Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/yv4qQ4kbMxDaChIWUXDIpdTJyA4.roa
File: yv4qQ4kbMxDaChIWUXDIpdTJyA4.roa (raw, json)
Hash identifier: 7MOA0YYmqmT4L3Npgm7U4y5ee3LRGCAg/F/T+5uuvBA=
Subject key identifier: CA:FE:2A:43:89:1B:33:10:DA:0A:12:16:51:70:C8:A5:D4:C9:C8:0E
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 01A15AA3EC1244599EBA96345922DA001090
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/yv4qQ4kbMxDaChIWUXDIpdTJyA4.roa
Signing time: Tue 20 Oct 2026 18:47:34 +0000
ROA not before: Tue 20 Oct 2026 18:47:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219075
IP address blocks: 80.246.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:a3:ec:12:44:59:9e:ba:96:34:59:22:da:00:10:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Oct 20 18:47:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cafe2a43891b3310da0a12165170c8a5d4c9c80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ed:3e:e5:3e:a1:01:0e:7c:44:22:14:71:77:
8d:99:e8:c1:63:38:72:f8:06:7d:e6:29:bf:9a:0e:
f9:e8:7f:15:f4:5f:83:1c:96:70:55:b8:0f:0a:7c:
cf:4b:e0:fd:90:5c:4e:4c:81:4f:82:d5:7a:12:bc:
1f:38:57:fc:3a:a2:51:ee:40:2e:21:43:3d:4d:d1:
89:17:35:39:d9:27:1a:fa:78:0a:a1:37:dc:7e:f4:
6d:0e:30:29:f8:e3:39:b7:c5:20:29:04:0b:e6:79:
b0:c2:36:22:67:4e:db:92:40:b1:c4:0e:e9:52:29:
5e:82:b0:cd:aa:22:a1:ab:c0:e1:d4:04:6a:49:2b:
07:8b:d9:4a:83:89:e0:c7:4c:ce:1c:27:ac:c4:00:
e4:22:cc:69:b1:5e:91:49:ea:a1:61:d2:6f:96:ef:
ee:32:7c:2e:c9:c5:88:4e:72:99:7b:9e:f6:a7:b6:
e7:37:46:41:7e:64:80:23:c6:ce:fa:a2:5c:78:30:
0e:f9:58:36:95:40:e7:78:c2:c7:c0:05:89:58:51:
0f:57:03:29:e0:45:46:57:ae:01:b5:c7:83:42:47:
6a:71:1e:c7:06:94:e6:13:90:f7:08:d6:04:5b:b5:
62:c2:33:ed:8d:2a:44:09:85:50:ff:ef:69:fc:85:
56:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FE:2A:43:89:1B:33:10:DA:0A:12:16:51:70:C8:A5:D4:C9:C8:0E
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/yv4qQ4kbMxDaChIWUXDIpdTJyA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.246.231.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:c7:42:4c:81:2b:cf:ea:f5:07:5a:f9:68:bb:9b:a0:bb:05:
0e:73:e2:bf:3e:e4:dd:8c:bf:2d:b7:f7:e2:3a:89:2a:2c:49:
c6:74:2a:88:5b:0f:d7:95:7f:9b:74:3c:a3:b5:44:98:ac:c5:
9b:07:6c:a7:f3:cd:36:c7:07:07:57:4d:dc:c9:d1:11:ce:0c:
fc:45:04:c1:fe:e3:a8:c3:79:4e:6a:7b:3e:dc:dd:07:7d:9a:
30:03:57:00:7b:06:07:b6:43:45:2e:59:67:23:7b:9e:c4:3d:
bf:24:ec:dc:8f:32:58:ee:e4:0c:c9:12:ca:fe:94:bd:a8:f8:
3a:9a:1a:90:c0:ec:e8:84:37:c8:4f:37:b9:55:60:2e:fe:36:
1e:37:2d:a1:1e:a7:23:83:bb:b2:cf:bf:15:ba:37:ce:d0:5b:
19:41:26:8f:a7:27:df:0d:31:bf:25:aa:7d:09:6e:f3:06:38:
a1:e9:7b:69:7a:e1:17:a9:9f:9a:70:54:b4:6d:f8:cc:2f:18:
b8:86:5f:6b:ad:86:36:d6:53:91:32:11:21:41:4d:ea:8f:0f:
f8:23:3a:eb:d1:50:ab:b8:72:bb:e0:fb:89:5b:5f:42:de:6e:
ff:0d:11:11:c5:af:b2:59:eb:33:05:8f:7e:91:53:e0:72:9f:
37:03:fa:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:41:40 2026 by rpki-client