Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yHuI6S-Pj-DbD_XSgOGOmxsgRlo.roa
File: yHuI6S-Pj-DbD_XSgOGOmxsgRlo.roa (raw, json)
Hash identifier: 3ZkI/gzlb7Dcji15zSLDI/8YFFBXlANS6bfuv9H4g1w=
Subject key identifier: C8:7B:88:E9:2F:8F:8F:E0:DB:0F:F5:D2:80:E1:8E:9B:1B:20:46:5A
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368BE9FF101F8CFA48C2FF584F6FAA1
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yHuI6S-Pj-DbD_XSgOGOmxsgRlo.roa
Signing time: Thu 02 Jul 2026 15:18:14 +0000
ROA not before: Thu 02 Jul 2026 15:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49127
IP address blocks: 109.176.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:be:9f:f1:01:f8:cf:a4:8c:2f:f5:84:f6:fa:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c87b88e92f8f8fe0db0ff5d280e18e9b1b20465a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4c:ee:ee:e7:69:5f:fa:fe:40:29:27:0c:31:
a3:a2:62:e0:8e:e9:2d:b7:f6:0c:64:18:19:e2:95:
fb:7c:9d:10:b4:0f:16:d9:02:01:16:f3:aa:9c:d6:
a4:ac:d6:c9:68:06:93:36:78:6a:52:f3:db:81:f2:
62:60:60:55:74:02:03:66:3d:8e:91:5c:d7:18:41:
ef:00:6a:77:bd:bd:d4:c2:c9:a9:67:20:dc:04:80:
be:c0:ca:c1:0b:3e:26:b9:9b:e6:a9:e2:f9:b2:26:
4b:13:62:ff:e5:46:97:99:e8:9b:d1:df:80:c7:6d:
e8:f7:15:39:6a:35:70:80:2e:06:60:5b:f3:f4:56:
d0:56:53:bc:9f:b3:d8:8a:d2:21:4e:6a:a1:8d:91:
bc:0d:ec:f4:e4:1e:fc:2d:e5:27:a4:ab:08:32:93:
a1:ec:87:f9:e1:0d:4e:c7:ab:f4:c0:f1:14:ff:3b:
e6:85:41:c8:ba:4a:9c:74:c5:b3:ca:fc:90:7c:45:
52:10:78:02:72:96:a7:3a:83:15:e7:44:4b:1e:05:
ab:26:90:9d:14:7c:2d:ec:81:d4:ea:bf:f4:d1:3f:
b3:c2:56:06:53:4b:04:73:ea:07:6c:63:86:e2:54:
51:f7:29:ff:4a:60:9f:76:67:12:8e:2d:07:1a:70:
1e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:7B:88:E9:2F:8F:8F:E0:DB:0F:F5:D2:80:E1:8E:9B:1B:20:46:5A
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/yHuI6S-Pj-DbD_XSgOGOmxsgRlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.207.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:59:f4:88:12:44:b5:0c:47:c7:11:44:2c:5a:d4:5a:95:62:
79:24:d9:8f:ce:dc:40:10:c0:ce:0d:68:73:9e:ad:a1:76:7b:
9c:e0:9a:a6:d6:dc:70:9f:9f:53:3e:7e:b7:39:06:69:a0:46:
06:94:bb:97:9c:52:54:e1:c7:38:cc:44:4d:9b:61:ca:6b:4e:
c0:b1:55:75:9a:e1:3c:25:23:57:5f:61:51:0f:d6:31:24:e5:
2b:5c:c9:3e:ab:33:8a:15:a7:5d:54:2a:9c:92:be:07:17:35:
12:43:db:50:aa:f9:3f:63:82:ad:05:27:17:72:a8:fb:fa:c6:
67:21:90:2a:fc:51:49:20:80:c0:87:c1:4d:92:a6:c0:15:37:
30:60:f6:28:43:b9:e2:e6:29:ee:f5:4f:53:f3:86:d3:d1:1a:
14:e7:a8:98:7a:85:b6:2c:c9:4a:1e:fc:9b:f5:1f:c2:f7:4a:
43:81:fe:48:ab:4f:38:55:0a:b2:75:43:14:62:a9:f8:99:dd:
8c:66:05:02:42:51:b2:e0:7f:c1:06:5a:97:f2:5b:a4:6e:f3:
e7:db:5e:3f:ad:15:17:de:e1:b5:7a:f0:22:d3:fb:03:a7:c3:
45:98:af:7a:80:05:c3:e7:48:7b:a1:34:f8:79:45:63:28:8b:
0a:03:93:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:19:01 2026 by rpki-client