Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/f5a17c-3e11-4db7-bad7-74a6af3430ca/1/Yj5kqjTeTT0f-iqo7909ukx7yzA.roa
File: Yj5kqjTeTT0f-iqo7909ukx7yzA.roa (raw, json)
Hash identifier: 02U83VFsJC3GMHbCV4IrGfT50tVC8Pf0hUhvprkc2dc=
Subject key identifier: 62:3E:64:AA:34:DE:4D:3D:1F:FA:2A:A8:EF:DD:3D:BA:4C:7B:CB:30
Certificate issuer: /CN=b8f9f74fa3eb46b6f7403b2650216a7bb45f93fb
Certificate serial: 01A10AF3DE79C4B8305FC63D22B1E8737C22
Authority key identifier: B8:F9:F7:4F:A3:EB:46:B6:F7:40:3B:26:50:21:6A:7B:B4:5F:93:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPn3T6PrRrb3QDsmUCFqe7Rfk_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f5a17c-3e11-4db7-bad7-74a6af3430ca/1/Yj5kqjTeTT0f-iqo7909ukx7yzA.roa
Signing time: Mon 05 Oct 2026 07:25:16 +0000
ROA not before: Mon 05 Oct 2026 07:25:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204760
IP address blocks: 213.217.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f5a17c-3e11-4db7-bad7-74a6af3430ca/1/uPn3T6PrRrb3QDsmUCFqe7Rfk_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/f5a17c-3e11-4db7-bad7-74a6af3430ca/1/uPn3T6PrRrb3QDsmUCFqe7Rfk_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uPn3T6PrRrb3QDsmUCFqe7Rfk_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:f3:de:79:c4:b8:30:5f:c6:3d:22:b1:e8:73:7c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8f9f74fa3eb46b6f7403b2650216a7bb45f93fb
Validity
Not Before: Oct 5 07:25:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=623e64aa34de4d3d1ffa2aa8efdd3dba4c7bcb30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b7:32:28:df:5a:56:14:3a:eb:fd:0a:36:50:
35:09:de:60:6b:74:fe:aa:89:de:15:a3:6a:00:80:
5a:f7:f6:ec:a6:3b:36:92:df:2a:e5:cf:69:51:d1:
b5:dd:c3:64:44:e9:98:41:51:0e:60:9b:e0:23:87:
79:ce:d7:f2:78:ec:b5:b5:fc:f9:74:67:af:5a:ef:
52:e1:54:4f:9a:33:26:3b:88:af:14:99:1b:c1:d4:
57:67:16:7e:70:24:ab:93:d1:f4:20:fa:c6:34:1b:
86:1a:7b:f5:00:47:13:ff:09:32:1d:c3:d4:03:23:
16:e5:2c:40:52:8c:09:18:41:39:72:ab:0a:ec:e4:
1c:20:5d:a4:15:f0:b0:39:a0:e6:da:d0:98:9b:f3:
c4:bb:8c:f4:0f:bd:c7:55:0f:6e:2c:97:d0:91:55:
f8:5f:dd:a1:25:66:e1:1b:4e:44:98:80:d6:1f:23:
c1:c8:64:44:bc:99:0d:b5:23:d5:f4:0d:6e:82:81:
b3:9d:4e:a7:34:11:38:db:a4:6b:70:3e:dc:a2:12:
aa:98:05:07:a4:11:e8:5d:d9:a6:16:49:aa:53:8c:
43:cb:99:a4:90:ba:33:0d:b5:2c:08:ef:c4:d0:d2:
73:58:c8:e3:ee:e9:f2:3c:9d:20:bc:62:62:d7:23:
76:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3E:64:AA:34:DE:4D:3D:1F:FA:2A:A8:EF:DD:3D:BA:4C:7B:CB:30
X509v3 Authority Key Identifier:
keyid:B8:F9:F7:4F:A3:EB:46:B6:F7:40:3B:26:50:21:6A:7B:B4:5F:93:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPn3T6PrRrb3QDsmUCFqe7Rfk_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f5a17c-3e11-4db7-bad7-74a6af3430ca/1/Yj5kqjTeTT0f-iqo7909ukx7yzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f5a17c-3e11-4db7-bad7-74a6af3430ca/1/uPn3T6PrRrb3QDsmUCFqe7Rfk_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.217.4.0/24
Signature Algorithm: sha256WithRSAEncryption
26:d6:c0:a6:6c:e7:a4:3a:fb:91:55:1d:24:62:da:d0:68:bc:
24:d7:dd:a4:96:37:db:d7:a6:eb:6d:e0:b2:61:48:43:b8:5b:
b6:ef:ff:85:f5:f0:98:ba:a0:a8:4f:42:a8:c9:75:e6:d4:95:
43:05:7f:53:db:e9:8e:fa:15:a3:de:28:bf:98:5d:71:16:4e:
5b:58:97:29:8a:c2:24:64:74:5a:a2:7a:cf:2f:ac:3f:5b:26:
52:c1:ed:4b:67:53:8b:75:99:c8:0b:db:05:b7:40:7f:22:81:
4a:b4:71:46:0b:37:73:87:50:3a:76:b4:07:5f:79:73:b4:89:
c5:bf:75:72:e2:24:88:23:cd:02:2b:ec:59:a4:92:ef:be:33:
f6:29:dc:28:f0:5c:01:68:ad:48:d6:64:ca:c0:7d:ca:cb:bf:
03:07:54:1e:ef:54:58:82:3e:78:e7:f8:88:7a:df:ed:cf:a4:
8d:2d:d8:73:de:d7:32:1f:47:a3:3e:48:f7:d7:0a:37:51:8d:
39:5b:88:26:e6:e0:0e:32:c3:71:6b:fd:99:13:f2:86:4e:32:
b7:9c:1f:e9:e3:cc:4c:43:7f:6a:88:25:6f:03:68:36:b9:98:
31:d9:dd:27:79:c4:e1:84:af:f6:5f:d5:6a:4f:b7:e4:91:df:
36:93:d9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 00:09:46 2026 by rpki-client