Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/Y89C32NzpkA3PQGSAOSpiB1CVZA.roa
File: Y89C32NzpkA3PQGSAOSpiB1CVZA.roa (raw, json)
Hash identifier: A3b0H1rBdmLPnm3DdKs/p6L4k7I984tyefEWdXhVLr0=
Subject key identifier: 63:CF:42:DF:63:73:A6:40:37:3D:01:92:00:E4:A9:88:1D:42:55:90
Certificate issuer: /CN=df0198a7b3afdcdd7003562a0871878e238760ad
Certificate serial: 019F8405D04154BB6EC2E03F6139BCE23644
Authority key identifier: DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/Y89C32NzpkA3PQGSAOSpiB1CVZA.roa
Signing time: Tue 21 Jul 2026 09:33:21 +0000
ROA not before: Tue 21 Jul 2026 09:33:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1299
IP address blocks: 80.244.96.0/20 maxlen: 24
2a02:ab80::/28 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:05:d0:41:54:bb:6e:c2:e0:3f:61:39:bc:e2:36:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0198a7b3afdcdd7003562a0871878e238760ad
Validity
Not Before: Jul 21 09:33:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63cf42df6373a640373d019200e4a9881d425590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:85:3e:49:d8:a2:18:ec:95:4c:19:9c:99:c5:
cb:35:06:8e:20:b8:a2:7e:bb:93:f9:26:7b:44:c5:
67:a5:62:b0:af:a9:26:14:cf:57:8c:ac:3a:cb:7f:
89:f9:58:ab:22:a6:51:1f:3c:44:e0:df:14:ce:7a:
a6:5f:4e:53:c2:be:37:88:04:15:5c:98:3a:00:a2:
ec:8a:ec:6f:68:23:cf:95:82:9e:bf:3f:af:1d:79:
e1:48:8b:b4:09:76:1d:fc:cb:da:32:17:9f:c9:28:
7c:49:fb:42:33:f3:a8:16:91:38:ee:c8:b3:5d:21:
15:ce:31:29:92:c8:d8:48:06:1d:56:a9:66:7c:4c:
f6:b4:f2:c9:b6:75:72:cb:22:ed:1c:0b:a4:83:24:
21:9d:35:ae:06:79:bf:23:19:29:39:fc:66:17:2d:
71:0c:48:34:b5:aa:b8:70:16:8b:cc:28:14:55:21:
cc:f6:3c:00:d3:03:12:0f:a7:ed:83:41:b0:aa:87:
1e:a2:24:df:a1:1d:cc:0c:9f:89:11:45:59:2a:17:
0a:17:29:f2:c4:20:66:dc:c9:ab:44:d0:05:00:e6:
ed:45:ae:94:36:24:d1:3a:f4:35:20:05:79:1d:ad:
5c:a5:0f:60:6b:bb:fa:90:0d:b4:ec:6c:34:05:23:
c0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CF:42:DF:63:73:A6:40:37:3D:01:92:00:E4:A9:88:1D:42:55:90
X509v3 Authority Key Identifier:
keyid:DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/Y89C32NzpkA3PQGSAOSpiB1CVZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.96.0/20
IPv6:
2a02:ab80::/28
Signature Algorithm: sha256WithRSAEncryption
7b:d8:8b:1a:77:13:99:34:81:c6:21:db:0e:2d:f7:c1:35:12:
7a:5c:2d:ef:61:7a:f0:bf:3a:51:23:70:ed:15:9d:d9:04:2b:
04:09:8a:9c:41:a4:5c:40:7e:82:45:cd:39:11:80:86:80:3a:
45:c4:80:d6:f7:14:29:04:db:b1:88:90:84:06:5a:5e:10:4b:
c5:40:e1:fc:be:03:31:d3:28:58:93:7d:b3:5c:6e:09:34:46:
cd:f1:0a:9f:8c:05:64:59:6c:bd:e3:f8:5c:d3:ca:0b:07:ac:
f6:2b:f1:7d:eb:39:28:d1:11:cc:c4:b6:a3:53:f0:47:d7:e1:
9d:ab:fd:1a:40:3a:eb:67:2b:2c:96:5e:83:1c:58:3c:41:75:
e7:e3:c8:e1:c8:3c:c2:e8:33:7a:e8:ad:e1:ae:79:e8:eb:f6:
d9:12:65:2d:e0:01:48:12:df:17:6d:02:d2:b0:5c:49:90:c9:
ef:34:d0:88:13:68:c2:22:79:61:17:d4:3a:b4:e1:41:98:c2:
2a:d6:f1:9a:8d:b2:35:bc:9c:4d:0b:07:de:2e:cc:91:78:f1:
25:43:e2:96:28:50:5b:47:12:d6:b9:af:86:92:ac:dd:ed:24:
82:3e:e8:48:bb:4a:e1:59:76:b4:34:6b:26:6b:54:1f:87:ab:
aa:6d:19:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:58 2026 by rpki-client