Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/yKIW1wu9v3J4UIRzwgp6cuRLYCM.roa
File: yKIW1wu9v3J4UIRzwgp6cuRLYCM.roa (raw, json)
Hash identifier: 6+Sz2lFWhcwY+P6vW60eR+BRRvuOkwy2A9pYbzr72us=
Subject key identifier: C8:A2:16:D7:0B:BD:BF:72:78:50:84:73:C2:0A:7A:72:E4:4B:60:23
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 01A140C2A160BCE1B486779D51564E6FE0C9
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/yKIW1wu9v3J4UIRzwgp6cuRLYCM.roa
Signing time: Thu 15 Oct 2026 18:10:59 +0000
ROA not before: Thu 15 Oct 2026 18:10:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5650
IP address blocks: 185.76.52.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:c2:a1:60:bc:e1:b4:86:77:9d:51:56:4e:6f:e0:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Oct 15 18:10:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8a216d70bbdbf7278508473c20a7a72e44b6023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:63:3a:6c:b6:50:33:ba:ba:dc:aa:c7:47:ad:
91:a0:41:56:27:eb:5c:6a:f7:58:f7:6e:b1:b5:f7:
04:51:08:87:b0:de:c7:ac:b7:3a:0e:af:d5:54:5e:
4e:fc:45:ee:0c:f6:e0:3f:16:9f:55:f3:5c:e5:51:
0c:18:3e:fb:99:1d:50:f4:dc:de:60:e6:ba:cf:67:
04:ed:88:e2:5c:12:71:36:a0:17:d7:3d:14:03:33:
be:93:88:78:8b:29:4a:bf:fb:6a:e3:77:6b:6e:7c:
7a:79:02:38:90:2f:8e:63:07:71:20:21:98:bc:6a:
f8:fd:c4:04:cf:7e:e1:2c:4f:30:20:96:39:20:91:
03:26:12:ce:6a:a1:53:99:7a:bd:eb:a4:0e:08:22:
1b:26:bc:4c:68:a6:f7:e5:e4:24:75:9a:e3:c7:03:
91:b1:57:c5:a4:b0:35:6c:75:d8:26:d3:d9:1e:c3:
60:e8:2b:1c:aa:ae:a7:f2:21:9b:60:b2:ae:62:5f:
a4:ae:7c:bd:47:91:e2:f4:6b:dd:5f:21:5d:15:c1:
f3:52:4c:e6:32:76:ea:c1:88:d2:1b:ea:fe:dc:e1:
49:02:44:cd:72:d1:b3:4e:19:23:09:f4:80:92:fd:
5e:4a:63:c0:e5:0f:39:5e:ce:40:bf:1e:d6:6d:a2:
5c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A2:16:D7:0B:BD:BF:72:78:50:84:73:C2:0A:7A:72:E4:4B:60:23
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/yKIW1wu9v3J4UIRzwgp6cuRLYCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.52.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:d7:37:75:02:7d:61:c0:ec:0f:f5:08:6b:a2:e5:e1:35:0f:
5b:0e:ce:7a:7f:82:bf:4a:94:d0:e8:44:97:07:8d:27:4d:ac:
d1:ca:fc:54:07:fa:a8:6e:b9:0c:11:22:83:d7:6e:e3:e7:ce:
05:df:ff:2d:12:12:67:02:55:fa:7d:8a:44:da:c6:64:0d:2e:
37:09:9a:f1:89:3c:67:89:91:df:c9:e6:de:bb:f0:37:02:2f:
c6:8e:5e:de:83:8f:60:f9:07:21:89:b4:1c:4b:82:8c:18:91:
da:18:22:b0:89:64:e0:0b:77:a3:9f:7c:2b:4c:24:8c:01:c4:
fd:d6:19:96:42:3f:a3:53:37:d6:1d:75:85:98:fd:8e:6c:70:
e9:ac:d3:a0:23:a4:8f:7e:4d:40:af:ed:f1:b2:98:48:d7:1f:
84:4b:22:20:a9:9e:39:9f:ee:2a:ce:37:27:40:a5:a7:e0:f5:
dc:97:0f:01:1d:2c:67:7d:eb:df:c5:e4:4e:83:95:76:2c:09:
33:3d:f5:92:4e:eb:af:1e:a7:fd:2b:77:23:56:f2:fb:cc:f2:
ed:0a:50:cf:ad:11:13:ca:f7:48:2f:c8:cd:5f:20:02:74:ca:
69:69:5b:ed:d9:41:d2:a2:fd:a2:aa:2d:d1:ed:8a:42:9c:26:
a9:00:31:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 21:12:50 2026 by rpki-client