Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/yfGuO_RiAeAX-4VWDDK9O80bQVk.roa
File: yfGuO_RiAeAX-4VWDDK9O80bQVk.roa (raw, json)
Hash identifier: wbUMpspJWNO4G0cReSr6miT8s7Y5qAH8rRHGKlw0D/c=
Subject key identifier: C9:F1:AE:3B:F4:62:01:E0:17:FB:85:56:0C:32:BD:3B:CD:1B:41:59
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 019FC6B801CC8A2B4174FB0BA7D0F445EA27
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/yfGuO_RiAeAX-4VWDDK9O80bQVk.roa
Signing time: Mon 03 Aug 2026 08:22:55 +0000
ROA not before: Mon 03 Aug 2026 08:22:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3320
IP address blocks: 86.38.117.0/24 maxlen: 24
86.38.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 02:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:b8:01:cc:8a:2b:41:74:fb:0b:a7:d0:f4:45:ea:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Aug 3 08:22:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c9f1ae3bf46201e017fb85560c32bd3bcd1b4159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5b:43:ac:28:6f:29:e7:74:a1:91:60:b5:84:
79:a7:58:fa:36:8b:c7:31:42:e7:18:ed:38:33:92:
91:f2:e6:6c:7e:9d:8e:ce:a4:c3:45:d5:e4:b0:9d:
48:a9:a5:c4:01:d9:3f:fe:28:d8:1d:35:cc:7d:e1:
8d:4b:eb:92:42:86:47:93:b3:9d:86:72:67:89:ed:
2d:a9:55:be:f0:a1:7b:93:35:3f:f4:63:3e:e7:9f:
48:65:45:ee:bb:2f:79:0b:c6:88:d7:1d:94:94:90:
bb:4d:01:60:03:e0:d9:bc:42:ac:7f:b2:04:2b:1d:
19:12:93:04:4f:11:a0:dc:e8:54:0f:d0:bb:08:a6:
f0:2a:c3:be:f9:a0:23:f1:63:bb:cb:03:77:49:17:
fb:a6:66:5a:36:6e:bf:37:17:68:dc:4e:52:37:e5:
fb:f5:49:df:6e:ef:ee:fd:70:51:ed:9e:da:61:35:
a0:39:8d:7f:07:e3:44:77:ab:88:8e:5b:1c:13:fb:
c5:5b:08:a5:7d:e6:33:a3:6b:44:98:03:f0:ac:0b:
70:bc:af:48:00:c5:2d:03:b2:a7:20:b5:a3:ed:15:
79:25:75:35:07:3d:f4:b6:41:be:27:5a:54:ab:9f:
72:3c:ba:0a:b7:2f:65:4a:e4:8a:70:80:10:f2:3e:
fe:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F1:AE:3B:F4:62:01:E0:17:FB:85:56:0C:32:BD:3B:CD:1B:41:59
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/yfGuO_RiAeAX-4VWDDK9O80bQVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.117.0/24
86.38.164.0/24
Signature Algorithm: sha256WithRSAEncryption
02:83:e5:c3:23:a0:67:b7:33:23:2e:95:84:36:94:52:3e:bd:
e4:c8:53:7c:8a:04:27:b5:9b:65:aa:f5:7e:42:62:bb:4e:a6:
db:1a:51:15:5d:f1:cb:ce:bf:99:3c:a7:a8:ee:a4:13:26:27:
d4:2a:d1:60:b0:2b:20:c8:dd:8f:66:0a:b8:5b:3c:db:3e:69:
1d:20:9f:99:53:9f:94:79:0a:35:6b:a9:f8:9b:48:ee:c4:a6:
56:1d:a5:a1:37:31:1a:35:42:09:f8:7d:60:af:57:46:65:3b:
74:35:3f:de:10:22:1d:72:f1:79:95:85:2c:67:f9:33:c6:9f:
36:0b:b6:df:27:35:8b:6f:91:b6:7f:f9:14:27:d2:07:11:bb:
7a:ea:e4:bf:3e:58:ef:43:a8:52:ce:1a:51:ed:bc:9d:77:65:
fe:ec:f2:a9:31:b1:4f:fc:01:34:af:30:94:c5:27:c6:bd:45:
a4:19:69:6f:ce:01:c8:23:91:81:d1:71:0e:0b:53:33:e0:46:
93:1f:cd:6a:e3:2f:e6:28:fa:f3:39:ad:58:6d:52:9e:47:64:
77:97:6a:d4:c1:d2:fa:bb:82:ac:cb:4f:10:cd:16:e8:52:ac:
22:42:4b:d7:fa:0f:b1:4b:a5:a6:1b:ed:82:13:27:af:7e:ad:
d5:ca:b0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:57:30 2026 by rpki-client