Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1-ytQig1OmM6cKwvhp3Jo-UFVRt4.roa
File: 1-ytQig1OmM6cKwvhp3Jo-UFVRt4.roa (raw, json)
Hash identifier: bGeoGxh6b+qcX3NaMCccVm6SPDCjZ01B2LYC1zPTMLQ=
Subject key identifier: FB:2B:50:8A:0D:4E:98:CE:9C:2B:0B:E1:A7:72:68:F9:41:55:46:DE
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A0D7FE30C48565CC59ADC8C1155413A5BE
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1-ytQig1OmM6cKwvhp3Jo-UFVRt4.roa
Signing time: Fri 25 Sep 2026 09:55:55 +0000
ROA not before: Fri 25 Sep 2026 09:55:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56655
IP address blocks: 45.89.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:fe:30:c4:85:65:cc:59:ad:c8:c1:15:54:13:a5:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 25 09:55:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb2b508a0d4e98ce9c2b0be1a77268f9415546de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:61:60:0c:3c:f2:4b:ab:4c:8e:ed:43:1d:e0:
67:12:34:2c:5a:26:35:fd:d1:f2:fa:e7:00:65:27:
b4:1d:ce:d9:a4:b7:33:7f:ee:aa:c6:7e:2a:a7:ac:
9c:5c:ef:e6:98:97:f8:96:57:07:0d:cd:ca:ea:85:
92:3d:b6:27:45:7f:72:a0:22:8c:30:6a:46:6e:82:
18:46:75:d4:62:49:53:05:41:1b:e5:f3:8e:fb:d5:
75:87:59:4e:7c:da:ee:3b:60:b9:c1:b7:69:88:b3:
0f:b5:e5:e7:79:7e:21:fc:55:c9:2d:58:10:0b:4f:
af:16:92:b2:c4:27:e1:1c:2b:8f:99:92:8d:67:d9:
26:cd:b4:48:bf:4d:80:d5:a7:a4:8a:fb:7a:d3:6d:
8d:9c:56:75:f4:02:e8:87:c2:02:75:2f:3a:26:27:
8d:78:a9:e8:f1:40:31:22:89:87:d2:4b:d3:c1:1b:
ab:c1:bd:37:e9:9b:1d:75:1b:ad:ff:5f:ae:a6:ca:
ed:fe:df:e3:e6:c4:e7:fd:0b:7e:07:8e:8b:a1:f1:
03:e7:f1:1f:ed:6e:76:54:72:70:4e:5b:7c:71:43:
4a:b7:f4:77:f1:4a:65:3c:d4:7d:53:00:4d:b3:e8:
89:0f:46:eb:b6:d0:63:8e:a0:5b:af:07:84:4a:f2:
57:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2B:50:8A:0D:4E:98:CE:9C:2B:0B:E1:A7:72:68:F9:41:55:46:DE
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1-ytQig1OmM6cKwvhp3Jo-UFVRt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.97.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:05:6b:6e:22:0c:6a:39:a9:1d:c5:7b:a2:44:79:e9:30:19:
75:a6:1b:b7:da:52:07:e4:07:67:de:30:93:12:9b:bf:b6:de:
a4:7a:3c:34:99:5c:ce:ff:18:b5:4e:2a:0e:8a:40:fb:ac:9e:
f4:2e:59:56:2a:16:91:df:02:e0:db:d4:44:d0:e4:89:27:48:
b4:8c:30:9e:a7:3e:71:66:4f:e7:45:0d:cb:76:e8:c7:01:04:
a9:07:c7:3c:dd:e7:28:25:cb:58:0b:36:55:d5:c8:2e:d9:b0:
30:3c:fb:9a:fc:a4:fa:db:78:4e:fa:cd:f1:62:16:5c:69:d0:
a2:18:be:2a:29:b7:bd:f4:69:60:fa:f0:cd:d5:9d:9c:10:53:
47:b6:a5:66:09:1e:a8:89:a0:0c:02:f0:d9:55:26:19:d6:d9:
f1:78:78:fd:85:c7:46:db:db:da:bf:31:8d:27:96:f3:e3:69:
37:89:77:aa:da:cc:7b:fe:a8:4f:fb:d7:9a:2a:95:39:b7:99:
d5:a3:16:d3:d9:8d:06:f4:23:cf:fc:29:61:94:76:f3:0b:89:
4f:14:b4:4e:a3:f3:77:eb:71:9d:fa:d5:87:a4:9f:eb:4d:12:
7b:cf:1b:2b:52:1b:48:f4:42:37:42:52:01:98:fd:99:fa:c0:
4a:d0:e2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:06:20 2026 by rpki-client