Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/Y4qxVnrY3JHIeIgj-lsuUkA23yA.roa
File: Y4qxVnrY3JHIeIgj-lsuUkA23yA.roa (raw, json)
Hash identifier: q3XQFBQXn3PG4gcvTO16GaY9jmJY+OG/8KHvySDHAaE=
Subject key identifier: 63:8A:B1:56:7A:D8:DC:91:C8:78:88:23:FA:5B:2E:52:40:36:DF:20
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 01A014495F1C6820935DC07D4EAADED20940
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/Y4qxVnrY3JHIeIgj-lsuUkA23yA.roa
Signing time: Tue 18 Aug 2026 09:52:27 +0000
ROA not before: Tue 18 Aug 2026 09:52:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142463
IP address blocks: 89.167.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:14:49:5f:1c:68:20:93:5d:c0:7d:4e:aa:de:d2:09:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Aug 18 09:52:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=638ab1567ad8dc91c8788823fa5b2e524036df20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:90:b8:05:ae:6a:83:16:e2:87:72:ff:f0:65:
3b:16:e3:32:ff:51:65:11:c6:ee:44:c1:3e:e2:0a:
1a:37:6b:5b:2b:ef:98:e9:e4:54:5b:27:fc:70:6c:
95:52:d8:1f:c6:a7:d0:e7:8b:70:5e:b4:d6:5f:c0:
53:6c:31:94:46:69:0b:64:4f:5c:1f:66:06:96:a8:
9e:cf:20:1b:3a:10:40:92:ba:09:b1:a4:5f:38:7e:
9b:1e:2a:66:57:af:17:43:0e:1f:ba:87:a6:fe:1b:
d2:ed:2d:86:1a:3c:54:c2:14:51:45:5e:1d:5f:90:
71:1d:fe:e2:91:9c:f9:af:55:56:47:b7:40:03:96:
5d:7e:d8:dd:83:cd:31:fd:32:5e:34:fd:1c:6d:ec:
d5:45:8f:dd:a8:97:3a:3c:5e:55:a7:7f:40:fe:9f:
9a:16:b4:50:fe:bf:00:f5:47:47:bc:2c:0a:af:04:
20:f6:ad:03:eb:9d:d7:23:d2:98:55:da:32:57:37:
08:c3:88:c1:b2:34:5d:66:be:53:04:06:0c:d7:f6:
5e:bc:e2:7a:30:c9:15:7d:32:29:58:93:97:6d:5b:
ed:77:db:c3:75:32:44:4c:95:1e:46:86:2b:32:28:
6c:ca:c9:ab:e0:d0:e9:26:45:c6:af:04:20:d1:2f:
3e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8A:B1:56:7A:D8:DC:91:C8:78:88:23:FA:5B:2E:52:40:36:DF:20
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/Y4qxVnrY3JHIeIgj-lsuUkA23yA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.167.165.0/24
Signature Algorithm: sha256WithRSAEncryption
85:be:06:70:8e:e1:97:4a:64:18:a1:06:bf:18:2b:70:37:03:
f1:97:17:ac:d7:1e:62:e5:93:40:62:3a:86:b2:9f:9c:6a:c0:
3d:c8:f0:9f:7f:32:05:20:07:b9:ab:b9:00:97:79:21:0d:61:
7a:ab:21:5f:bc:08:bb:72:eb:52:e9:6a:c7:9d:ce:2e:fd:bb:
60:82:8e:75:ea:33:34:96:31:dd:a5:36:b6:a5:14:be:62:ac:
3f:43:68:4d:4d:2b:c1:8b:b0:5c:f7:bd:fd:c7:26:27:8f:f1:
94:f1:37:70:2f:72:97:47:75:7c:9d:42:eb:11:22:31:3b:67:
ed:51:c7:18:b1:3c:7f:50:eb:1f:6b:04:ce:3e:6f:ad:97:d4:
db:bd:9f:20:f5:29:9c:04:c9:58:79:51:79:6c:6d:60:e2:38:
c8:5d:26:b8:ab:97:53:17:8a:3c:1e:15:34:3c:a2:5a:75:44:
2f:2c:0d:21:e8:74:01:2d:8b:38:5e:f1:1f:89:5c:5d:e2:74:
70:15:6d:df:2e:fd:61:54:ac:74:27:d5:63:bc:4a:f2:02:14:
0c:22:e7:4c:9f:fd:9b:1d:c8:d8:43:ba:86:10:d3:53:69:08:
2c:b9:be:a3:76:57:c9:a8:ab:b6:ca:3e:b6:0c:eb:99:7b:1a:
08:bd:ba:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:35:41 2026 by rpki-client