Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1Yv_I0T2zrGbsNveZDG9XUY70TI.roa
File: 1Yv_I0T2zrGbsNveZDG9XUY70TI.roa (raw, json)
Hash identifier: /yoK3U76NoRmEAxB5K0WUi7y+wnXoW+ZaaqTXp5HZ2g=
Subject key identifier: D5:8B:FF:23:44:F6:CE:B1:9B:B0:DB:DE:64:31:BD:5D:46:3B:D1:32
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019CAF3EB9EC4AE3AF706B96C4690CBE1FF3
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1Yv_I0T2zrGbsNveZDG9XUY70TI.roa
Signing time: Mon 02 Mar 2026 15:50:49 +0000
ROA not before: Mon 02 Mar 2026 15:50:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26042
IP address blocks: 194.76.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 00:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:3e:b9:ec:4a:e3:af:70:6b:96:c4:69:0c:be:1f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 2 15:50:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d58bff2344f6ceb19bb0dbde6431bd5d463bd132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:84:6f:81:c5:48:b9:80:b1:06:28:f5:7b:b9:
02:74:a9:0e:df:f6:ef:d8:6a:66:4c:2e:e0:39:2b:
a5:2e:a6:30:28:90:8e:ae:d2:4c:31:f3:9b:88:22:
ed:6a:39:c5:1e:da:a5:f7:db:96:26:71:08:23:57:
1c:4e:2f:c5:ff:44:d0:db:33:84:1b:4b:10:34:30:
76:29:df:eb:ab:a2:90:60:02:d3:44:e8:f2:72:6f:
bd:ab:f2:90:b1:e6:c6:a5:36:53:84:3f:51:49:e3:
e5:88:c3:27:7b:ae:e9:7b:be:de:8d:97:9c:d5:a5:
a7:5d:82:4d:f7:25:19:30:22:c9:ea:6a:d3:26:ad:
0e:5a:bc:2d:11:11:cd:33:fa:38:4a:e9:16:d7:3d:
b9:2a:24:71:27:4d:e9:90:a6:8a:00:e7:e0:1e:d0:
3f:ca:cf:4a:ed:f2:86:39:da:39:c1:02:fa:f1:39:
4d:dc:9a:7a:65:12:b8:3d:a6:cc:d0:df:44:f2:e2:
8c:18:4b:07:db:9d:5d:11:99:2f:e2:64:37:c2:02:
fe:14:e0:e7:9f:b7:16:0d:a6:54:41:80:a0:b1:9c:
e4:b2:c8:2d:18:0d:15:3a:af:cc:22:f0:51:5c:e5:
5e:01:84:3e:b0:66:b9:72:f0:b4:f2:f9:ff:99:7b:
53:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8B:FF:23:44:F6:CE:B1:9B:B0:DB:DE:64:31:BD:5D:46:3B:D1:32
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1Yv_I0T2zrGbsNveZDG9XUY70TI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.168.0/24
Signature Algorithm: sha256WithRSAEncryption
37:3e:3e:b0:b4:2e:88:40:3a:bf:b5:53:de:c1:3d:c2:34:20:
0d:6d:d6:fb:16:47:2b:8b:a1:6d:9d:4d:a0:a3:a8:22:2a:99:
4d:ff:9e:9c:3a:57:e7:80:52:7f:37:33:74:e3:78:87:4c:ff:
ab:fb:b7:04:6f:a9:a8:1a:1d:ff:19:11:49:ea:14:e9:61:fe:
5c:71:46:d6:59:2b:8d:30:09:0c:a5:87:a4:82:a3:3a:42:15:
58:84:83:11:ef:6b:af:fd:f5:13:ee:82:b2:61:8c:c1:8e:7c:
21:72:b0:b6:f9:0a:ea:e6:d7:af:20:94:f1:d6:d0:0c:51:ce:
62:25:fe:5b:5d:29:78:cc:d7:06:01:21:32:9a:62:95:76:0b:
27:6e:32:91:b3:97:47:58:2b:db:da:d8:bc:e8:24:c3:63:0a:
7d:75:2a:39:89:9a:8a:fd:55:0a:7d:16:69:14:8d:d7:b2:33:
8c:13:42:40:ca:a3:9d:28:dd:38:7b:8f:10:d8:5f:9a:b8:1d:
58:f6:d2:8c:4e:b3:c7:98:c3:f6:98:fe:73:b5:50:aa:f4:89:
df:c5:50:24:d6:6f:bc:21:0a:4c:38:8f:10:19:d7:f4:42:7d:
49:bd:16:e5:fc:a8:47:e1:6d:3d:70:b1:2a:03:c5:6e:62:ce:
f9:73:a4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 09:31:58 2026 by rpki-client