Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/Y1amBY9-2DUPhZhDGQ1z41L4_a4.roa
File: Y1amBY9-2DUPhZhDGQ1z41L4_a4.roa (raw, json)
Hash identifier: W+NMYH3DKMKs7jtIKCRQJRuDsz8IBwZMUUoVJ/5e0+c=
Subject key identifier: 63:56:A6:05:8F:7E:D8:35:0F:85:98:43:19:0D:73:E3:52:F8:FD:AE
Certificate issuer: /CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Certificate serial: 019EF934E752A91BBE5FA198B5FB53639AEC
Authority key identifier: 8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/Y1amBY9-2DUPhZhDGQ1z41L4_a4.roa
Signing time: Wed 24 Jun 2026 10:37:34 +0000
ROA not before: Wed 24 Jun 2026 10:37:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15830
IP address blocks: 46.28.240.0/21 maxlen: 24
193.22.169.0/24 maxlen: 24
193.41.210.0/23 maxlen: 24
195.80.237.0/24 maxlen: 24
2a02:2978::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Jul 2026 15:46:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:34:e7:52:a9:1b:be:5f:a1:98:b5:fb:53:63:9a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Validity
Not Before: Jun 24 10:37:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6356a6058f7ed8350f859843190d73e352f8fdae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:62:d5:0e:1c:21:1a:1b:a5:b2:be:b4:06:0c:
10:de:56:ef:10:8c:6b:26:54:fd:09:15:19:d5:aa:
39:2d:4f:16:17:05:76:5c:14:60:69:ac:e9:03:de:
c0:7b:b9:c4:14:80:e8:00:52:82:ca:8a:07:de:92:
73:7d:c1:67:bc:b5:9e:3c:dd:a5:4b:fe:81:9e:87:
2e:07:78:af:c0:74:06:33:a8:20:7b:d1:67:54:0b:
0c:14:bd:03:3c:90:57:6f:b6:3d:e4:e7:01:dd:95:
c0:f8:ed:9c:9c:88:53:32:fe:86:72:fa:62:4a:b3:
4c:7f:a2:18:da:0f:10:6a:1c:36:80:87:c9:15:f3:
e5:2a:c1:87:c0:97:32:83:10:d1:92:84:71:b9:9c:
20:9f:eb:3d:06:a6:e4:19:87:3c:c3:58:a7:19:d9:
f7:28:1a:10:ff:7e:16:72:76:8c:71:b8:1d:34:71:
9d:6f:a9:6e:22:e5:b6:9c:17:3a:e9:52:e8:89:90:
a1:83:68:9d:32:21:19:de:5b:8d:80:d6:cf:42:f3:
c8:e5:9a:0c:f2:ed:2a:fb:54:0c:3c:97:19:06:4d:
79:20:38:be:11:da:ed:ac:b0:64:bf:58:f6:6f:f1:
21:c5:cf:43:0f:aa:38:b8:11:13:f9:32:c3:fc:3e:
b6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:56:A6:05:8F:7E:D8:35:0F:85:98:43:19:0D:73:E3:52:F8:FD:AE
X509v3 Authority Key Identifier:
keyid:8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/Y1amBY9-2DUPhZhDGQ1z41L4_a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.240.0/21
193.22.169.0/24
193.41.210.0/23
195.80.237.0/24
IPv6:
2a02:2978::/29
Signature Algorithm: sha256WithRSAEncryption
44:b8:b7:bc:0f:aa:c5:a2:12:c1:cf:f5:6a:67:68:45:e7:32:
c7:35:b7:c0:33:30:d0:d2:a1:ec:dd:37:49:2a:21:50:fd:f0:
e4:f8:74:57:f5:97:44:04:12:4c:72:e8:b9:d3:a3:9b:73:26:
d3:ff:78:7d:4d:83:65:6b:ea:f9:c6:ec:40:05:97:ff:33:fb:
2d:a5:c1:94:1f:ab:ef:ea:33:af:48:52:4e:47:ea:05:e0:9c:
64:dd:86:e3:30:40:ed:13:11:5f:d3:2a:c8:6f:d8:69:b0:dd:
c7:7a:51:87:6d:8c:c2:92:fd:96:71:9d:22:98:51:29:e2:c8:
3d:08:b6:48:1e:b0:0b:56:5f:0f:23:29:17:f4:26:1a:27:6a:
a6:9a:33:76:09:86:71:76:04:1f:f4:e6:1a:f0:08:b5:48:8b:
4f:f2:23:08:54:09:0f:bc:23:63:f5:d9:87:ad:63:c4:8e:04:
44:7b:5d:01:80:5d:d5:01:f0:47:2d:c6:17:3a:49:47:a8:39:
de:4f:e3:37:d9:bd:d3:0c:9c:4a:b7:02:0e:b4:1c:0c:89:47:
9e:d1:47:dc:c0:c6:4f:a2:96:43:48:16:07:46:17:bb:94:75:
c5:5b:12:e3:6b:d8:dc:98:94:7b:c7:65:04:3b:d4:87:39:e6:
4f:75:4b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 19:09:04 2026 by rpki-client