Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/yElt2yg-GpIaj6u428lgHnZOhik.roa
File: yElt2yg-GpIaj6u428lgHnZOhik.roa (raw, json)
Hash identifier: zUh/WHZL7u5lqQk5gKfa0/XbZD8J9U/I2TaRZEQ1WLk=
Subject key identifier: C8:49:6D:DB:28:3E:1A:92:1A:8F:AB:B8:DB:C9:60:1E:76:4E:86:29
Certificate issuer: /CN=a16102e80735fec8921e9f509fc53b10e2be9505
Certificate serial: 01A115F5B43210048C891B4D227F1838B53B
Authority key identifier: A1:61:02:E8:07:35:FE:C8:92:1E:9F:50:9F:C5:3B:10:E2:BE:95:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/yElt2yg-GpIaj6u428lgHnZOhik.roa
Signing time: Wed 07 Oct 2026 10:43:06 +0000
ROA not before: Wed 07 Oct 2026 10:43:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218482
IP address blocks: 2.152.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 13:18:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:f5:b4:32:10:04:8c:89:1b:4d:22:7f:18:38:b5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16102e80735fec8921e9f509fc53b10e2be9505
Validity
Not Before: Oct 7 10:43:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8496ddb283e1a921a8fabb8dbc9601e764e8629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:02:24:a1:23:32:3d:75:48:cb:cb:91:25:5d:
c2:3d:1d:68:c5:5a:6b:42:e4:cb:97:1c:99:5a:f4:
c9:98:ae:d1:04:66:ae:13:4a:52:07:8f:41:2e:d6:
e4:e3:33:f7:c5:bb:b0:d9:8d:c4:81:8b:ae:fe:a7:
4a:a4:6d:34:82:1b:ed:9f:be:c2:1d:85:ea:60:90:
f2:f8:08:29:6a:7b:0c:38:30:59:26:4a:1a:31:59:
c2:d1:79:35:9b:a3:26:ff:a9:b9:81:33:e7:b3:aa:
86:12:c2:38:d8:2f:34:67:6b:41:d5:ae:d1:0a:64:
c5:e0:c0:9d:96:de:01:c7:db:69:58:82:44:74:03:
b1:ca:4c:e4:fe:21:8b:e1:da:13:da:d8:6e:5b:fd:
e2:81:98:3d:52:6e:8c:a4:4d:08:07:5b:c8:44:c8:
71:7a:f1:2b:d4:5a:a1:7f:65:36:86:eb:f2:0b:6e:
be:7a:b5:a8:58:94:5f:5a:8b:c2:3d:f6:f9:91:cf:
51:b9:40:0d:fa:28:86:7c:fd:6b:2c:c8:ba:12:5e:
fe:bb:a5:55:09:45:50:91:84:08:c0:bb:15:e7:ee:
99:6c:a9:80:ec:37:99:c3:2b:ff:a1:b1:13:b5:c4:
82:ed:97:38:f5:d0:f8:89:c3:09:b9:0c:dc:f0:0e:
6e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:49:6D:DB:28:3E:1A:92:1A:8F:AB:B8:DB:C9:60:1E:76:4E:86:29
X509v3 Authority Key Identifier:
keyid:A1:61:02:E8:07:35:FE:C8:92:1E:9F:50:9F:C5:3B:10:E2:BE:95:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/yElt2yg-GpIaj6u428lgHnZOhik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.152.86.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:f5:2c:03:a2:cf:b8:fe:97:49:cc:4a:b2:98:ba:39:58:d3:
39:96:f1:2c:21:b7:ba:c2:61:7a:e6:32:41:17:7a:c2:14:e2:
fe:44:5c:8f:88:d4:a8:ee:e4:7e:96:68:b0:39:5f:cd:61:b6:
34:74:5b:4a:f7:1d:d0:94:25:02:10:da:7e:c2:18:ed:b4:bf:
b2:fb:bf:c1:7f:6a:c8:dc:6c:93:03:17:1a:2a:65:6c:46:da:
df:3c:a1:14:70:5c:3b:f3:ef:24:bd:41:cc:eb:ae:b7:47:e4:
a2:ac:46:6a:8d:1d:d4:14:24:4e:d1:4b:84:13:2c:10:aa:d9:
18:81:3f:14:01:41:33:c3:be:97:b7:3c:12:b1:57:a7:f8:5b:
e7:e8:60:60:fe:fe:06:a1:b1:4e:4f:01:b7:27:ae:46:b1:56:
1e:b5:b8:c5:98:f0:88:7a:5e:50:b9:b6:46:6d:28:12:92:12:
eb:57:d6:77:8d:30:74:80:47:98:5c:b7:e5:93:1a:e0:34:3d:
0e:10:b9:68:f6:9c:b7:df:85:f9:92:91:fa:26:c9:60:10:be:
1c:5b:e2:87:81:af:73:d5:86:81:5a:28:4a:6f:2a:92:d0:db:
d8:e3:c5:13:0b:60:3c:f1:e5:37:6b:35:79:8c:42:bb:b5:d4:
7f:aa:3e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:26:33 2026 by rpki-client