Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/y_GHTNphB6VXu3dN-UfACI68FL8.roa
File: y_GHTNphB6VXu3dN-UfACI68FL8.roa (raw, json)
Hash identifier: aBtEp4PJxTg/q3AsHF+LC/HspOb/N1nR0siSD7lW2h8=
Subject key identifier: CB:F1:87:4C:DA:61:07:A5:57:BB:77:4D:F9:47:C0:08:8E:BC:14:BF
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 019FB7C8C5A58CDDC4633726565F850EC5EF
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/y_GHTNphB6VXu3dN-UfACI68FL8.roa
Signing time: Fri 31 Jul 2026 10:46:56 +0000
ROA not before: Fri 31 Jul 2026 10:46:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50340
IP address blocks: 85.142.144.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b7:c8:c5:a5:8c:dd:c4:63:37:26:56:5f:85:0e:c5:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jul 31 10:46:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cbf1874cda6107a557bb774df947c0088ebc14bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d5:aa:fb:ce:d0:8d:5b:7c:e2:c6:a0:1c:ea:
ce:64:0f:64:ff:2e:06:b6:64:3a:51:cb:64:47:5e:
73:0a:09:dc:d9:23:ea:13:30:b2:21:af:0e:00:a8:
16:a9:6f:d4:57:b5:df:da:03:42:85:04:9f:cd:79:
0e:60:ae:3d:03:ae:8c:f8:e5:12:7a:1d:71:df:61:
22:53:a9:f4:66:0a:ac:69:fb:5b:ee:0d:7b:d2:ee:
99:7e:80:75:f7:b8:c9:3d:32:f9:9e:a0:d1:9c:01:
73:2c:c5:ec:6b:fe:81:e8:89:a4:1d:4f:5a:67:30:
19:85:58:cd:cb:6c:75:75:a9:f3:9a:44:bd:4f:76:
a3:00:a9:b3:5e:5a:80:f6:51:73:02:c8:88:e7:f1:
4c:ce:51:ed:67:31:80:2a:6e:20:bc:6a:07:f8:56:
72:28:e0:11:4a:7f:72:12:30:f7:f0:55:4a:93:92:
39:af:ed:19:e7:08:a4:16:3c:d4:28:61:07:ee:27:
08:be:4d:d2:35:8b:1d:bb:b5:99:a7:54:0a:c2:15:
44:2c:e8:69:c2:ff:dc:c0:1d:cf:03:52:54:4b:fc:
7b:0d:fa:7e:a0:f6:50:da:f3:ab:e9:6c:18:ae:3c:
9d:a0:fc:6b:38:67:e5:f8:00:d5:87:aa:95:03:50:
be:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F1:87:4C:DA:61:07:A5:57:BB:77:4D:F9:47:C0:08:8E:BC:14:BF
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/y_GHTNphB6VXu3dN-UfACI68FL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.142.144.0/23
Signature Algorithm: sha256WithRSAEncryption
60:ef:fc:a2:bd:ed:91:44:bd:cf:90:7a:b9:3b:d6:ae:95:55:
8c:be:04:39:52:5a:69:d8:1b:7b:7e:b2:b2:6a:a0:ae:34:a3:
0a:99:09:e0:5b:b6:6d:f4:35:68:4b:e5:83:f4:d0:f7:c1:f4:
89:b6:d1:ec:1b:6e:b0:53:63:38:35:0e:7c:52:2e:fb:f8:d0:
cc:8e:87:92:74:19:96:1f:41:a2:57:9c:85:5f:1b:fe:62:ac:
86:ed:cf:d1:58:9d:47:bb:26:9a:db:dd:41:2e:3d:4d:2c:93:
59:13:6a:7a:6a:10:46:c8:7d:85:4f:87:6c:92:ea:b5:70:4a:
38:cf:bb:d3:4f:62:3e:17:f7:54:16:69:83:a3:ef:12:ec:ec:
4e:4d:b5:17:46:37:ec:4a:e3:df:31:ae:5b:38:6c:2b:74:c8:
60:09:6a:12:53:93:7a:70:f5:5c:d1:ee:dc:f3:17:65:88:68:
e9:ec:e8:60:7c:f1:c2:b5:f3:22:e5:56:5d:58:51:43:e3:83:
fa:d4:c7:55:6f:e2:a1:3e:ff:e0:0f:3f:9f:56:2d:02:26:2d:
3a:ee:40:6d:93:11:bc:5d:9b:25:df:bd:43:61:79:07:92:ed:
06:f5:66:ad:e9:0a:c9:c0:a2:2a:5d:e6:6a:30:62:81:66:c7:
7a:75:ad:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:31:27 2026 by rpki-client