Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/yYOwtyKahcxZCOoytNIFiE-qAW8.roa
File: yYOwtyKahcxZCOoytNIFiE-qAW8.roa (raw, json)
Hash identifier: eofnDKszG901n4rKY8DsTQFASkhAGR/8+Zpt3ZNH6qA=
Subject key identifier: C9:83:B0:B7:22:9A:85:CC:59:08:EA:32:B4:D2:05:88:4F:AA:01:6F
Certificate issuer: /CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Certificate serial: 019FC259DA8AE6B269191E33CF3BC0E11846
Authority key identifier: 0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/yYOwtyKahcxZCOoytNIFiE-qAW8.roa
Signing time: Sun 02 Aug 2026 12:01:36 +0000
ROA not before: Sun 02 Aug 2026 12:01:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219245
IP address blocks: 185.70.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c2:59:da:8a:e6:b2:69:19:1e:33:cf:3b:c0:e1:18:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Validity
Not Before: Aug 2 12:01:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c983b0b7229a85cc5908ea32b4d205884faa016f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a5:fa:37:42:6f:3d:ba:81:7c:ca:a3:f6:ea:
59:52:22:4f:0c:18:d7:39:6a:14:2a:84:9e:2e:82:
ff:99:18:03:85:62:d9:19:a1:a1:a8:4f:0f:cd:f4:
59:c0:9a:7e:f9:8d:81:ee:0e:ed:fb:80:05:af:6e:
8e:40:f1:0e:f6:69:e6:a9:83:bf:e3:29:d4:f8:17:
8c:39:47:f4:3c:38:61:f3:26:a4:c6:9a:bc:04:70:
18:1a:70:e3:dc:c0:54:6c:30:44:be:1b:9d:60:fa:
7e:54:d0:39:07:40:0f:92:b6:22:68:fb:3b:45:de:
25:d1:e5:28:1f:68:b4:21:cd:9e:3c:c8:8e:5f:c6:
ac:06:f2:e3:8f:a2:59:bc:18:e4:41:c2:43:e0:21:
dc:46:18:e0:12:8e:e2:62:ec:f1:a5:49:e6:af:c9:
f3:d0:e2:1b:4d:4a:b9:5c:e2:bc:e6:65:e7:58:9c:
bf:0d:8f:c3:07:28:e2:6a:93:ab:01:8d:2a:4c:5a:
dc:fe:7a:f0:72:af:e5:a3:a6:27:16:e6:3d:b6:ae:
0a:21:ef:d3:86:ef:af:51:67:63:66:c0:22:c4:dc:
e8:fc:bf:1b:9f:23:ad:0a:78:5e:40:37:3e:f3:57:
ed:e9:9a:35:9b:ed:c8:70:42:77:ad:80:ef:40:bc:
e9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:83:B0:B7:22:9A:85:CC:59:08:EA:32:B4:D2:05:88:4F:AA:01:6F
X509v3 Authority Key Identifier:
keyid:0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/yYOwtyKahcxZCOoytNIFiE-qAW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.221.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:d0:ab:92:6c:37:7c:e5:b5:80:72:71:dc:d9:5a:d6:b4:c1:
91:93:64:c9:95:4a:7c:71:cc:5a:1e:9f:41:f8:66:a1:d0:d8:
74:93:b7:0a:f3:98:69:db:db:35:d8:9c:dd:03:ae:a0:be:95:
6e:6b:4a:0f:12:5c:a6:da:ae:21:29:a2:33:c7:34:32:c0:56:
52:43:66:7c:0e:87:12:73:7c:ef:67:3d:05:3d:c9:26:0a:a3:
b8:80:b1:23:9a:15:39:e8:2e:93:3f:b3:75:52:b1:60:95:d7:
ec:ec:66:f6:39:7d:e7:76:cc:99:b0:f1:13:d7:09:df:33:fc:
30:5d:8c:b9:94:5d:db:ac:ea:f5:9e:49:fb:bf:77:43:58:25:
75:7e:8f:da:66:96:46:6f:9f:ae:9d:0d:00:eb:5a:1e:a6:53:
fc:b6:d7:ed:9b:f8:6c:93:16:63:df:11:d8:64:bb:66:28:12:
06:07:9f:f9:15:59:1e:d7:7a:5a:d7:f0:19:5d:d4:bb:72:3e:
b6:c6:b9:91:6f:3e:d4:4d:d0:3f:f1:a7:e8:60:27:45:d4:5a:
84:43:5c:d7:d5:ba:45:a3:54:fe:41:34:4c:80:d7:57:1d:61:
90:d9:31:c5:0e:be:8c:d4:42:2a:a5:b9:8b:76:e6:a5:d6:c5:
6c:8a:53:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 14:55:16 2026 by rpki-client