Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/yzNpMhyilaHdBKIiRYx57cu2pSc.roa
File: yzNpMhyilaHdBKIiRYx57cu2pSc.roa (raw, json)
Hash identifier: OKyafBsX6qdz/giNq8fROHI8UrejdaEbYD2Ou4yyn+I=
Subject key identifier: CB:33:69:32:1C:A2:95:A1:DD:04:A2:22:45:8C:79:ED:CB:B6:A5:27
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019FD124C716976A976E5DC871121B86406F
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/yzNpMhyilaHdBKIiRYx57cu2pSc.roa
Signing time: Wed 05 Aug 2026 08:57:56 +0000
ROA not before: Wed 05 Aug 2026 08:57:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219081
IP address blocks: 31.24.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:24:c7:16:97:6a:97:6e:5d:c8:71:12:1b:86:40:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Aug 5 08:57:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb3369321ca295a1dd04a222458c79edcbb6a527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cb:f4:af:b1:81:ee:4f:03:02:ae:d3:c6:43:
14:4b:45:88:a4:50:f2:c2:8d:61:cc:b2:19:fb:da:
68:8b:f1:e6:e8:8a:e1:4e:19:ee:ea:fb:f0:d1:d6:
17:f9:8f:7f:be:73:ca:ea:95:11:dc:11:22:e5:26:
53:a4:22:a5:b4:26:61:1a:59:a2:a7:6a:3a:65:1f:
dd:a0:48:5e:cf:11:7c:20:cd:b3:0e:d5:9b:d8:c6:
5b:71:55:b8:f3:fd:5d:5e:6c:a7:30:b6:4d:eb:62:
f8:9f:49:d4:e9:90:3e:c1:55:7c:52:4b:46:26:8e:
cf:e7:1b:ae:0e:0c:8b:85:cb:49:b4:08:ee:85:fe:
0d:2e:33:37:7b:5a:2d:92:94:65:9a:fc:7d:72:37:
d8:eb:61:41:b2:cb:5e:67:c1:62:4a:7b:87:36:c2:
d2:89:9d:f1:56:92:77:5e:aa:7d:04:bd:85:c7:35:
8a:1f:b1:09:b6:84:5c:76:dc:f9:31:fe:01:ad:a4:
25:7e:1f:ce:41:b9:3d:1d:52:20:73:37:6c:9d:df:
9e:f2:84:8c:f5:68:02:fa:0e:6a:23:ce:83:d6:41:
dd:57:9f:29:9b:e7:bb:b2:00:5b:26:5c:d2:86:0f:
07:76:49:7c:11:0a:9e:7a:4a:23:29:2e:5c:a9:46:
9c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:33:69:32:1C:A2:95:A1:DD:04:A2:22:45:8C:79:ED:CB:B6:A5:27
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/yzNpMhyilaHdBKIiRYx57cu2pSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.255.0/24
Signature Algorithm: sha256WithRSAEncryption
43:26:84:57:85:94:d7:a3:c0:28:02:0e:f9:f9:ea:b5:9d:da:
a9:7a:84:1c:db:01:a4:69:e0:00:67:52:85:1c:28:e9:67:10:
e5:12:18:92:a1:eb:03:c4:82:72:a6:b9:d0:5f:26:60:bc:03:
f8:f3:91:71:b3:57:14:17:ed:e1:86:e7:69:86:fd:cd:74:90:
a7:7b:68:84:db:20:e3:82:e5:d2:5e:ba:71:20:32:a0:d6:dd:
fb:55:15:33:1a:06:a7:bc:33:6f:5b:a8:3b:e2:aa:fa:d8:43:
ac:83:eb:ab:4f:ea:8a:a7:af:2c:cb:40:32:02:46:b6:09:5f:
3b:0c:03:65:ee:40:cf:ab:f0:f0:a0:32:07:67:49:f1:86:4a:
a0:35:53:fd:d5:6d:d8:d2:2d:6b:24:ef:94:c2:e9:d7:bc:cb:
dd:4d:71:9e:26:61:d1:2b:29:c7:e4:9c:0a:14:e0:b9:e6:f2:
09:5a:39:eb:bb:fe:64:51:5f:fb:23:ac:68:60:7a:ec:2e:41:
70:eb:a4:c5:1b:2f:a0:85:ea:3b:8b:49:ae:61:d6:4e:fb:19:
c3:34:9e:6e:17:98:6f:4a:42:f2:4e:a0:64:11:43:8f:92:51:
81:61:bd:d6:ab:b2:a4:94:1c:7a:9b:0b:f0:2a:5f:71:f6:c4:
d8:22:b3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:17:10 2026 by rpki-client