Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/y0On2xk5gA_Itl-mPo2vUcHCKEw.roa
File: y0On2xk5gA_Itl-mPo2vUcHCKEw.roa (raw, json)
Hash identifier: MkXQPBb7MoTZ/KyOexSDbgEqQ95RYuw4oKV6zDL+j8s=
Subject key identifier: CB:43:A7:DB:19:39:80:0F:C8:B6:5F:A6:3E:8D:AF:51:C1:C2:28:4C
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01A0B452E90078BFABD3BB9374E8AE3B8ABF
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/y0On2xk5gA_Itl-mPo2vUcHCKEw.roa
Signing time: Fri 18 Sep 2026 11:42:07 +0000
ROA not before: Fri 18 Sep 2026 11:42:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52510
IP address blocks: 94.125.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:52:e9:00:78:bf:ab:d3:bb:93:74:e8:ae:3b:8a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Sep 18 11:42:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb43a7db1939800fc8b65fa63e8daf51c1c2284c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ac:dd:2f:bb:ed:39:25:42:ad:ba:4a:9a:07:
66:04:3f:f1:8b:90:5f:77:1e:fe:a5:60:4f:cd:7c:
27:f4:8d:95:24:73:9d:75:4a:b1:ce:6e:4b:37:7c:
be:ab:13:cc:ca:3e:b5:23:b9:c6:ea:2b:7b:bd:30:
58:fb:3e:ad:39:3b:a6:46:47:98:15:61:d3:04:1c:
58:da:83:8a:6b:66:38:f2:fa:a6:ca:f8:83:06:68:
f3:ee:9c:4d:5b:52:18:1f:94:1a:6e:58:ca:79:cc:
35:fa:4e:10:b2:1a:66:6f:05:26:4f:fd:1a:b2:f4:
cf:f2:32:c0:e7:3f:98:5f:0b:c8:84:19:2b:57:71:
bc:a5:aa:44:7d:16:20:93:d5:16:f7:c3:08:00:6f:
a6:51:0f:2f:5c:84:a5:89:a2:a9:62:64:e9:44:c8:
15:f5:50:26:36:f6:a7:14:ba:fd:96:d6:ba:23:cc:
8c:3f:13:4f:75:3d:9d:47:c5:0d:b9:da:51:6b:5f:
98:9d:43:d9:e9:8a:d7:50:36:41:34:07:5d:31:9c:
af:3d:1b:3e:ce:be:de:bb:b4:5a:ad:aa:4e:09:b8:
9b:f2:fb:b4:f6:af:b5:cf:36:bd:72:a1:55:27:ea:
40:3f:96:90:8f:8c:8a:9b:1d:a6:d3:be:35:24:61:
63:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:43:A7:DB:19:39:80:0F:C8:B6:5F:A6:3E:8D:AF:51:C1:C2:28:4C
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/y0On2xk5gA_Itl-mPo2vUcHCKEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.125.137.0/24
Signature Algorithm: sha256WithRSAEncryption
88:a7:35:4b:f4:71:d5:4c:f9:a1:cc:00:b4:8b:67:c2:80:df:
c8:71:09:12:27:02:00:9e:e9:aa:70:6f:58:86:a4:57:86:c3:
02:13:6e:23:16:95:68:8c:f7:b2:07:34:9b:43:7b:c4:1e:56:
4a:5c:ef:4b:4c:19:c5:a9:ed:d6:dd:dd:5a:20:a8:19:43:7d:
68:cb:ab:50:20:3c:b1:07:c0:9f:ab:3f:15:b5:49:4b:1c:d9:
59:24:dd:60:21:d5:e5:e4:34:bb:be:70:d8:98:ba:86:1d:ee:
e2:45:43:ad:a0:b6:a8:78:a9:b8:2c:00:de:f4:b0:d5:0c:00:
ea:6a:ad:67:f1:41:fc:79:a6:35:98:53:6d:8f:c0:d5:ee:f4:
f5:b6:67:3a:73:a2:10:2c:c0:b5:8a:15:34:1b:24:44:78:92:
b8:7c:87:ed:25:d6:f9:2b:03:35:91:04:f3:f9:2a:c6:b6:25:
ba:fd:66:e5:e0:1e:4f:97:dc:df:29:8c:3e:16:11:9d:80:8a:
09:7d:d6:0a:0c:ff:95:a5:58:a1:00:fa:05:a0:2a:e7:cd:e7:
ab:94:be:3d:78:4e:19:bc:ef:9f:37:df:d0:f7:f2:0c:ea:38:
de:b3:7a:84:d8:42:f4:6b:8f:be:c8:6b:28:0a:83:8b:2b:42:
02:a9:ed:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:04:25 2026 by rpki-client