Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/f4a9ed-c98c-4250-a66e-367f49ed4b92/1/Y1u9X-euBf52bXrPXABuqf1wVfo.roa
File: Y1u9X-euBf52bXrPXABuqf1wVfo.roa (raw, json)
Hash identifier: Rh1lv2JUerfY3TIJzhgvFKyL9IDtwVRzCPOLfofmaGc=
Subject key identifier: 63:5B:BD:5F:E7:AE:05:FE:76:6D:7A:CF:5C:00:6E:A9:FD:70:55:FA
Certificate issuer: /CN=7e0aa229035bb5199e822d0d73873c931a74b397
Certificate serial: 01A07C1B51BAB66F3646131ED3445044FA7D
Authority key identifier: 7E:0A:A2:29:03:5B:B5:19:9E:82:2D:0D:73:87:3C:93:1A:74:B3:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgqiKQNbtRmegi0Nc4c8kxp0s5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f4a9ed-c98c-4250-a66e-367f49ed4b92/1/Y1u9X-euBf52bXrPXABuqf1wVfo.roa
Signing time: Mon 07 Sep 2026 13:42:40 +0000
ROA not before: Mon 07 Sep 2026 13:42:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 193.169.247.0/24 maxlen: 27
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/f4a9ed-c98c-4250-a66e-367f49ed4b92/1/fgqiKQNbtRmegi0Nc4c8kxp0s5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/f4a9ed-c98c-4250-a66e-367f49ed4b92/1/fgqiKQNbtRmegi0Nc4c8kxp0s5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgqiKQNbtRmegi0Nc4c8kxp0s5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7c:1b:51:ba:b6:6f:36:46:13:1e:d3:44:50:44:fa:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e0aa229035bb5199e822d0d73873c931a74b397
Validity
Not Before: Sep 7 13:42:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=635bbd5fe7ae05fe766d7acf5c006ea9fd7055fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:95:83:2d:31:b6:49:be:ff:eb:83:c8:79:4d:
1d:02:f6:0c:3c:8e:ab:5f:aa:0d:ba:0b:2b:fe:49:
2c:b3:b9:dc:b9:f0:d3:8d:34:a5:8d:34:2e:a6:3f:
03:04:21:28:fa:25:66:01:1e:ad:49:4e:2a:49:4c:
a1:a4:0e:aa:e2:98:41:68:c5:76:d2:33:86:50:dd:
17:2f:07:f2:78:c3:ae:58:6d:79:49:6d:c4:e3:9b:
88:1c:7e:0d:2f:74:63:f6:32:f2:07:ef:a6:f9:ca:
61:57:a5:66:a9:e9:8d:b6:f5:d3:42:b1:f3:58:da:
ca:61:45:a5:0c:42:e5:0a:02:31:9e:77:1c:ac:ee:
b4:e4:36:d9:93:27:bf:95:d0:ce:21:5e:a1:38:f9:
ef:1b:aa:01:2a:c7:c9:64:b4:bc:86:13:8b:90:49:
8d:ad:19:1d:bc:3b:74:fa:04:8f:1d:68:7b:75:85:
6d:c5:65:ca:72:84:ae:cd:8d:6e:f1:38:76:50:7e:
bd:ef:00:01:03:70:c0:78:82:5e:de:7f:c8:c1:84:
21:8a:b8:45:1c:e9:d4:e1:c1:e7:3a:5b:fa:b6:3f:
97:74:58:92:6c:c8:bc:c0:06:93:7e:9f:ad:72:b6:
9c:51:b6:0d:36:ce:4f:92:07:77:54:7a:d8:6b:ac:
42:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:5B:BD:5F:E7:AE:05:FE:76:6D:7A:CF:5C:00:6E:A9:FD:70:55:FA
X509v3 Authority Key Identifier:
keyid:7E:0A:A2:29:03:5B:B5:19:9E:82:2D:0D:73:87:3C:93:1A:74:B3:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgqiKQNbtRmegi0Nc4c8kxp0s5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f4a9ed-c98c-4250-a66e-367f49ed4b92/1/Y1u9X-euBf52bXrPXABuqf1wVfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f4a9ed-c98c-4250-a66e-367f49ed4b92/1/fgqiKQNbtRmegi0Nc4c8kxp0s5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.247.0/24
Signature Algorithm: sha256WithRSAEncryption
20:e4:2f:22:0b:4e:e8:0e:5a:00:4d:6f:6c:73:31:da:76:fe:
fa:82:57:cf:32:a2:70:95:80:b6:04:47:e6:25:55:27:43:3c:
08:3f:e3:9d:70:01:1b:02:3d:19:ce:db:da:53:15:cb:83:b9:
27:99:2a:84:e6:b9:f6:eb:0a:26:c1:06:8d:a3:36:dc:c2:50:
b9:a2:75:fc:f0:51:36:1d:31:7e:a5:4e:c3:28:4d:0b:b7:6a:
bc:26:68:13:49:35:59:cc:31:15:9e:82:85:da:32:b6:89:31:
71:1c:00:50:a9:5c:d2:3a:bd:e1:14:5e:62:12:99:96:d0:03:
be:62:9b:4a:70:09:d2:42:2a:69:6e:0a:b5:5c:2a:5f:59:21:
58:28:a7:e4:04:21:f9:6d:13:98:f8:39:5c:7f:34:23:de:e1:
87:87:f0:c6:b8:c5:34:2a:9e:9b:44:9b:36:92:fa:59:e8:d4:
8c:83:48:af:9a:96:10:ca:07:0f:d1:03:1c:56:ca:95:e2:af:
c3:20:90:3f:89:b0:18:0f:0c:19:6b:1c:9a:bc:89:39:bd:d6:
94:75:e8:76:1c:30:c8:87:25:8e:02:22:26:25:bb:58:db:a3:
fd:ec:50:8d:25:59:7c:cf:be:ef:4b:fd:ae:0c:41:d0:73:a2:
8b:85:44:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:23:39 2026 by rpki-client