Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/yLZra5J-Xep07UfsTDT7QREIQos.roa
File: yLZra5J-Xep07UfsTDT7QREIQos.roa (raw, json)
Hash identifier: L3CD0+L3ANuoE6aRAW5Sq4p7rzQBXPSW45Qnm117lo4=
Subject key identifier: C8:B6:6B:6B:92:7E:5D:EA:74:ED:47:EC:4C:34:FB:41:11:08:42:8B
Certificate issuer: /CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
Certificate serial: 019F23688BFFA6986D24E4D2C4D746DC8EC2
Authority key identifier: 9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/yLZra5J-Xep07UfsTDT7QREIQos.roa
Signing time: Thu 02 Jul 2026 15:18:01 +0000
ROA not before: Thu 02 Jul 2026 15:18:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 185.243.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:8b:ff:a6:98:6d:24:e4:d2:c4:d7:46:dc:8e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
Validity
Not Before: Jul 2 15:18:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8b66b6b927e5dea74ed47ec4c34fb411108428b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d9:85:47:d1:09:b3:14:12:ab:88:e6:f4:47:
b9:ac:d8:6c:3a:d3:20:15:b7:eb:b7:f5:e2:92:9e:
9e:3b:71:8d:30:0e:ed:c3:60:a9:84:ad:ac:cb:0a:
04:f5:e2:5d:ef:93:05:10:82:61:ae:49:5d:01:f9:
60:47:ff:54:7a:fd:db:1f:a5:d6:16:98:43:05:ce:
85:00:03:72:ac:91:0a:8d:fa:18:bd:82:b2:e4:1f:
2b:a7:5a:6f:b5:aa:20:82:d4:b7:52:e4:e3:b2:00:
d6:13:93:35:2b:be:ee:4f:e8:48:79:bb:6d:d4:ed:
df:1d:65:87:50:f0:0c:4e:ab:20:2e:f2:ff:32:8d:
91:28:44:80:60:45:7f:25:48:16:07:43:2a:da:1e:
64:c2:4f:45:42:7a:2f:c7:67:fb:06:3c:de:68:76:
64:6a:14:ef:80:b7:2c:74:cd:98:32:9b:66:65:4b:
91:46:31:42:58:2e:63:e2:f2:2c:15:95:d1:9b:dd:
d8:50:62:44:9f:f0:73:45:b9:6a:aa:7f:2e:74:53:
e5:e3:f4:a7:aa:1b:8d:2f:6e:da:d8:c6:41:41:27:
8e:f5:09:dd:19:ef:11:94:69:18:11:90:f9:3a:27:
d4:09:bc:54:c0:a5:f2:9d:c9:f3:9a:a3:2f:0d:4e:
48:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B6:6B:6B:92:7E:5D:EA:74:ED:47:EC:4C:34:FB:41:11:08:42:8B
X509v3 Authority Key Identifier:
keyid:9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/yLZra5J-Xep07UfsTDT7QREIQos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.152.0/24
Signature Algorithm: sha256WithRSAEncryption
15:57:1e:78:51:35:b5:3c:d9:eb:59:57:5a:c4:95:73:c3:7b:
8d:33:68:52:b6:5e:cb:4c:e1:0f:06:7b:9b:3d:e8:61:7e:eb:
65:64:a8:82:a8:90:21:74:2d:46:08:7c:71:5e:b2:49:6f:7d:
a4:0f:da:d2:37:f6:ec:49:03:23:3c:8e:61:e3:bd:4c:17:13:
92:6e:56:9a:d5:72:d6:31:03:53:68:c3:f6:75:08:a5:c9:bf:
a3:ac:5b:40:b9:7e:1f:a0:5c:02:f2:e2:75:c8:ee:50:fc:83:
4e:c3:f6:aa:73:e6:13:3e:c5:65:56:b4:e9:7b:e8:a7:61:86:
60:50:4e:0e:56:9a:94:d6:f6:df:a5:e4:b1:6b:59:ca:2d:34:
55:5d:b7:ad:c8:c7:b9:a7:be:5c:ee:03:77:cc:6e:2a:eb:7e:
65:fa:18:b0:a2:d7:2d:62:a2:9b:19:29:ea:8b:5b:03:29:c8:
c0:a1:3a:a9:b5:5b:c2:c6:63:3f:a6:9d:9f:51:c5:58:fc:ed:
64:83:7d:eb:b0:24:81:88:e1:c5:db:ed:a6:5b:b4:28:53:11:
57:da:2d:1d:f8:05:67:2e:60:68:e1:56:88:42:59:2f:a9:2b:
26:69:79:0d:64:ed:25:b1:cc:97:0a:c3:98:1f:19:cc:d3:91:
34:40:0b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 08:46:10 2026 by rpki-client