Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/r-YJXwiwh7rALoSlt5jqijBslf8.roa
File: r-YJXwiwh7rALoSlt5jqijBslf8.roa (raw, json)
Hash identifier: J9wniZHNEr62grnQnCFHnmZd2pysSh/T/q+LFn4tk4w=
Subject key identifier: AF:E6:09:5F:08:B0:87:BA:C0:2E:84:A5:B7:98:EA:8A:30:6C:95:FF
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 019FD07B6612BC56F2D397C4813F0CDE25BF
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/r-YJXwiwh7rALoSlt5jqijBslf8.roa
Signing time: Wed 05 Aug 2026 05:52:55 +0000
ROA not before: Wed 05 Aug 2026 05:52:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215048
IP address blocks: 194.0.75.0/24 maxlen: 24
217.194.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d0:7b:66:12:bc:56:f2:d3:97:c4:81:3f:0c:de:25:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Aug 5 05:52:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=afe6095f08b087bac02e84a5b798ea8a306c95ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c1:43:53:d9:bd:be:4b:d8:60:d8:ed:38:a9:
84:91:b2:e7:f8:86:8c:99:c2:37:a9:4f:c3:89:93:
88:ca:61:55:09:1d:91:f9:8c:76:d9:6c:1b:f0:eb:
17:d8:bf:ab:bb:b4:22:5b:36:ad:3d:b3:6b:f9:06:
60:34:4a:a7:cc:87:94:81:46:dd:1f:c8:5b:9e:35:
21:2e:58:f9:65:d4:3e:9c:b0:44:71:a3:bd:4e:df:
7b:65:21:f6:7c:c4:a3:a1:b1:1f:6d:b2:59:0a:a8:
af:17:37:07:fa:4f:c1:3b:18:72:bc:12:0a:4d:3b:
d3:ca:f7:26:12:67:bd:c6:e2:02:8a:c8:9c:95:3b:
32:69:70:e6:ff:8f:4b:aa:bf:eb:1e:d8:76:c6:88:
4f:ab:b7:9c:f4:1a:9d:4c:2a:f0:46:a2:f9:f2:60:
2b:e2:c0:bb:74:3a:be:65:ba:7f:fe:c0:0a:92:ba:
29:d0:e7:4d:fa:0f:05:cb:49:1e:97:f1:a8:43:d7:
d5:8b:ea:3f:14:b7:93:18:e8:e0:28:7c:a9:74:d5:
b4:74:32:78:f7:69:2a:d0:6e:a8:ad:5d:7d:5a:a7:
dd:78:c7:0d:d8:82:df:e5:a1:95:19:5b:f5:94:1d:
1a:aa:55:71:0b:4b:fa:ff:5a:67:dd:4d:41:04:6f:
a8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E6:09:5F:08:B0:87:BA:C0:2E:84:A5:B7:98:EA:8A:30:6C:95:FF
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/r-YJXwiwh7rALoSlt5jqijBslf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.75.0/24
217.194.147.0/24
Signature Algorithm: sha256WithRSAEncryption
88:5e:e2:3f:15:70:f3:3b:10:eb:a3:ae:f1:5d:3e:a8:74:14:
bb:66:b1:ac:51:21:07:11:0f:e5:75:fa:5f:22:fb:6d:e5:5d:
d8:d8:99:49:b7:45:58:80:02:04:d6:5b:2a:7c:3c:86:a6:32:
a4:25:51:95:61:f9:85:e0:38:f0:35:03:95:d1:b6:f8:7b:e2:
a8:f2:8b:71:ec:53:0c:ec:c0:bd:19:ca:de:91:07:24:0e:03:
b8:b8:4a:66:4a:6c:7d:10:ff:4a:88:2f:91:10:18:10:86:95:
96:c8:ca:8a:9f:4b:4c:76:5b:32:86:cc:31:6c:14:4c:2d:e2:
34:6a:68:d4:bf:ce:8f:33:7b:6b:20:1c:f8:c5:48:8b:cb:61:
45:91:4f:ee:54:d3:02:93:ee:dd:29:3c:e2:5a:36:d0:0c:72:
7f:99:18:be:7c:3a:7c:3b:8b:75:c0:4d:a5:07:53:cc:da:77:
ce:2e:bf:f6:8c:20:f6:75:12:4a:84:fd:32:75:8a:f5:6a:5a:
f5:86:ea:32:ba:35:ff:50:3f:1b:ac:de:a9:7b:d0:b5:10:71:
d4:67:81:ac:69:16:1d:91:82:e5:ad:35:98:cb:c5:26:d6:07:
c6:6c:bb:74:ce:b2:68:97:1e:44:b8:27:45:ec:5d:01:a5:8f:
24:2c:38:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:30:11 2026 by rpki-client