Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/yBPKuMpl_dgJlc-gc487I17zqM4.roa
File: yBPKuMpl_dgJlc-gc487I17zqM4.roa (raw, json)
Hash identifier: pgEI+Gik3G8+8l8YEqfnp48Dxapl++amz2F3UHTIHrg=
Subject key identifier: C8:13:CA:B8:CA:65:FD:D8:09:95:CF:A0:73:8F:3B:23:5E:F3:A8:CE
Certificate issuer: /CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Certificate serial: 01A1365AEDD0089E8D27817250B39701543F
Authority key identifier: 3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/yBPKuMpl_dgJlc-gc487I17zqM4.roa
Signing time: Tue 13 Oct 2026 17:41:31 +0000
ROA not before: Tue 13 Oct 2026 17:41:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39402
IP address blocks: 95.214.212.0/24 maxlen: 24
95.214.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:5a:ed:d0:08:9e:8d:27:81:72:50:b3:97:01:54:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Validity
Not Before: Oct 13 17:41:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c813cab8ca65fdd80995cfa0738f3b235ef3a8ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:dd:9c:9e:38:73:8c:ed:37:a1:76:9a:41:a6:
73:a6:4a:f7:26:b5:f6:86:b0:d5:e6:79:83:30:e4:
e1:24:9e:b2:4b:d7:64:e7:1d:1b:05:41:47:6a:cc:
6c:a2:6f:a2:36:27:77:f1:1c:f5:3b:17:86:bd:16:
21:a9:71:0b:69:8b:c1:09:4a:aa:f1:d0:4a:e1:c9:
77:b3:8b:64:fc:5f:60:46:14:5e:54:57:11:41:84:
8a:5e:b5:a2:46:8c:02:8b:0f:a6:d2:00:0e:81:e2:
d9:53:aa:63:47:56:6e:dc:29:15:d3:f7:eb:0e:34:
05:b7:c1:7b:a0:22:98:71:76:24:23:92:68:93:aa:
60:15:bb:d1:bb:aa:cf:68:e6:72:06:57:7b:4e:86:
29:10:1e:02:cb:01:66:90:90:de:9c:eb:6a:db:06:
e2:4d:59:c3:73:d4:97:70:05:dd:ad:37:e6:98:12:
94:57:ad:b9:9b:16:ec:be:7e:c9:81:10:3d:f0:61:
fc:3f:22:9f:1a:9b:a9:47:a2:17:c5:3c:d1:88:ef:
4b:a2:17:98:ac:03:fc:22:6d:12:6a:a3:ec:e5:4c:
41:da:82:2a:48:6a:1b:2d:2b:81:34:4d:d1:97:d7:
9c:7a:af:52:ec:cc:6d:cd:ab:3f:ab:d4:a8:c4:b3:
71:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:13:CA:B8:CA:65:FD:D8:09:95:CF:A0:73:8F:3B:23:5E:F3:A8:CE
X509v3 Authority Key Identifier:
keyid:3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/yBPKuMpl_dgJlc-gc487I17zqM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.212.0/23
Signature Algorithm: sha256WithRSAEncryption
15:84:33:dc:97:b3:98:c2:c7:bc:c4:8c:65:1a:19:88:f5:38:
7d:ed:e7:41:bd:f2:37:03:c0:8a:0a:a8:f3:6e:4c:08:ed:e9:
ca:df:c3:bc:80:b4:bd:3c:d3:65:2f:92:fc:11:ba:2d:97:45:
ad:1d:27:40:9b:81:82:26:56:14:79:79:9d:c1:89:e2:e1:98:
1a:fc:04:c4:e4:dc:0d:2e:56:15:82:81:9d:dd:52:7b:7f:9b:
33:7b:80:1e:f7:f5:72:e2:d9:e4:26:55:3c:87:ae:d4:07:47:
43:dc:4b:e0:bb:0f:68:8c:36:ad:aa:44:a9:46:e5:5a:19:b5:
ae:4a:66:e3:2a:be:f9:87:9c:e1:39:43:bc:43:cc:cf:8c:8c:
fd:71:b7:82:d1:14:91:3a:8b:26:17:d1:93:a7:74:06:6b:a8:
53:06:f9:d2:2d:58:20:c7:59:ca:b8:56:7d:4f:63:33:3c:ed:
e4:48:9c:d0:d6:db:85:0c:01:70:05:90:73:54:c6:f8:e5:db:
f5:69:99:e3:1c:db:dc:1b:8e:76:cb:bb:5f:56:c1:22:50:34:
bd:07:bf:d0:db:35:17:11:49:9a:04:4c:7b:ec:cc:9a:38:cb:
03:7d:c1:a7:ff:fb:26:1c:1c:3d:1d:d2:3b:0e:60:db:c2:72:
6f:21:64:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:42:35 2026 by rpki-client