Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/c95266-25ca-454c-ac24-4f781c8aef0f/1/YRHsZEPoD2QSskq2_HgUqvffz5U.roa
File: YRHsZEPoD2QSskq2_HgUqvffz5U.roa (raw, json)
Hash identifier: Pu+lCzUrzwJuUOOpMK4N+dxuK7CZVF9f+EJO+TerOgY=
Subject key identifier: 61:11:EC:64:43:E8:0F:64:12:B2:4A:B6:FC:78:14:AA:F7:DF:CF:95
Certificate issuer: /CN=4ba1b3e9db4ee5263d0ab1ba7aeffe7c5f5d6aec
Certificate serial: 01A162A7D0F3FEEBFEF526D4B8C3DFA4904F
Authority key identifier: 4B:A1:B3:E9:DB:4E:E5:26:3D:0A:B1:BA:7A:EF:FE:7C:5F:5D:6A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6Gz6dtO5SY9CrG6eu_-fF9dauw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c95266-25ca-454c-ac24-4f781c8aef0f/1/YRHsZEPoD2QSskq2_HgUqvffz5U.roa
Signing time: Thu 22 Oct 2026 08:08:47 +0000
ROA not before: Thu 22 Oct 2026 08:08:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53340
IP address blocks: 136.176.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c95266-25ca-454c-ac24-4f781c8aef0f/1/S6Gz6dtO5SY9CrG6eu_-fF9dauw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/c95266-25ca-454c-ac24-4f781c8aef0f/1/S6Gz6dtO5SY9CrG6eu_-fF9dauw.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6Gz6dtO5SY9CrG6eu_-fF9dauw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:a7:d0:f3:fe:eb:fe:f5:26:d4:b8:c3:df:a4:90:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba1b3e9db4ee5263d0ab1ba7aeffe7c5f5d6aec
Validity
Not Before: Oct 22 08:08:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6111ec6443e80f6412b24ab6fc7814aaf7dfcf95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:38:c5:03:9d:c6:ff:bc:02:72:9f:fe:98:58:
98:ae:52:e7:43:39:28:e9:96:a7:18:70:dd:69:84:
fd:ee:d4:90:d3:7f:20:54:13:ae:a5:8c:11:21:2b:
5c:60:d4:fc:f8:08:be:1e:86:29:2a:36:65:40:1b:
8a:9e:71:a8:f4:43:04:45:46:45:0b:bb:d3:30:b3:
ab:8a:74:3c:69:6d:f5:02:5b:f9:5b:84:6f:c3:e6:
58:99:2d:04:e1:6f:17:7e:c8:54:02:e9:97:9e:81:
95:53:53:14:00:fb:09:5a:f7:0c:73:f3:dc:4e:12:
bd:74:51:ec:53:a7:df:ac:7c:d9:0d:6f:dd:75:3a:
80:a1:1d:dd:5e:ee:15:43:ba:5a:c7:ee:5c:0a:fc:
b7:ef:28:8b:7d:d4:03:aa:e4:0d:60:81:b3:92:1d:
0e:34:64:ea:ba:38:c3:34:ab:a7:84:8b:5d:71:97:
7b:00:2b:01:01:7c:7f:5b:95:98:c8:9c:2d:25:43:
78:84:18:01:63:fa:9e:2e:b0:92:6d:b2:5e:e6:61:
94:3e:32:c7:00:2b:d6:5d:35:8b:92:27:c8:10:c3:
35:92:7f:27:d5:81:65:e6:e6:a9:68:11:61:2b:82:
fc:c5:08:57:4d:6d:b8:65:5a:64:11:13:48:b5:1e:
58:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:11:EC:64:43:E8:0F:64:12:B2:4A:B6:FC:78:14:AA:F7:DF:CF:95
X509v3 Authority Key Identifier:
keyid:4B:A1:B3:E9:DB:4E:E5:26:3D:0A:B1:BA:7A:EF:FE:7C:5F:5D:6A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6Gz6dtO5SY9CrG6eu_-fF9dauw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c95266-25ca-454c-ac24-4f781c8aef0f/1/YRHsZEPoD2QSskq2_HgUqvffz5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c95266-25ca-454c-ac24-4f781c8aef0f/1/S6Gz6dtO5SY9CrG6eu_-fF9dauw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.176.211.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:75:87:7d:75:08:73:b7:2b:21:12:be:3f:05:24:cf:9d:0c:
5f:6f:4b:61:27:c7:96:54:f8:13:69:66:29:fd:05:ed:b2:90:
4c:50:bd:7f:c0:2c:44:c9:e1:44:30:7c:38:52:b1:3b:72:1a:
83:79:e1:ea:6b:70:e2:ec:50:78:85:98:f9:c5:7c:46:58:1a:
f5:25:97:47:53:3a:e2:e0:42:0a:fa:24:28:4d:e9:1e:ab:a4:
77:21:7d:e2:4e:5c:e9:16:cd:bb:8b:96:a9:3a:61:e7:bc:c3:
f6:26:c6:ac:6a:bc:c9:bd:13:df:2e:64:a4:82:bd:a8:9b:65:
f5:70:cf:49:b0:b6:52:e4:58:d2:58:d2:b7:10:b8:33:9d:d3:
e8:0d:c2:e6:a1:13:25:02:c0:46:88:84:fc:07:0d:ed:70:bb:
91:38:0e:ab:82:86:24:1c:d7:6a:f0:4c:65:7a:32:34:40:36:
60:7a:3b:77:29:4d:da:dc:91:ae:cb:aa:3e:d2:ce:68:74:a8:
7f:96:aa:be:d6:f3:83:9d:6f:6d:fc:a9:fb:8a:69:14:fd:92:
42:6e:3b:e4:d8:6b:50:17:1a:6e:3c:c1:37:0c:c4:82:4f:5e:
4d:ba:d5:88:d9:a7:37:7c:41:f6:3d:8a:37:1f:8b:8c:77:40:
d1:de:90:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:32:28 2026 by rpki-client