Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/ylDBTYX9mMbZPrIC82FbSWOlE0Q.roa
File: ylDBTYX9mMbZPrIC82FbSWOlE0Q.roa (raw, json)
Hash identifier: VerZxxF2BuwJmE0kidxiI2BSXlIpBlA7x46UriSXoUM=
Subject key identifier: CA:50:C1:4D:85:FD:98:C6:D9:3E:B2:02:F3:61:5B:49:63:A5:13:44
Certificate issuer: /CN=f90cffcb29ec758cae3f54c6f50ab3bf69530f1a
Certificate serial: 019F2369471DC10ABE0177138F97EB36EA82
Authority key identifier: F9:0C:FF:CB:29:EC:75:8C:AE:3F:54:C6:F5:0A:B3:BF:69:53:0F:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/ylDBTYX9mMbZPrIC82FbSWOlE0Q.roa
Signing time: Thu 02 Jul 2026 15:18:49 +0000
ROA not before: Thu 02 Jul 2026 15:18:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213579
IP address blocks: 185.140.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 12:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:47:1d:c1:0a:be:01:77:13:8f:97:eb:36:ea:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f90cffcb29ec758cae3f54c6f50ab3bf69530f1a
Validity
Not Before: Jul 2 15:18:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca50c14d85fd98c6d93eb202f3615b4963a51344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1a:b2:68:62:0b:4d:17:66:8e:be:e6:d5:5e:
7c:99:c5:2b:73:f7:fe:70:8d:6e:fc:a3:95:cd:1f:
98:31:84:21:be:ea:72:c5:60:4e:4c:69:b7:df:49:
fa:ff:9a:59:40:a4:47:56:95:9c:f0:23:e7:86:b9:
8e:8d:f2:b2:cb:34:87:2d:66:eb:4e:bd:ed:26:a6:
e7:a5:73:34:7e:43:d5:a8:15:60:ea:77:7c:95:6c:
2f:08:0f:27:bb:89:cf:28:d0:b9:a4:56:50:30:8e:
b6:76:dd:72:af:97:c3:1f:32:b0:51:22:f9:f9:58:
33:7b:b0:1f:a0:cc:91:49:83:94:6c:59:ec:51:6b:
53:f1:c1:9e:ec:ad:7e:68:2e:3a:a9:62:29:83:ef:
6e:57:a4:ad:cb:bb:63:9f:e2:c9:3a:33:eb:d4:3a:
8e:17:b3:21:94:f3:51:37:e5:29:ce:c8:e7:6e:de:
9c:70:e3:50:94:6a:13:89:b2:ce:0d:07:94:3e:01:
7b:51:13:a1:c9:42:a4:ce:e8:37:93:e6:7e:d9:1c:
a9:fb:39:a6:45:56:b9:1d:82:a4:dd:05:7f:08:2e:
04:28:41:74:f1:7b:9d:f0:45:70:b2:2f:dd:01:36:
9f:e7:b9:9e:41:bc:a7:6e:84:ce:18:5a:5d:b7:91:
aa:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:50:C1:4D:85:FD:98:C6:D9:3E:B2:02:F3:61:5B:49:63:A5:13:44
X509v3 Authority Key Identifier:
keyid:F9:0C:FF:CB:29:EC:75:8C:AE:3F:54:C6:F5:0A:B3:BF:69:53:0F:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/ylDBTYX9mMbZPrIC82FbSWOlE0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.54.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:8f:04:9a:81:e6:31:71:9b:48:c0:7e:b1:fb:d5:cb:21:d1:
b1:68:b4:d8:e6:24:20:da:2c:e6:75:b5:d3:e6:d5:9f:ae:96:
a4:21:e1:f7:e7:77:05:39:10:77:d7:b9:23:ea:14:5e:f7:a8:
bc:7a:19:fe:bc:7b:43:bd:c2:7a:23:4f:85:e3:c4:47:63:0b:
14:f3:f8:a9:b6:2d:1a:02:7f:e7:62:27:b9:d9:3e:bc:32:a8:
b3:c9:ed:e4:e5:56:d4:f8:b6:fe:08:46:ab:d2:75:94:3a:95:
46:a3:db:3d:3d:cb:a0:ad:e7:8b:f8:d1:07:1a:ac:1c:af:d2:
d6:6e:60:08:66:82:92:6f:9c:cb:04:c5:6e:d8:b9:83:2c:aa:
04:77:34:e6:1f:55:e9:d0:8a:8d:10:cd:e9:16:2e:6c:28:16:
16:9f:e5:bb:1f:d8:30:83:bc:8b:16:7d:f9:d0:d8:01:85:ce:
75:27:31:8e:17:93:8a:71:c4:5f:7c:35:be:16:f0:3b:6c:de:
61:db:5e:d4:ae:89:31:55:86:c3:95:f1:e2:2a:07:78:2b:e9:
9b:39:a2:13:de:b6:bc:a8:01:62:83:c7:42:21:6d:ec:02:a9:
30:0f:a4:e8:22:02:8f:a8:23:b2:f5:86:60:fe:1f:13:c8:21:
e0:8a:41:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 19:52:02 2026 by rpki-client