsreY7EufsJc5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.32.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:f9:f7:8c:22:4e:d7:59:f0:3a:ce:c9:e8:43:55:32:b8:ce:
6b:9a:44:cc:37:ed:5a:d3:b0:a3:18:e4:24:86:e4:f0:d1:ae:
c9:32:5b:93:b4:3b:d9:3a:c4:a2:21:ae:5e:2a:5b:18:73:6b:
5d:51:c0:8f:9e:23:f9:85:af:3c:43:d7:48:41:fe:df:44:3c:
6e:aa:d6:f1:16:28:48:78:d2:5e:04:f0:22:f1:6a:67:f8:47:
1e:9d:1f:64:69:81:c5:d1:a6:6c:61:82:33:dd:12:b8:12:9a:
bf:ba:b1:e7:75:bf:6a:58:9b:f8:a4:a7:58:20:ed:1d:77:60:
3d:08:62:db:2a:0d:6b:95:61:d8:fc:18:4e:0e:89:70:8a:db:
0b:4f:4c:74:b2:08:9a:0c:0c:6e:e9:42:2a:19:c1:48:86:13:
87:86:11:fe:24:f5:f9:e7:4f:18:2d:aa:a9:ae:d6:19:6d:a3:
32:83:27:da:30:4c:f7:dc:72:69:24:49:05:8b:1a:8a:ea:b6:
bf:00:46:db:b8:20:4b:a7:e4:c5:15:3a:a5:ff:b5:a4:b2:d3:
f0:41:3b:43:ba:52:b1:df:ec:39:27:f5:d2:19:c1:64:86:6c:
ec:e6:c5:e2:c6:19:ad:3f:e4:0c:6b:02:fd:05:b6:4a:13:a1:
32:b0:03:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 07:13:28 2026 by rpki-client