Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/Y0JbxOj_u8eJzUeHjUqUp5ZzdjI.roa
File: Y0JbxOj_u8eJzUeHjUqUp5ZzdjI.roa (raw, json)
Hash identifier: upN3TgIZvGzCE5YLEWAdPuZbKmynb15EXTQ5pfRhfMc=
Subject key identifier: 63:42:5B:C4:E8:FF:BB:C7:89:CD:47:87:8D:4A:94:A7:96:73:76:32
Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial: 019EE5AC819A61EB96A9C3F128C567105B66
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/Y0JbxOj_u8eJzUeHjUqUp5ZzdjI.roa
Signing time: Sat 20 Jun 2026 15:35:48 +0000
ROA not before: Sat 20 Jun 2026 15:35:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197537
IP address blocks: 45.152.178.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e5:ac:81:9a:61:eb:96:a9:c3:f1:28:c5:67:10:5b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Validity
Not Before: Jun 20 15:35:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63425bc4e8ffbbc789cd47878d4a94a796737632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ef:8d:49:e7:39:05:de:3e:37:19:67:a1:6d:
fb:ca:41:2d:73:94:58:d8:f4:d9:3d:a5:b9:30:7e:
0d:8c:32:b1:0a:87:85:64:d6:cf:6c:fd:ff:a7:fb:
c6:44:06:95:05:20:60:f9:d5:d9:c3:b1:37:fd:16:
22:d2:d4:07:c1:bf:85:4f:9e:0c:38:b1:38:da:9d:
32:f1:fa:e7:8d:59:f6:18:1a:f1:dd:b2:e7:7a:2c:
de:36:2b:c1:99:8c:15:53:20:1b:83:dd:14:9c:3c:
ac:cd:2b:80:09:99:4d:e7:ed:0a:e0:42:e9:ec:dd:
99:00:ec:68:ed:b8:3d:ae:f4:17:e2:c3:a9:33:c2:
6a:af:23:a2:d5:91:17:f3:2b:44:d9:db:eb:8c:6f:
dd:9b:9c:3c:4b:a2:c9:4d:a4:1d:0e:d7:8e:7f:df:
79:98:29:a0:93:a0:95:96:3c:ea:0e:13:f4:6a:3d:
68:49:f3:69:b0:b0:89:eb:99:80:6c:5c:60:7b:9a:
c8:ee:5c:5f:1e:71:46:95:54:61:13:25:90:69:12:
18:71:fe:6b:3d:67:f0:10:85:7a:4e:94:ce:af:fa:
e6:bc:66:7d:87:76:ea:02:64:c8:76:59:9f:5a:2b:
f8:1f:a0:0e:71:54:50:c4:19:8f:ea:4d:8a:2f:20:
77:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:42:5B:C4:E8:FF:BB:C7:89:CD:47:87:8D:4A:94:A7:96:73:76:32
X509v3 Authority Key Identifier:
keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/Y0JbxOj_u8eJzUeHjUqUp5ZzdjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.178.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:f2:5c:4f:c8:b0:28:b1:cf:c7:fd:0b:55:ff:61:c8:38:17:
65:99:e6:bf:02:05:5e:2b:c1:44:eb:a3:b2:c7:f8:81:44:4a:
af:33:75:63:3b:3d:cb:cd:26:47:36:74:83:c6:be:c9:8f:f0:
0b:ab:62:f6:5a:b6:33:24:fd:8d:ae:ae:71:4d:c3:05:51:c2:
cd:8b:bf:74:33:f0:b9:ed:07:e4:30:43:b3:ea:4a:20:29:79:
e0:f9:5d:81:f6:9d:8b:ff:6a:1b:f7:34:b3:b1:4e:99:c8:a6:
6d:25:fb:a2:33:d2:c1:71:4e:2e:1b:b2:65:41:da:ac:96:48:
ac:34:c3:b5:0e:94:9b:ab:f2:75:18:48:c7:4b:db:7e:12:8c:
c9:23:45:6c:fe:4c:a7:42:c8:85:31:3a:d0:89:1c:f3:e1:1f:
20:b7:16:2f:83:c5:47:eb:bd:23:99:ca:0f:0e:59:8f:19:09:
a0:d4:4b:24:1e:aa:ad:72:b3:61:e4:6c:b6:8d:60:ce:b4:38:
bf:55:8e:24:dd:80:bf:21:17:78:b8:f2:8c:86:a6:24:72:1b:
e7:5f:b8:32:08:86:64:f0:11:6a:c6:00:e3:d8:2f:04:c2:09:
e0:23:44:2d:29:85:7d:9a:1e:61:9d:77:da:0c:c5:a8:69:6a:
89:84:2b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:31 2026 by rpki-client