Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/yQ0J2-PdwPToNtIhnOnDjLe8Qug.roa
File: yQ0J2-PdwPToNtIhnOnDjLe8Qug.roa (raw, json)
Hash identifier: 6LpZ4KgFMshrnFhPmVNsiVJHjgrcoENNbbiekTmoM4U=
Subject key identifier: C9:0D:09:DB:E3:DD:C0:F4:E8:36:D2:21:9C:E9:C3:8C:B7:BC:42:E8
Certificate issuer: /CN=889b73d4ce9453b7b431f92c46e429b8f6dc9a26
Certificate serial: 01A15A401FD5E90BCFCDCC6EC87ED6175F19
Authority key identifier: 88:9B:73:D4:CE:94:53:B7:B4:31:F9:2C:46:E4:29:B8:F6:DC:9A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJtz1M6UU7e0MfksRuQpuPbcmiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/yQ0J2-PdwPToNtIhnOnDjLe8Qug.roa
Signing time: Tue 20 Oct 2026 16:58:34 +0000
ROA not before: Tue 20 Oct 2026 16:58:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 146.247.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/iJtz1M6UU7e0MfksRuQpuPbcmiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/iJtz1M6UU7e0MfksRuQpuPbcmiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iJtz1M6UU7e0MfksRuQpuPbcmiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:40:1f:d5:e9:0b:cf:cd:cc:6e:c8:7e:d6:17:5f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=889b73d4ce9453b7b431f92c46e429b8f6dc9a26
Validity
Not Before: Oct 20 16:58:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c90d09dbe3ddc0f4e836d2219ce9c38cb7bc42e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3a:03:e1:0a:49:42:81:31:0e:45:63:e8:65:
1c:a8:a8:1a:7e:e8:05:d5:e7:c3:fc:bc:a6:5e:3d:
e6:f2:c7:2c:63:cb:64:2b:52:8b:aa:28:6a:ae:c0:
68:ef:ce:91:7c:5a:96:7d:54:60:57:7a:64:bc:26:
f8:73:af:bc:1c:fb:ee:30:6e:56:83:ef:73:1c:83:
bb:35:bc:c7:cb:62:8e:e5:e3:d2:f2:00:31:3b:b9:
82:a8:ae:25:af:bb:ba:40:cb:d5:9b:80:8b:2b:2e:
4e:05:c4:60:bb:f3:bf:c8:4a:1f:87:db:c5:bc:d6:
6f:19:33:37:93:6c:ba:80:73:97:d1:6d:e6:b4:44:
bd:3d:57:02:44:41:10:4c:64:72:a4:f9:8d:83:71:
ea:ee:f2:e6:bd:09:08:ae:a9:3b:a1:08:cf:3d:24:
02:79:7b:4c:b5:38:78:d3:1a:6b:a2:e6:e3:30:b3:
38:a3:5a:04:a2:73:3a:4b:01:51:14:34:a5:90:bd:
fd:ca:3d:a6:9b:9f:24:fa:4f:61:a3:c9:db:57:98:
fb:32:6c:03:93:bf:86:b7:3e:66:e7:65:82:3d:b9:
33:7e:19:b2:9d:46:cd:a2:01:fb:d0:71:7d:8d:97:
9e:49:44:f0:52:93:e3:b9:63:bf:a5:2c:2e:58:a5:
ff:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0D:09:DB:E3:DD:C0:F4:E8:36:D2:21:9C:E9:C3:8C:B7:BC:42:E8
X509v3 Authority Key Identifier:
keyid:88:9B:73:D4:CE:94:53:B7:B4:31:F9:2C:46:E4:29:B8:F6:DC:9A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJtz1M6UU7e0MfksRuQpuPbcmiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/yQ0J2-PdwPToNtIhnOnDjLe8Qug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/iJtz1M6UU7e0MfksRuQpuPbcmiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.40.0/21
Signature Algorithm: sha256WithRSAEncryption
5a:c4:c4:99:c3:ff:37:e0:f3:c5:06:ef:56:f2:d0:ca:92:ec:
e2:a5:9b:c0:2e:57:ab:d3:7c:23:62:11:95:c9:05:f3:2c:88:
81:3e:9d:7a:59:8c:15:30:c4:05:e3:b0:88:07:b5:fc:93:14:
56:7b:f5:6f:6f:fe:76:7e:f4:c5:07:04:54:52:a1:cc:40:7f:
f5:1d:e4:85:1d:f3:df:8e:fe:c2:d0:51:a6:21:2c:8e:20:bf:
f4:91:c4:3a:71:f0:67:0b:7c:52:83:df:3c:d9:71:45:18:3b:
35:2e:22:e9:cd:0e:bd:02:59:51:f5:06:b5:d6:13:89:13:2b:
c2:dd:aa:5c:35:3f:a2:98:42:64:4e:a5:ae:a9:fc:2f:ee:9e:
b3:77:f7:f0:4f:f5:84:06:37:9a:33:f2:a7:24:00:e0:67:c6:
06:fd:ac:61:c4:36:1e:22:12:c7:13:2a:1f:fc:19:09:7f:46:
3b:4e:87:4e:f4:83:fa:3d:1c:d9:bc:e5:f5:82:da:95:01:be:
7d:ca:dc:cd:3d:b5:f5:51:30:7e:ea:a0:47:e8:9d:bd:a2:9f:
88:06:f4:2b:cd:f3:1b:86:2e:bf:c2:f7:f5:9d:f3:5d:79:fa:
00:4a:5d:d7:00:c8:6c:42:bc:d1:61:5e:c7:b7:32:4b:7e:71:
1b:b3:aa:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 09:49:19 2026 by rpki-client