Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/y9ihuiUoKzx687GfwaaK7NIIKF4.roa
File: y9ihuiUoKzx687GfwaaK7NIIKF4.roa (raw, json)
Hash identifier: 6IX8c2y4KG9xNULMWglI0fpHqjWUD2fRHIm8gZUjP+s=
Subject key identifier: CB:D8:A1:BA:25:28:2B:3C:7A:F3:B1:9F:C1:A6:8A:EC:D2:08:28:5E
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FFA9EA6461C1AE0275C328A6C31C01A62
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/y9ihuiUoKzx687GfwaaK7NIIKF4.roa
Signing time: Thu 13 Aug 2026 10:15:28 +0000
ROA not before: Thu 13 Aug 2026 10:15:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7488
IP address blocks: 195.72.184.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 07:42:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:9e:a6:46:1c:1a:e0:27:5c:32:8a:6c:31:c0:1a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 13 10:15:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cbd8a1ba25282b3c7af3b19fc1a68aecd208285e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:45:62:4f:b4:ad:b0:85:c7:d1:09:44:21:40:
35:2d:00:41:4c:aa:9e:6f:1c:56:cc:98:1c:28:95:
1b:e8:fd:0b:e1:fe:ab:9d:2f:06:73:c4:16:59:27:
81:08:e9:af:b7:f3:03:db:b3:f6:7f:39:a3:b5:10:
87:ae:29:19:14:7a:2c:88:ce:4c:0a:a7:9f:8d:ac:
8a:b8:3c:9a:67:06:0f:2f:5a:2c:bc:80:51:18:ad:
08:0a:64:c5:1e:36:11:df:db:0d:99:67:dd:a5:f9:
a0:ca:4a:09:08:d6:f1:30:a5:70:0b:9c:06:b5:e0:
10:4b:58:a9:5a:7c:d4:5c:c2:e6:cf:27:f6:d3:7f:
3f:04:aa:c0:e3:66:65:63:59:dc:1a:52:80:8e:3e:
98:fc:a7:54:02:1e:db:df:7b:a4:f5:35:e2:a2:bb:
fe:f8:65:b2:e4:72:af:72:4c:cf:e9:77:a7:2e:04:
b2:fb:af:03:5c:c6:66:10:81:2f:ba:f5:04:d5:b2:
e8:12:1d:c0:69:6f:fd:b8:17:8f:50:45:9e:78:d4:
c0:44:44:6c:bc:e1:42:a3:f5:00:4b:a1:bd:6a:d1:
6f:a6:0d:5a:e7:5c:6b:82:0d:17:fe:3e:39:da:dc:
9d:da:11:c8:33:17:3d:87:a8:4f:62:0b:32:53:a0:
60:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D8:A1:BA:25:28:2B:3C:7A:F3:B1:9F:C1:A6:8A:EC:D2:08:28:5E
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/y9ihuiUoKzx687GfwaaK7NIIKF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.72.184.0/21
Signature Algorithm: sha256WithRSAEncryption
4d:d3:81:f5:26:0c:d1:ae:5e:5c:fd:0e:64:e4:62:3c:01:54:
8a:24:05:c0:f8:87:4b:08:03:c9:6d:15:39:ca:ca:61:97:fb:
5d:ae:5f:d0:55:6f:85:fa:4c:f2:b2:9a:62:39:68:38:b1:b3:
49:0c:82:a9:6d:f6:fa:7f:50:b1:3e:04:9e:58:2c:34:82:ed:
b1:e3:55:41:15:58:b2:db:dc:b1:8f:60:59:ea:0c:19:29:0e:
bd:6a:56:69:36:8b:ac:38:4c:89:7f:89:4e:68:47:16:06:40:
06:12:28:8d:6b:07:91:f5:f9:09:29:27:77:ed:d4:9a:ad:99:
63:25:33:3d:e0:68:1d:f4:e5:4a:14:7e:17:4f:d1:36:81:f2:
9b:61:c0:ed:ea:b1:23:e3:d3:3d:f6:f5:4a:3a:43:39:a0:39:
49:cc:9b:ab:80:10:b0:ac:00:d7:fb:c8:db:4b:10:23:a0:ae:
11:49:ad:ed:d4:8d:a6:88:2b:52:3e:37:0c:fa:c2:e2:bb:1d:
89:b9:cb:a2:66:29:9c:84:a4:1e:06:f4:9b:1d:66:4c:eb:56:
1c:96:f7:ef:eb:b6:d3:b2:b9:7a:bd:be:81:0f:49:1b:23:8d:
f6:1c:e2:7a:d6:05:4d:b3:95:8d:ae:aa:59:7d:f6:06:96:12:
12:0c:9b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 14:50:45 2026 by rpki-client