Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/y6pYiroD4MRW9-1YFCt0GIULJ_o.roa
File: y6pYiroD4MRW9-1YFCt0GIULJ_o.roa (raw, json)
Hash identifier: 9FA55gY5oueQByIOaiaYwm7fsruN8t2bJ39olqxrM5M=
Subject key identifier: CB:AA:58:8A:BA:03:E0:C4:56:F7:ED:58:14:2B:74:18:85:0B:27:FA
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 01A1221887C7BFEB7C49BEC59DFF2D4484D9
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/y6pYiroD4MRW9-1YFCt0GIULJ_o.roa
Signing time: Fri 09 Oct 2026 19:16:35 +0000
ROA not before: Fri 09 Oct 2026 19:16:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218687
IP address blocks: 213.182.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:18:87:c7:bf:eb:7c:49:be:c5:9d:ff:2d:44:84:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Oct 9 19:16:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cbaa588aba03e0c456f7ed58142b7418850b27fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a1:65:0d:c3:f1:71:09:12:7d:44:76:d5:9a:
23:91:08:c2:37:0c:32:c8:0b:fe:da:e5:c8:5b:c8:
bd:f0:12:b3:47:ef:ee:87:16:8b:d6:3b:83:bd:0c:
e9:c0:13:1e:9b:2c:74:49:01:51:e5:78:8f:6a:ab:
8b:79:9a:26:dd:9b:6c:ce:e4:6a:27:89:5a:32:f0:
19:57:e7:d9:c7:fc:b6:cf:fd:6c:56:8b:fe:c4:46:
96:dd:86:0f:cf:ee:7d:b9:43:d8:6d:54:ac:92:8d:
16:95:59:1d:a7:ed:71:12:0a:8b:22:5a:3d:c2:5c:
d6:b1:45:7e:07:b5:15:87:be:5a:ce:45:5d:d6:c9:
d1:fb:9b:2d:34:72:ea:79:e7:f9:81:cf:dc:4e:48:
bf:f0:3b:54:10:16:95:d9:55:02:6a:9c:eb:1f:47:
6e:52:25:8b:55:44:f2:00:1b:da:d4:0e:a0:ec:85:
09:b3:91:1d:8d:36:3d:2b:da:89:b1:fe:71:b7:a0:
2c:79:b7:e7:97:e2:a6:d6:e5:db:6d:1f:95:9c:29:
26:0c:cc:64:c7:4f:f5:f8:4c:a4:e2:23:a8:ea:f8:
b6:d8:c2:35:29:ae:c6:6f:c7:01:c8:24:a2:bf:89:
2d:2b:04:90:de:34:3e:fe:d2:f0:ac:93:f4:1b:f6:
fd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AA:58:8A:BA:03:E0:C4:56:F7:ED:58:14:2B:74:18:85:0B:27:FA
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/y6pYiroD4MRW9-1YFCt0GIULJ_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.182.201.0/24
Signature Algorithm: sha256WithRSAEncryption
68:94:49:e4:c4:da:3c:1e:f7:96:94:a6:7b:e7:cd:67:d2:37:
54:86:2e:81:43:7a:ec:b3:6b:fc:ce:2b:51:9a:6c:4a:83:28:
34:c0:dc:aa:5b:51:14:78:f0:b3:d5:3b:24:d3:28:2e:7f:ec:
af:52:ed:44:12:8d:5f:bb:dc:10:73:c0:15:7a:56:2a:eb:6f:
f9:92:5b:2f:17:a8:da:d5:54:df:56:34:a0:a8:64:b8:b8:be:
16:b8:5a:56:fb:a8:2e:be:9c:a0:17:dd:89:1a:9e:d3:fc:45:
da:c1:36:18:1a:56:e3:2f:8f:11:79:12:05:ab:c2:08:da:72:
2f:98:6c:fa:c0:76:8e:3a:28:8d:af:d2:dd:ac:5b:5a:50:b4:
4f:02:b6:92:af:68:ce:bf:d1:88:7b:65:d0:47:a0:62:7d:67:
ad:44:9a:2f:40:66:8d:16:a6:12:e9:f0:a1:6e:85:74:ca:ff:
41:7d:7d:9a:79:fe:bd:7c:10:28:bd:59:68:4d:d1:dc:72:d4:
08:17:06:51:e4:ae:87:00:89:15:6a:bb:da:79:21:fe:0d:58:
27:ab:37:ed:4d:ec:c0:72:3c:17:ec:da:de:b6:5c:20:85:a6:
c5:16:dc:88:e7:b7:19:b0:44:cc:71:c2:74:07:d6:3a:1e:c1:
58:ea:82:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 16:31:17 2026 by rpki-client