Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/lYZdNzdD_H0i9nzf5pcbfOq9Nic.roa
File: lYZdNzdD_H0i9nzf5pcbfOq9Nic.roa (raw, json)
Hash identifier: S/KAeHrzY3Tolgq96ndZgRYXss+UCkF1Oh+zy6x0x9I=
Subject key identifier: 95:86:5D:37:37:43:FC:7D:22:F6:7C:DF:E6:97:1B:7C:EA:BD:36:27
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 019F83D61B4C97724DDD9A18972D1B6CC6B8
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/lYZdNzdD_H0i9nzf5pcbfOq9Nic.roa
Signing time: Tue 21 Jul 2026 08:41:14 +0000
ROA not before: Tue 21 Jul 2026 08:41:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20548
IP address blocks: 185.38.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:d6:1b:4c:97:72:4d:dd:9a:18:97:2d:1b:6c:c6:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Jul 21 08:41:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95865d373743fc7d22f67cdfe6971b7ceabd3627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0e:ba:ef:d3:8e:c2:97:1b:1c:ce:70:b7:68:
d9:17:79:19:f1:ec:08:15:52:91:1b:ff:c5:b0:48:
cc:44:a2:3d:51:90:04:c9:a0:43:47:ce:ad:99:67:
6e:61:52:26:64:a6:6c:88:7f:45:26:13:f8:40:0f:
3f:d5:53:dd:dc:e5:cc:49:ec:90:54:6f:d5:1b:12:
3c:4d:2d:04:07:9a:c0:2c:cf:8d:69:f7:1b:13:c7:
c9:d3:f9:d4:7a:cd:b2:c6:50:c5:9a:82:b4:24:e6:
0d:80:04:48:7d:08:06:ce:0b:93:86:96:8e:13:27:
e2:3e:35:33:a9:30:a5:82:cd:82:5c:a9:65:0f:e4:
02:09:a3:6f:37:b7:ef:ab:b6:a0:dd:fa:71:f0:ea:
62:ad:cc:08:0d:dc:e1:9f:1d:40:91:fc:f5:98:52:
87:56:91:2f:ce:bf:12:a7:fa:44:58:2a:f3:1b:ce:
4b:4c:c8:ad:e1:48:16:86:86:fe:ee:9a:c4:36:75:
e8:25:b9:c2:53:27:60:a7:f2:97:0a:4a:c2:5e:a2:
ff:f8:1b:9b:4d:65:4b:1d:20:8b:ea:61:ae:7f:bc:
70:aa:82:3a:02:69:1a:34:13:41:5e:8f:8d:2c:3e:
6c:8f:23:75:10:1c:44:91:b5:56:b1:c1:09:0e:2a:
a9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:86:5D:37:37:43:FC:7D:22:F6:7C:DF:E6:97:1B:7C:EA:BD:36:27
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/lYZdNzdD_H0i9nzf5pcbfOq9Nic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.56.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:2f:ab:94:b4:2f:c6:f9:b5:06:84:ab:b7:12:e0:3b:5b:b6:
ae:5f:36:d4:40:b4:42:3e:bd:6e:dd:e1:b7:76:81:ab:fe:20:
72:66:ed:0a:12:e5:00:c9:c5:9b:1c:d3:33:28:d2:e6:ea:de:
59:6e:5a:26:44:a8:3e:19:bf:c3:f4:98:ba:e6:9b:5e:e4:f0:
0a:aa:e1:6d:02:bc:48:45:37:b8:02:6c:6a:b3:a5:72:94:15:
a4:09:63:06:ff:af:49:4e:b2:36:63:94:7c:ca:6e:26:57:68:
c8:00:44:a1:45:f0:6a:e2:9c:90:19:89:93:d3:de:53:13:33:
4a:17:bf:93:d7:71:27:4a:f0:48:fd:7b:00:ae:13:ea:4c:1f:
45:89:b5:02:98:e4:8d:3f:c3:e9:f8:dc:99:b2:83:74:06:b2:
9f:a4:59:9c:7f:ee:73:90:8a:ab:89:0e:19:46:0a:fa:90:fd:
36:ab:4b:02:df:e7:f3:89:97:37:87:70:d7:c2:92:22:79:b8:
ba:f5:6d:9c:25:a8:59:bd:40:f1:c6:6d:72:49:35:8e:be:de:
9e:04:e2:11:9f:01:54:b6:9a:02:0c:c1:60:97:cb:56:9b:32:
5d:24:40:58:80:47:64:41:f7:cd:a1:c3:44:ee:c3:54:e4:dd:
cb:16:6d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:35 2026 by rpki-client