Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/yZTKv672wHWKq63aWh-emOtWdus.roa
File: yZTKv672wHWKq63aWh-emOtWdus.roa (raw, json)
Hash identifier: 6Vhx+7brYUgL5kFF6TZGOji3UDVZOaK3kwdHUUol5S8=
Subject key identifier: C9:94:CA:BF:AE:F6:C0:75:8A:AB:AD:DA:5A:1F:9E:98:EB:56:76:EB
Certificate issuer: /CN=b63ac2e4e4ddb3e540756f17aa970d4a8a30a85c
Certificate serial: 01A048D8B1BEE762484ADD031BF821AE9B3F
Authority key identifier: B6:3A:C2:E4:E4:DD:B3:E5:40:75:6F:17:AA:97:0D:4A:8A:30:A8:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjrC5OTds-VAdW8XqpcNSoowqFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/yZTKv672wHWKq63aWh-emOtWdus.roa
Signing time: Fri 28 Aug 2026 14:49:15 +0000
ROA not before: Fri 28 Aug 2026 14:49:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1299
IP address blocks: 94.46.204.0/24 maxlen: 24
94.46.205.0/24 maxlen: 24
193.33.104.0/24 maxlen: 24
194.0.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjrC5OTds-VAdW8XqpcNSoowqFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:d8:b1:be:e7:62:48:4a:dd:03:1b:f8:21:ae:9b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b63ac2e4e4ddb3e540756f17aa970d4a8a30a85c
Validity
Not Before: Aug 28 14:49:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c994cabfaef6c0758aabadda5a1f9e98eb5676eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d9:42:b8:91:20:28:dc:73:8a:ce:ce:96:b2:
5d:56:ef:06:fb:6e:3d:ac:30:a1:76:3b:ac:27:b2:
76:c7:66:4c:e8:fb:8b:e7:26:36:16:d7:ea:d3:46:
c2:6b:00:83:42:26:41:7b:33:22:ca:da:07:89:e6:
14:5c:0b:ca:5c:e1:c5:f5:bf:f9:ee:5c:a6:c4:b3:
6e:e4:de:12:df:59:5f:a9:00:16:28:89:41:8a:40:
3a:4c:9d:f3:cc:d5:2f:ac:93:21:4b:88:dd:5e:6a:
63:bc:96:75:9e:35:53:bd:2c:42:c5:df:25:be:25:
c0:a4:7b:0c:85:af:0f:e3:92:75:7a:95:fc:6e:dc:
bf:bb:91:29:b6:ca:93:2c:66:65:e7:71:42:47:b6:
37:82:58:a4:d1:4d:01:5f:64:42:d9:22:19:b5:67:
c8:70:d6:91:86:41:fd:40:b7:6e:17:e7:61:b6:14:
2a:1d:cd:0a:d8:ad:65:fa:03:2f:fd:08:46:f8:b1:
40:ae:67:5f:23:be:1b:58:e2:a4:fc:f1:e1:13:55:
95:90:c7:ab:ef:31:d3:ea:b8:b5:eb:2d:15:94:d7:
78:18:f8:c6:1d:8c:ef:c1:e6:35:09:c0:d0:f4:c2:
e1:ee:9d:ae:f5:23:5c:9f:48:0b:7f:fb:84:97:68:
80:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:94:CA:BF:AE:F6:C0:75:8A:AB:AD:DA:5A:1F:9E:98:EB:56:76:EB
X509v3 Authority Key Identifier:
keyid:B6:3A:C2:E4:E4:DD:B3:E5:40:75:6F:17:AA:97:0D:4A:8A:30:A8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjrC5OTds-VAdW8XqpcNSoowqFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/yZTKv672wHWKq63aWh-emOtWdus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6c7970-8cf8-4d3a-a230-d62e585c8161/1/tjrC5OTds-VAdW8XqpcNSoowqFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.46.204.0/23
193.33.104.0/24
194.0.137.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:b2:ac:7c:f5:fd:92:25:12:36:7e:e2:88:86:51:d7:86:09:
a1:c1:52:93:71:4b:6f:d7:85:3f:2e:d0:ed:77:b4:3d:ac:4e:
29:78:17:ca:07:ce:4f:72:f5:a5:71:6e:e9:a3:ce:08:86:61:
9b:b2:6c:36:22:4a:ec:1a:71:6c:dc:bf:0a:8e:20:84:f1:9d:
78:73:bc:8a:96:95:ab:c4:1c:51:27:46:d6:b5:e8:aa:38:55:
95:4d:c1:15:80:69:7a:ac:67:87:01:f7:14:51:41:b3:4a:36:
15:1f:5e:50:65:68:ec:b7:c1:f0:03:1c:d3:ac:ca:9c:db:fb:
bb:0a:0a:e5:c6:e9:c4:df:b1:d4:59:23:9d:38:f8:c4:69:e0:
d4:d6:d4:d7:56:a0:4d:15:4b:97:ee:1f:68:16:d7:de:17:46:
4a:ec:7c:57:9f:87:bb:bc:77:a6:12:22:cb:77:b2:72:f5:e2:
1c:2e:0a:04:a7:2e:88:e3:fb:e3:f5:b9:e2:ac:c4:1e:b0:fe:
76:f0:b7:db:65:fe:51:bb:f6:bc:3a:40:e3:42:65:03:65:7f:
00:40:d8:fa:5d:a7:08:85:d5:fb:bf:84:e7:ed:0f:2b:d7:34:
99:45:e3:89:4f:9f:1b:54:4a:e8:95:66:9d:47:54:95:22:32:
1f:58:d9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:44:09 2026 by rpki-client