Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/yq7Etfb4dWzBvbcN-Rlb9C-Z6wA.roa
File: yq7Etfb4dWzBvbcN-Rlb9C-Z6wA.roa (raw, json)
Hash identifier: OWlK989Wx/WGtxwLKowAN45MRmglMXaVRn+t0dtJ9Uc=
Subject key identifier: CA:AE:C4:B5:F6:F8:75:6C:C1:BD:B7:0D:F9:19:5B:F4:2F:99:EB:00
Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073
Certificate serial: 01A0D2B508531A7E1D292D9FF182182DD170
Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/yq7Etfb4dWzBvbcN-Rlb9C-Z6wA.roa
Signing time: Thu 24 Sep 2026 09:17:54 +0000
ROA not before: Thu 24 Sep 2026 09:17:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35219
IP address blocks: 185.64.64.0/22 maxlen: 24
185.64.65.0/24 maxlen: 24
185.185.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:b5:08:53:1a:7e:1d:29:2d:9f:f1:82:18:2d:d1:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073
Validity
Not Before: Sep 24 09:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=caaec4b5f6f8756cc1bdb70df9195bf42f99eb00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ad:d6:b2:cb:d6:7b:5d:ff:a7:a5:f1:0f:3c:
5c:64:d5:14:d4:56:c1:35:dd:53:b6:99:0f:4e:50:
fa:57:fb:78:80:89:c8:ee:c9:be:f4:54:f9:04:a4:
2f:9a:74:45:fb:00:9e:5a:fe:57:79:b6:5a:0f:11:
3a:80:6b:7b:f7:a2:55:35:d3:59:3e:4a:e1:f8:c6:
a6:19:a3:cd:5a:ea:eb:b9:ad:7e:29:0d:01:92:53:
55:85:c6:43:e9:34:a9:6e:8f:d6:b8:65:8f:4c:b6:
b5:be:8b:4e:d9:5a:c5:88:b8:b6:7a:0b:68:d2:7d:
d2:f2:bd:08:5b:74:4a:6b:56:61:6c:cf:30:e8:78:
cf:03:c3:4f:d1:49:1e:d2:31:98:be:d2:53:bd:2a:
a7:54:27:19:77:3c:a2:86:7e:cb:6d:66:64:86:a1:
0f:11:6b:80:6d:54:59:ed:25:5f:18:f4:d6:af:3e:
83:90:e6:2b:8c:06:45:29:2a:7a:83:96:15:19:e4:
01:9f:d5:c5:6a:e8:57:1f:33:61:03:aa:37:25:13:
66:6b:8c:a6:66:06:5c:65:04:79:36:80:85:83:4c:
a9:ca:a5:d8:54:94:a1:72:9d:64:9f:57:ac:4c:f0:
37:3a:a0:e2:28:53:ce:b2:5a:67:28:db:ee:49:29:
c9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AE:C4:B5:F6:F8:75:6C:C1:BD:B7:0D:F9:19:5B:F4:2F:99:EB:00
X509v3 Authority Key Identifier:
keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/yq7Etfb4dWzBvbcN-Rlb9C-Z6wA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.64.0/22
185.185.228.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:c7:7c:0f:51:61:27:96:69:d4:f9:d8:eb:46:f4:1b:4b:5a:
ad:6d:51:cc:59:9a:2d:fa:f0:b6:e2:df:2d:5c:7a:f9:44:6b:
07:5b:57:a9:d8:87:2e:a6:b5:89:71:1b:59:d7:d5:8b:d0:ac:
ff:ab:11:5d:ea:e1:65:9e:3c:d3:c9:bf:08:fc:8f:2a:2f:cc:
33:e0:57:8b:4b:9d:61:ec:8d:56:b3:70:dd:fa:fc:f9:e6:a2:
aa:c2:36:a8:e2:e7:fa:36:4e:fb:bd:95:c7:e1:59:9f:07:f2:
57:76:75:ac:c7:15:12:47:86:c8:9e:8d:f2:09:75:71:e9:5c:
d6:4e:c8:ed:14:c9:5a:cc:53:0e:6b:c7:b9:c8:42:b8:85:db:
da:b0:9c:66:ad:c6:3c:be:c8:73:7e:27:b2:24:3f:99:f2:1d:
51:87:3f:d7:83:2e:7c:b1:d6:95:3a:9f:b8:3b:69:5e:3d:79:
56:92:26:e7:a3:f9:79:f1:cc:a7:ec:0a:14:f5:a9:57:48:b5:
99:9b:2d:e4:92:8b:99:ea:27:1f:d1:29:71:ed:7b:73:6a:50:
73:1a:cd:b4:8e:f7:55:3c:ef:bf:6d:a7:a1:9e:20:7a:fa:44:
a1:c6:8e:c4:3d:f9:f5:8d:8e:bd:dd:ae:29:1a:f7:b4:08:7b:
83:52:79:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 02:55:20 2026 by rpki-client