Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/YsW_iJrRM22K5oTCI7JStmeQJQM.roa
File: YsW_iJrRM22K5oTCI7JStmeQJQM.roa (raw, json)
Hash identifier: 0eMTRO/95K3DHRM+wmq7Xccv8m0xJct1hPuY0b3ihiU=
Subject key identifier: 62:C5:BF:88:9A:D1:33:6D:8A:E6:84:C2:23:B2:52:B6:67:90:25:03
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 01A0211D5D92AFC83E96ED09A56F0AAE4ACE
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/YsW_iJrRM22K5oTCI7JStmeQJQM.roa
Signing time: Thu 20 Aug 2026 21:39:27 +0000
ROA not before: Thu 20 Aug 2026 21:39:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402384
IP address blocks: 212.32.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 14:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:21:1d:5d:92:af:c8:3e:96:ed:09:a5:6f:0a:ae:4a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Aug 20 21:39:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62c5bf889ad1336d8ae684c223b252b667902503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d8:e0:d8:07:b8:c6:a0:75:07:6f:50:6a:d1:
b7:3e:f2:00:f5:1b:34:39:c0:26:d2:5a:df:c6:b1:
a4:83:06:4d:83:c1:e1:d1:cf:cb:8a:f8:e5:ff:79:
22:5b:78:89:d6:9f:62:4c:5d:0e:c8:fb:3b:d5:a9:
e2:19:2d:8d:44:e8:0e:a4:22:20:ff:92:a3:24:95:
4c:a2:97:60:a6:18:3f:10:f5:4a:f6:f8:2f:1c:49:
44:00:f8:0e:18:2f:85:19:4f:05:83:f7:1a:09:34:
14:47:2c:3a:1e:51:9c:66:f9:f7:3c:c9:86:4c:a7:
7c:13:95:a3:21:20:83:c0:f3:ec:5e:a5:5e:fe:a9:
68:10:c5:80:2a:bf:c3:62:76:df:63:7e:89:ea:8d:
12:4b:60:be:7b:67:3f:ed:31:83:34:df:cb:53:0e:
25:6f:8c:c0:79:56:be:1d:f5:ce:be:3c:dc:7e:bf:
ec:8e:f8:4c:b0:e2:22:52:e3:00:45:ae:47:a5:e8:
6f:b5:c8:6c:fe:dd:86:e3:82:e8:1c:e4:50:99:d3:
fa:f4:de:a1:e5:20:05:ca:bd:c1:76:e5:b1:fd:e0:
9d:2b:d6:26:8b:df:8d:13:8e:db:39:1c:11:5f:43:
1a:cb:25:90:5a:76:36:1a:9f:4a:3f:0c:d8:5e:cb:
e5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C5:BF:88:9A:D1:33:6D:8A:E6:84:C2:23:B2:52:B6:67:90:25:03
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/YsW_iJrRM22K5oTCI7JStmeQJQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.32.96.0/19
Signature Algorithm: sha256WithRSAEncryption
5f:7a:a4:1d:d6:8c:c4:b6:ed:61:34:fc:41:b0:37:bf:ab:f9:
eb:51:2e:81:f2:0c:17:92:99:91:fd:10:22:36:69:c8:09:b8:
9a:45:8d:c7:40:f8:77:a8:1a:87:4c:be:b5:78:4d:2e:9e:40:
c4:ee:e7:c3:db:08:b7:cc:0b:21:f4:63:b1:1d:30:e1:cc:76:
74:b4:b7:af:80:18:ac:ad:c3:5e:7c:eb:44:66:c0:f6:94:3a:
ff:1f:2d:15:ea:4d:86:e6:48:84:6e:9e:f8:7d:24:76:2e:e2:
e9:20:78:d0:7e:58:c1:fe:9f:ff:dd:2a:38:e5:60:bd:50:96:
75:29:20:3a:ec:4d:7a:a7:d8:b8:5f:da:9d:c6:b9:6f:7e:0e:
7a:86:6b:d8:5d:fb:91:6c:af:cf:65:5c:20:0f:c9:75:f7:db:
07:64:8d:82:08:1a:77:53:a6:d9:07:1e:c4:04:38:84:bf:b1:
f2:20:6b:0e:4e:3d:5f:16:9a:02:b0:f7:29:c9:94:a5:f7:9e:
38:ce:7c:e4:9d:91:47:3c:40:60:00:d0:11:6a:71:1c:97:e8:
89:b3:4e:7a:c6:ae:33:89:c2:46:45:59:e4:bb:46:60:c6:dd:
16:36:9a:25:f5:83:2d:cd:15:2b:1d:dd:4e:4a:17:fe:b4:fe:
8d:86:f0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 19:35:48 2026 by rpki-client