Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/yAZ2o4hGGbiVKtksvyeCYsCtR_M.roa
File: yAZ2o4hGGbiVKtksvyeCYsCtR_M.roa (raw, json)
Hash identifier: uOD1sfAE/4XRCqkt1R1YaZ63d+KOVm97JX7M+mojjCg=
Subject key identifier: C8:06:76:A3:88:46:19:B8:95:2A:D9:2C:BF:27:82:62:C0:AD:47:F3
Certificate issuer: /CN=8e8e977abefa2a1f995e89c947fefd4636b7961c
Certificate serial: 01A115C52EAE2DD9CE868D637A9D877802C7
Authority key identifier: 8E:8E:97:7A:BE:FA:2A:1F:99:5E:89:C9:47:FE:FD:46:36:B7:96:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/yAZ2o4hGGbiVKtksvyeCYsCtR_M.roa
Signing time: Wed 07 Oct 2026 09:50:06 +0000
ROA not before: Wed 07 Oct 2026 09:50:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198627
IP address blocks: 185.184.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:c5:2e:ae:2d:d9:ce:86:8d:63:7a:9d:87:78:02:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8e977abefa2a1f995e89c947fefd4636b7961c
Validity
Not Before: Oct 7 09:50:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c80676a3884619b8952ad92cbf278262c0ad47f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8e:a6:62:dc:ba:65:89:b0:5c:99:83:9a:f7:
6f:4a:9a:86:5d:28:d2:33:13:82:09:c8:19:d3:a7:
f7:5c:4b:56:c1:9e:6a:06:35:6a:de:cb:2a:3c:0d:
bd:bc:6c:c5:3a:38:3d:5c:09:fd:4e:d8:6d:f4:39:
f9:f1:23:78:6e:92:33:7b:6a:fb:e5:dd:b3:58:81:
09:09:b4:36:8a:0b:77:ef:36:8e:e2:f4:59:26:6c:
5c:b4:d3:0a:80:8d:5f:c9:05:62:66:7c:c9:fa:f6:
d5:03:b0:a1:f8:37:2f:94:8d:4a:37:f7:ca:e1:f6:
e9:95:e3:9d:e1:78:ca:48:38:f8:7f:3f:8e:b6:ba:
99:a8:be:a0:71:a2:58:58:5f:17:39:1e:db:6c:55:
17:51:c4:c1:58:bf:85:a0:f4:72:54:ab:34:d9:da:
07:b4:77:77:58:39:79:34:89:a0:df:12:5e:3b:84:
2c:df:f4:ac:5d:74:2e:79:6d:54:b5:c5:a4:c5:9e:
eb:76:d5:cc:15:00:cb:36:52:56:78:8a:15:bf:18:
6e:59:af:55:3a:a3:e6:e8:51:12:93:8c:33:d6:ee:
bd:91:f9:a9:f2:6e:1d:67:fb:11:f1:25:57:d9:45:
20:2b:25:ba:5b:f1:6f:36:1f:5c:1f:c4:6d:99:38:
9b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:06:76:A3:88:46:19:B8:95:2A:D9:2C:BF:27:82:62:C0:AD:47:F3
X509v3 Authority Key Identifier:
keyid:8E:8E:97:7A:BE:FA:2A:1F:99:5E:89:C9:47:FE:FD:46:36:B7:96:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/yAZ2o4hGGbiVKtksvyeCYsCtR_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.254.0/24
Signature Algorithm: sha256WithRSAEncryption
38:fe:c7:a0:55:d3:4b:4d:eb:fa:31:c0:6b:76:09:10:9f:ec:
db:51:bc:0c:7e:16:26:22:33:cb:22:33:49:47:eb:94:d8:ec:
79:f7:68:61:1c:ff:d0:4b:b0:59:4c:c0:ab:a2:fb:16:35:e8:
e1:81:a0:72:4e:56:c9:68:21:12:19:b2:05:e2:e0:26:18:e7:
93:b9:be:ae:1b:53:f4:b6:51:21:39:3f:bc:a4:11:50:17:29:
f9:9a:e3:23:fe:28:0f:72:0d:c1:ed:1f:0d:ae:75:22:ed:b4:
12:19:ea:3c:19:a1:a1:e0:db:39:07:05:ce:34:db:6a:78:70:
a0:63:85:35:0f:8d:b8:51:de:83:50:59:13:35:98:a1:e9:43:
bd:5c:d7:3d:3a:51:af:7b:ab:49:85:c2:41:bd:70:23:0b:69:
ab:87:93:0d:05:d5:9d:1d:99:38:93:a1:a5:8a:32:2e:29:df:
9f:73:60:53:43:b8:6d:de:9c:14:e1:87:02:22:31:e4:e7:56:
f0:0b:50:95:8d:f2:4f:97:cd:66:fb:eb:1c:87:4c:eb:73:0f:
24:0f:ec:1b:02:03:47:eb:66:a4:78:8c:25:19:75:48:8b:ca:
a1:00:13:a3:8d:14:42:04:17:b4:4e:96:d6:ce:87:5c:67:25:
a5:e4:ce:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:33:53 2026 by rpki-client