Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/c5df57-b710-4625-aaad-5b2b63f39a9d/1/YhYFb9f_4nCENV9r5_dwYhhECQY.roa
File: YhYFb9f_4nCENV9r5_dwYhhECQY.roa (raw, json)
Hash identifier: QrIPGrDPCXMJgEhkG3HYTFnyv87iWja8C8UwvuRhsI8=
Subject key identifier: 62:16:05:6F:D7:FF:E2:70:84:35:5F:6B:E7:F7:70:62:18:44:09:06
Certificate issuer: /CN=bdc7926e0abeda6c8d72d1d190c2e7d9d00449d8
Certificate serial: 01A00FFBE39A5254D03C8A17E02573BBBB40
Authority key identifier: BD:C7:92:6E:0A:BE:DA:6C:8D:72:D1:D1:90:C2:E7:D9:D0:04:49:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vceSbgq-2myNctHRkMLn2dAESdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/c5df57-b710-4625-aaad-5b2b63f39a9d/1/YhYFb9f_4nCENV9r5_dwYhhECQY.roa
Signing time: Mon 17 Aug 2026 13:49:20 +0000
ROA not before: Mon 17 Aug 2026 13:49:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57781
IP address blocks: 192.162.192.0/24 maxlen: 24
192.162.193.0/24 maxlen: 24
192.162.194.0/24 maxlen: 24
192.162.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/c5df57-b710-4625-aaad-5b2b63f39a9d/1/vceSbgq-2myNctHRkMLn2dAESdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/c5df57-b710-4625-aaad-5b2b63f39a9d/1/vceSbgq-2myNctHRkMLn2dAESdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vceSbgq-2myNctHRkMLn2dAESdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0f:fb:e3:9a:52:54:d0:3c:8a:17:e0:25:73:bb:bb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdc7926e0abeda6c8d72d1d190c2e7d9d00449d8
Validity
Not Before: Aug 17 13:49:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6216056fd7ffe27084355f6be7f7706218440906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e7:80:4a:74:b8:e9:99:43:fa:07:eb:3c:93:
43:b1:98:9b:75:08:58:9b:66:ef:f4:a0:54:22:76:
4f:45:e7:fd:41:31:87:9f:4f:b4:5b:c0:1b:85:98:
63:2c:a5:ac:12:29:e9:d9:48:fc:7f:4c:fd:c1:c9:
12:75:18:bd:8d:84:38:be:3d:5c:13:f1:df:75:e4:
33:49:4b:13:a6:3c:39:11:95:73:73:36:17:b0:81:
3c:b7:87:77:76:6c:85:ca:51:7c:d2:88:03:d4:68:
f2:66:ba:53:aa:4d:b3:c9:4f:53:b4:26:a0:bd:f6:
94:6d:69:b0:ed:82:17:49:08:4c:d7:71:ef:2a:a7:
88:82:0d:7c:a7:5e:83:eb:c3:38:e9:84:bf:54:68:
9d:8b:29:98:f2:fd:03:c1:36:44:c3:db:b4:5c:cd:
9b:4f:ee:27:21:31:1e:32:d9:c1:0d:cd:3e:11:d8:
45:95:e3:5f:22:3f:cf:4e:5e:31:1e:58:97:8a:85:
60:09:66:87:50:3a:d9:3a:47:7f:11:84:0c:03:97:
76:22:10:36:1f:4d:e7:20:4c:73:e7:6e:d9:20:9b:
8d:25:21:1d:9e:d6:27:3c:8d:8d:73:9c:8f:8c:1e:
2e:1b:35:3a:ca:d0:71:48:fc:5a:69:a9:80:35:54:
53:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:16:05:6F:D7:FF:E2:70:84:35:5F:6B:E7:F7:70:62:18:44:09:06
X509v3 Authority Key Identifier:
keyid:BD:C7:92:6E:0A:BE:DA:6C:8D:72:D1:D1:90:C2:E7:D9:D0:04:49:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vceSbgq-2myNctHRkMLn2dAESdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5df57-b710-4625-aaad-5b2b63f39a9d/1/YhYFb9f_4nCENV9r5_dwYhhECQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5df57-b710-4625-aaad-5b2b63f39a9d/1/vceSbgq-2myNctHRkMLn2dAESdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.192.0/22
Signature Algorithm: sha256WithRSAEncryption
36:86:46:e2:38:16:91:02:c4:83:6b:95:26:75:26:94:fd:0d:
7b:02:0c:03:63:ab:50:3b:a9:df:b9:c4:db:e6:77:94:ee:79:
d3:21:81:b9:25:27:4c:88:52:ee:8e:fc:d9:c0:12:ad:6e:f0:
75:f7:f4:cd:cd:17:ff:bd:47:ff:28:4b:f8:c9:04:5c:9b:a9:
31:4d:13:f8:72:0e:6a:72:16:76:34:52:0b:e4:61:94:14:c4:
fe:d3:5a:ed:c0:e4:60:1b:4b:0f:98:93:de:43:b4:45:47:8d:
74:db:6e:64:42:ea:b3:9d:fb:ea:88:6e:67:02:fc:d4:46:62:
22:8b:b2:e2:43:b1:92:4c:0b:b4:5d:12:7c:53:72:05:4a:99:
3e:2a:32:4f:2a:1c:26:cb:04:ac:11:d7:c0:52:a2:54:4c:da:
45:05:5f:8c:bb:41:80:25:34:c2:2e:ab:e9:25:ad:49:e7:dc:
12:99:77:05:9b:92:7c:a4:38:08:f6:65:3a:30:c1:11:8f:56:
b3:83:b4:fd:39:27:09:2e:27:40:ec:36:43:11:0f:1c:7e:6b:
9a:18:48:7e:25:ec:a1:2e:d1:e1:e3:58:ba:e2:77:eb:46:17:
2a:bf:39:6e:70:5b:d0:bb:7c:71:ff:71:03:cb:4e:ef:6b:37:
56:46:a6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:51:40 2026 by rpki-client