Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/yAxZTIiDJIEXbzTwVVStEQ-V2Rw.roa
File: yAxZTIiDJIEXbzTwVVStEQ-V2Rw.roa (raw, json)
Hash identifier: HpiRRBDNSgQi5VXLecN5cppGWKvv8GHz1yHFx3mSygE=
Subject key identifier: C8:0C:59:4C:88:83:24:81:17:6F:34:F0:55:54:AD:11:0F:95:D9:1C
Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Certificate serial: 01A092A4C81E1358DEB2DDD9E6DD3ABB6595
Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/yAxZTIiDJIEXbzTwVVStEQ-V2Rw.roa
Signing time: Fri 11 Sep 2026 22:44:27 +0000
ROA not before: Fri 11 Sep 2026 22:44:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218869
IP address blocks: 212.180.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:92:a4:c8:1e:13:58:de:b2:dd:d9:e6:dd:3a:bb:65:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Validity
Not Before: Sep 11 22:44:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c80c594c88832481176f34f05554ad110f95d91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ea:b5:98:6f:84:f6:04:6f:a8:ae:20:7d:c3:
86:03:4f:15:7b:4d:3c:8c:d8:35:29:71:b4:2e:a6:
7c:26:ff:22:45:4d:e5:7f:68:11:5f:8c:4e:f5:46:
43:6d:0c:9c:da:6e:ff:b3:3a:88:91:55:2c:9e:b0:
a5:b6:14:3e:0a:21:b7:c8:aa:01:71:59:74:63:36:
c8:d0:f8:19:b5:dc:d7:5d:95:77:d1:69:1b:f5:f0:
cc:af:ce:61:d5:fe:a0:9e:f5:86:88:dd:dc:47:82:
17:36:bf:a6:4c:03:c0:15:6d:a3:f1:13:54:8e:d4:
2c:ac:96:2b:40:39:1d:fd:3a:f6:59:bf:6a:a3:29:
3e:1f:03:77:ae:49:c0:69:11:7f:4d:ef:c1:2c:2f:
eb:6e:0a:e2:6f:aa:b4:0c:02:bd:80:00:0d:c6:27:
ad:4c:ef:95:e0:d0:2b:46:a5:b7:e0:9d:d0:0b:78:
7a:15:f5:29:57:7b:0b:fa:e7:36:67:9a:17:16:35:
f4:f7:d3:f0:70:9d:a7:f6:e1:1b:8b:d0:f8:64:81:
70:58:3b:7e:aa:0d:bf:52:9e:12:b3:9a:08:df:66:
ac:0d:ec:90:26:04:72:1e:42:0a:00:d8:2a:b9:31:
0c:b4:c5:39:af:03:9e:2b:4d:62:5d:b5:06:12:ae:
e3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0C:59:4C:88:83:24:81:17:6F:34:F0:55:54:AD:11:0F:95:D9:1C
X509v3 Authority Key Identifier:
keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/yAxZTIiDJIEXbzTwVVStEQ-V2Rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.180.121.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:96:5c:38:63:5f:e2:4e:fa:3e:d1:33:6e:d5:90:5d:40:56:
52:3a:8e:2d:5d:b6:bd:f1:f4:13:6c:f2:60:2a:68:49:88:a7:
24:13:ae:71:04:55:45:cb:56:74:26:e6:28:14:3a:11:b9:a0:
4a:53:dd:f4:76:60:de:96:1f:4a:c0:79:1b:41:c5:a4:99:44:
c8:32:24:c9:67:59:20:21:78:3b:4b:69:5e:6f:cf:02:02:8d:
3c:c8:40:e2:ac:6f:89:a5:94:7e:cd:49:db:ec:d3:0b:e3:93:
6c:24:bd:45:88:d5:44:51:ea:be:51:50:b9:d2:41:e5:a7:05:
60:3e:43:93:7f:f7:54:19:08:a6:0e:d8:c6:58:b4:db:0c:5a:
4f:17:0c:c3:28:3c:33:ab:a7:83:0d:58:91:51:5c:0e:76:11:
6a:51:c4:78:1e:fe:6d:f4:4d:b9:af:69:57:5a:62:57:9f:23:
88:9f:2a:61:8d:fb:e8:b5:a2:c8:50:cd:f7:27:25:b6:04:b5:
06:f1:f1:34:49:e5:af:bc:66:46:5f:a5:a0:d7:3b:35:c1:93:
4f:c0:5b:7a:c1:73:c5:61:95:37:ec:ea:80:ba:c4:1e:84:3f:
73:58:07:d3:ba:4b:12:d5:23:e7:31:2f:1b:7c:f4:74:52:7e:
aa:bd:8d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:09:45 2026 by rpki-client