Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/yfdZ5fNrgyd7WE_Hx8TiMBE8jZE.roa
File: yfdZ5fNrgyd7WE_Hx8TiMBE8jZE.roa (raw, json)
Hash identifier: Q55rWjR1MXUzosd5RHO7pMKjIA2pAX/kK/+7lGUzsHo=
Subject key identifier: C9:F7:59:E5:F3:6B:83:27:7B:58:4F:C7:C7:C4:E2:30:11:3C:8D:91
Certificate issuer: /CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Certificate serial: 01A052A61A059F8132CEAFF468E0238A5693
Authority key identifier: 0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/yfdZ5fNrgyd7WE_Hx8TiMBE8jZE.roa
Signing time: Sun 30 Aug 2026 12:30:12 +0000
ROA not before: Sun 30 Aug 2026 12:30:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 45.12.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 18:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:52:a6:1a:05:9f:81:32:ce:af:f4:68:e0:23:8a:56:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Validity
Not Before: Aug 30 12:30:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c9f759e5f36b83277b584fc7c7c4e230113c8d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:39:de:89:14:8b:42:73:f3:69:b1:07:60:91:
c5:3a:b0:36:83:37:5d:98:94:9e:95:6c:59:77:ab:
3d:8d:fe:bf:2a:69:61:a3:df:67:b1:58:f0:ac:2a:
cd:5b:f8:51:64:8f:4d:91:b2:e0:92:0b:f2:bc:75:
fe:32:f8:80:3d:ed:cb:d7:58:63:e9:67:c5:dd:07:
f9:70:c3:4f:83:8b:63:1b:e2:f9:bc:f2:fe:dc:40:
2b:32:c2:8d:eb:af:46:44:56:b2:cf:0e:31:b7:59:
38:c1:99:7d:33:a4:ab:43:74:73:2c:ab:fe:b4:ab:
63:9b:ee:42:7e:cc:91:da:26:e5:73:59:40:73:1c:
51:da:27:79:85:16:1c:7e:8c:e4:5d:0d:2b:fc:09:
64:52:52:c1:f0:26:e4:a3:82:d5:10:ef:21:8d:64:
6b:1b:4a:14:46:25:e5:46:8b:6a:8c:9d:58:0e:59:
8c:a7:38:c6:32:12:16:16:f5:96:41:d2:83:da:b4:
b5:72:35:d1:c5:60:46:19:20:9d:b4:19:1c:81:b7:
7c:53:0c:cf:23:32:ec:9b:95:7b:92:4c:3f:b0:8a:
95:ee:f1:34:87:b9:57:ee:be:e7:cd:00:71:30:05:
c2:74:f1:fb:b6:bc:c8:9c:ff:8a:dc:4d:a9:4b:f4:
ea:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F7:59:E5:F3:6B:83:27:7B:58:4F:C7:C7:C4:E2:30:11:3C:8D:91
X509v3 Authority Key Identifier:
keyid:0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/yfdZ5fNrgyd7WE_Hx8TiMBE8jZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.185.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:29:65:92:b7:1a:c6:3b:3a:3a:14:b7:94:4a:a6:17:83:be:
9d:ce:95:1c:cf:74:42:91:d6:0f:fb:c3:4f:dc:c1:67:9e:43:
0f:d1:e1:55:9e:44:ef:55:8f:a1:0e:14:0f:e6:ed:91:0c:da:
3a:a5:bf:d8:48:95:22:ba:9c:24:4c:ad:50:a2:d5:8a:eb:d0:
7b:76:c0:76:0b:a0:b2:5b:d7:75:18:42:22:ae:60:56:41:4f:
2d:42:6b:f4:30:d5:97:4d:e8:64:5f:e2:07:00:10:08:9e:c8:
85:a0:01:65:76:24:e5:3c:ae:75:74:e7:3c:31:44:5e:ec:8b:
8a:8c:e3:ac:13:08:9f:fa:32:fd:91:10:7e:c7:f5:05:6f:04:
1b:3e:0d:9c:13:41:6b:8f:6b:92:18:7d:9a:3d:c6:b1:30:e4:
91:fd:f8:43:2a:b3:6f:26:51:1d:a8:9a:dd:17:bf:c5:34:72:
2b:64:72:0d:39:47:c5:38:dd:93:ba:53:14:8e:89:c1:df:a8:
97:31:8e:a1:70:a2:30:57:7e:74:ef:00:c2:43:ea:5a:9e:5c:
69:dd:03:be:14:ee:99:8e:d5:a9:15:73:d9:8e:ee:82:62:de:
08:0d:d6:2f:60:e5:79:d6:df:ef:5a:fd:6d:db:27:51:ca:1c:
6d:db:48:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:29:56 2026 by rpki-client