Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/68b1d3-c938-423e-90dd-21098a61357e/1/y9ltkbYuoIzmN0YajfYF5C93BL4.roa
File: y9ltkbYuoIzmN0YajfYF5C93BL4.roa (raw, json)
Hash identifier: Fp9F7GELN6xhd6lTjRCIyciJdim+5sVhKm5rN6WFBTY=
Subject key identifier: CB:D9:6D:91:B6:2E:A0:8C:E6:37:46:1A:8D:F6:05:E4:2F:77:04:BE
Certificate issuer: /CN=388cccd78bf16533f33185443ea82dcdad920410
Certificate serial: 01A0244970801E8C776232D8C7330EAE6775
Authority key identifier: 38:8C:CC:D7:8B:F1:65:33:F3:31:85:44:3E:A8:2D:CD:AD:92:04:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIzM14vxZTPzMYVEPqgtza2SBBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/68b1d3-c938-423e-90dd-21098a61357e/1/y9ltkbYuoIzmN0YajfYF5C93BL4.roa
Signing time: Fri 21 Aug 2026 12:26:27 +0000
ROA not before: Fri 21 Aug 2026 12:26:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29119
IP address blocks: 185.105.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/68b1d3-c938-423e-90dd-21098a61357e/1/OIzM14vxZTPzMYVEPqgtza2SBBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/68b1d3-c938-423e-90dd-21098a61357e/1/OIzM14vxZTPzMYVEPqgtza2SBBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OIzM14vxZTPzMYVEPqgtza2SBBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 06:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:49:70:80:1e:8c:77:62:32:d8:c7:33:0e:ae:67:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=388cccd78bf16533f33185443ea82dcdad920410
Validity
Not Before: Aug 21 12:26:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cbd96d91b62ea08ce637461a8df605e42f7704be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ed:19:35:77:39:5d:13:e2:8e:bf:38:b0:1e:
2b:82:22:6e:96:6b:54:83:1e:0f:66:7c:21:08:74:
5a:f3:0c:97:7a:e1:14:7c:99:b6:80:3c:e6:a1:83:
c9:60:80:57:1c:ec:45:04:1b:45:c4:78:35:3b:49:
9f:0d:25:79:b4:94:79:22:2b:78:cb:53:92:b0:2b:
d6:2e:7b:38:d5:32:d4:75:76:4d:07:06:85:64:90:
b2:c0:dd:93:1b:9a:53:8e:c7:3e:c2:24:25:71:88:
1a:8b:9f:b8:3a:a4:29:55:ce:7c:d3:86:33:b1:a7:
e8:11:8a:8a:c6:02:8c:4d:a0:64:10:d4:80:8a:86:
d0:ea:f5:06:7d:60:c5:0a:97:2c:16:79:d7:56:62:
b3:81:5c:4d:eb:b7:b6:c4:92:fa:45:33:33:4a:be:
ed:ba:05:dc:a3:e3:0b:ed:90:60:9c:98:c1:98:4f:
58:66:ec:8b:e9:ee:21:92:73:10:a8:92:e2:c9:ed:
f8:f4:dd:6a:9f:ae:07:dd:3b:75:43:b9:0b:d7:08:
16:f3:7e:b6:08:d8:ae:d5:58:50:85:c5:65:6f:f8:
c1:64:25:bb:55:bc:67:f0:15:77:37:6b:6c:78:d9:
b8:c6:1e:3d:6d:03:dd:2b:1e:76:d3:49:a1:2e:42:
f5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D9:6D:91:B6:2E:A0:8C:E6:37:46:1A:8D:F6:05:E4:2F:77:04:BE
X509v3 Authority Key Identifier:
keyid:38:8C:CC:D7:8B:F1:65:33:F3:31:85:44:3E:A8:2D:CD:AD:92:04:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIzM14vxZTPzMYVEPqgtza2SBBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/68b1d3-c938-423e-90dd-21098a61357e/1/y9ltkbYuoIzmN0YajfYF5C93BL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/68b1d3-c938-423e-90dd-21098a61357e/1/OIzM14vxZTPzMYVEPqgtza2SBBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.17.0/24
Signature Algorithm: sha256WithRSAEncryption
06:cb:0a:9e:a6:c0:41:b4:00:09:3b:bb:c5:ec:d2:dd:ff:23:
70:2b:32:c2:d6:c7:03:93:6a:50:8a:48:98:fb:1b:ce:e1:bc:
d3:b2:d2:03:2e:7f:66:12:18:a7:3e:ec:25:e9:ba:36:a5:89:
82:40:a6:31:0d:34:3e:fb:ca:05:70:ff:ba:33:de:b0:ab:1f:
46:ad:9c:f8:04:29:58:99:70:fb:3e:94:8b:40:15:93:da:8c:
d1:94:90:1f:6a:0a:9e:d4:cf:0e:0d:89:2a:2b:bd:d2:e4:d3:
0b:c9:04:ff:dc:83:7b:02:14:9f:a0:40:0d:06:1f:ea:f8:f5:
a1:2d:8f:44:97:ea:d3:3c:14:f5:02:5d:70:15:a7:27:10:e7:
60:24:1e:dc:9a:d0:a8:7d:24:1e:f7:2c:5d:51:5b:13:81:26:
3f:14:81:39:46:f0:5b:11:1a:30:41:a1:f3:97:f0:24:c3:57:
7a:8d:0f:66:38:25:a3:d0:9a:55:cb:7e:29:6f:23:4f:b9:ff:
08:06:cb:8b:5c:e7:3e:de:43:b4:96:9e:a3:f0:61:b1:26:d0:
4d:38:12:35:4e:c3:e9:81:1c:fc:df:ef:8a:1c:c2:5d:4e:73:
17:33:ea:48:61:54:02:aa:ec:1c:9c:cc:b7:65:65:ba:56:5e:
53:14:ba:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 16:37:08 2026 by rpki-client