Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/ylglwJkmP4AatzWXoe1l_lP1rXQ.roa
File: ylglwJkmP4AatzWXoe1l_lP1rXQ.roa (raw, json)
Hash identifier: 5KfRIeo+D5Xlk2fjmDFHl2BtLEZKemznqWkTO+P4GU4=
Subject key identifier: CA:58:25:C0:99:26:3F:80:1A:B7:35:97:A1:ED:65:FE:53:F5:AD:74
Certificate issuer: /CN=10e5efe934cf377ddf373b366721f1339243f907
Certificate serial: 01A121A357C417C10B08050F608C48FE4297
Authority key identifier: 10:E5:EF:E9:34:CF:37:7D:DF:37:3B:36:67:21:F1:33:92:43:F9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/ylglwJkmP4AatzWXoe1l_lP1rXQ.roa
Signing time: Fri 09 Oct 2026 17:08:35 +0000
ROA not before: Fri 09 Oct 2026 17:08:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26356
IP address blocks: 160.211.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:a3:57:c4:17:c1:0b:08:05:0f:60:8c:48:fe:42:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10e5efe934cf377ddf373b366721f1339243f907
Validity
Not Before: Oct 9 17:08:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca5825c099263f801ab73597a1ed65fe53f5ad74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ab:55:b1:84:e8:0e:aa:43:95:6f:d4:8b:d4:
97:e8:ae:19:31:44:5c:23:23:db:21:c7:68:c1:a0:
6f:46:32:47:13:cd:5c:9c:83:44:59:82:44:64:35:
1b:ca:56:76:48:e0:4d:04:e8:5b:3c:b3:ec:9c:bb:
12:94:2e:e7:f3:7c:29:6f:c6:e4:b0:b7:fb:9a:59:
86:0b:99:44:e9:cf:a2:2a:86:b3:7f:36:ab:c5:dd:
ad:19:09:2a:08:44:b3:cb:46:83:62:73:dc:83:68:
b7:9e:3d:92:35:b5:9f:ea:8f:fc:6f:4c:72:fd:5a:
f4:75:e0:c8:bb:39:7b:ed:57:50:41:21:36:10:f7:
27:fa:f7:44:82:e6:b2:32:ff:b8:75:4a:3e:bd:fb:
a5:29:03:be:2c:77:e6:c1:a9:26:ed:b0:d6:3d:f3:
e8:46:5a:2f:cf:aa:ca:3f:e7:7e:ba:10:f0:11:e9:
e5:51:cf:8a:e2:67:9e:57:49:49:ce:d4:d2:11:59:
71:e8:f9:5d:75:da:c0:a6:1f:c5:96:d2:32:7d:cd:
a2:6f:0c:7f:49:51:98:27:3c:01:b3:fd:b8:30:b4:
5a:17:ed:ee:09:4b:41:3f:7a:84:c3:ce:4b:08:05:
6a:cf:2e:19:63:34:ba:5f:02:1c:5a:3c:90:54:3e:
e2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:58:25:C0:99:26:3F:80:1A:B7:35:97:A1:ED:65:FE:53:F5:AD:74
X509v3 Authority Key Identifier:
keyid:10:E5:EF:E9:34:CF:37:7D:DF:37:3B:36:67:21:F1:33:92:43:F9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/ylglwJkmP4AatzWXoe1l_lP1rXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.211.0.0/16
Signature Algorithm: sha256WithRSAEncryption
02:85:01:42:bc:50:c8:de:16:0c:b1:37:df:d0:1c:79:47:ef:
6c:e4:4e:e3:20:2d:ba:19:42:ba:af:b6:d7:04:38:df:86:d2:
a7:e7:bb:55:99:47:1c:50:22:f7:2c:9c:33:84:6f:76:29:7e:
d8:40:3c:d9:d8:6b:ec:29:c2:e8:b0:20:fb:7f:f7:65:56:a5:
44:b9:db:66:af:8d:f5:7d:91:a1:85:08:3b:6e:66:ac:e3:d4:
e0:79:b4:55:b8:72:87:f8:27:f1:4a:60:00:68:ad:28:35:5c:
28:c3:79:fc:32:a4:e9:26:02:41:54:0c:77:3c:9b:c1:aa:66:
81:02:57:84:89:c4:d7:b6:f4:4c:88:ef:a0:51:34:0b:04:48:
e7:a9:e6:ef:2a:2b:2e:94:67:6e:5f:d6:48:fa:5c:df:05:f7:
5f:39:d4:4a:67:cf:7d:53:71:97:24:37:cf:45:30:9d:a9:44:
e2:25:14:69:8e:d4:2a:d3:2d:bf:d2:3e:46:5a:43:36:0c:b9:
1b:f6:6a:6d:0e:58:f7:37:1f:72:d3:b2:e1:5a:55:3f:fa:94:
b2:05:71:da:2d:e3:cd:2e:c1:25:8d:54:12:db:97:03:4a:29:
33:66:07:7b:1f:df:2f:b2:a3:fb:37:58:93:d2:e6:19:5d:a0:
f3:1a:d1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:04:05 2026 by rpki-client