Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/YN2cQdjx8MfN4SpkIZWHdTD1gDo.roa
File: YN2cQdjx8MfN4SpkIZWHdTD1gDo.roa (raw, json)
Hash identifier: O+9/V5QrptcdWsyQKkyNmQaV+rxkd0ZkMWeazSDlkK0=
Subject key identifier: 60:DD:9C:41:D8:F1:F0:C7:CD:E1:2A:64:21:95:87:75:30:F5:80:3A
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019FC8B50BD4CEB72B25D0886BC42AA143AB
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/YN2cQdjx8MfN4SpkIZWHdTD1gDo.roa
Signing time: Mon 03 Aug 2026 17:38:55 +0000
ROA not before: Mon 03 Aug 2026 17:38:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58232
IP address blocks: 185.113.10.0/24 maxlen: 24
195.254.165.0/24 maxlen: 24
2a05:9080:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c8:b5:0b:d4:ce:b7:2b:25:d0:88:6b:c4:2a:a1:43:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Aug 3 17:38:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=60dd9c41d8f1f0c7cde12a642195877530f5803a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ce:ba:2c:ed:5e:93:28:09:80:70:7d:7a:46:
77:10:73:11:af:a0:07:25:83:e5:53:7e:6b:6f:f7:
44:46:93:a5:47:2a:02:8b:89:e2:47:ef:51:0f:be:
50:29:3e:15:a2:36:ab:4b:bc:52:8c:02:3c:09:ea:
b8:d9:1d:2b:66:58:53:9f:d9:99:92:2c:b4:9a:5d:
c1:32:59:cf:e4:b2:5b:b1:2e:40:d0:1d:a0:2a:ce:
0f:72:6d:ec:dd:d3:88:e7:42:f0:2f:32:af:ac:cf:
db:3a:00:4b:58:8e:17:62:d9:d3:98:0a:0d:5a:5d:
16:5f:44:14:dd:a4:25:a7:eb:63:6a:8c:f3:02:b8:
c0:8c:e2:31:08:a6:6b:e4:2e:81:97:d5:04:a8:ed:
5d:31:e9:b3:3c:f6:aa:ba:ad:a5:93:ad:e8:b5:91:
ff:59:b9:9b:45:84:aa:4d:08:a2:2a:b6:f8:32:0b:
42:57:81:81:63:86:40:62:cd:43:24:0c:18:d3:ea:
9b:d6:b6:25:e8:6c:9e:51:ee:2c:f0:e6:3f:b1:80:
63:99:1c:0c:ce:7e:ac:1a:22:06:53:ca:14:4e:46:
38:ef:da:8b:62:c5:0e:01:94:25:58:e4:96:a9:53:
89:0f:8a:16:32:f5:d1:08:99:b3:91:96:a8:4b:1a:
68:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DD:9C:41:D8:F1:F0:C7:CD:E1:2A:64:21:95:87:75:30:F5:80:3A
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/YN2cQdjx8MfN4SpkIZWHdTD1gDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.10.0/24
195.254.165.0/24
IPv6:
2a05:9080:5::/48
Signature Algorithm: sha256WithRSAEncryption
a8:f0:30:d4:63:ef:ea:7a:6e:21:24:4d:a9:e7:e6:73:d5:8b:
6c:7e:a3:c7:35:bc:16:eb:aa:09:49:75:40:fa:ae:5d:7f:e5:
03:11:47:c0:73:15:f6:e1:da:e2:51:04:bc:ae:61:6e:28:6e:
23:70:23:77:60:14:1b:45:3e:0f:be:1c:72:dd:4a:d2:09:d4:
bb:03:d8:f0:88:4e:8b:f3:b3:9c:71:be:28:f4:ee:78:9b:57:
ff:f2:e4:15:69:2b:c9:11:8e:c8:a3:95:d4:b0:60:98:5f:fa:
8c:96:7c:22:e0:a9:f7:8b:6e:1f:11:0e:f6:39:72:2e:37:81:
7c:52:4b:4b:ba:df:1e:7c:15:7b:61:82:4f:97:00:92:93:b6:
5b:8d:e7:39:f9:e5:41:16:84:38:17:e2:4d:3e:58:91:6e:9a:
78:f8:93:f7:72:a9:6e:8c:2b:f9:33:2d:ee:1e:b4:69:dc:ee:
d5:79:ea:29:e3:3e:25:49:5d:15:a1:93:53:64:fa:09:29:67:
d6:b4:dd:dc:6b:b9:a0:63:9b:3b:43:36:4f:64:f7:31:d5:cb:
05:43:b0:45:f8:17:75:26:dd:a6:9c:0d:ca:56:8d:70:68:99:
2e:1e:4d:be:47:cb:c2:d0:16:77:78:6b:8e:95:40:01:45:be:
5f:12:6d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 11:30:25 2026 by rpki-client