Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/t9UpHY-d3_13o0sqDEqrVoq4BcY.roa
File: t9UpHY-d3_13o0sqDEqrVoq4BcY.roa (raw, json)
Hash identifier: X1gZbsbS6ZcAm9J77lyJkfLLZUsYotxTIlPlynpWNdk=
Subject key identifier: B7:D5:29:1D:8F:9D:DF:FD:77:A3:4B:2A:0C:4A:AB:56:8A:B8:05:C6
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019D05951790CCEB68ACD90ECC7597D63A7F
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/t9UpHY-d3_13o0sqDEqrVoq4BcY.roa
Signing time: Thu 19 Mar 2026 10:12:30 +0000
ROA not before: Thu 19 Mar 2026 10:12:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31715
IP address blocks: 185.230.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 16:33:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:95:17:90:cc:eb:68:ac:d9:0e:cc:75:97:d6:3a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 19 10:12:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7d5291d8f9ddffd77a34b2a0c4aab568ab805c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3e:c5:82:6d:f4:ca:64:de:78:bf:80:d7:59:
eb:7d:4d:6c:30:e4:b2:c7:4c:31:8f:e9:c9:55:a6:
62:3a:10:7a:ed:56:1a:65:ee:32:90:fc:27:b2:42:
1c:27:9f:a3:a2:c0:26:b8:92:10:3c:a9:3b:3f:bb:
ea:e8:be:16:e3:e6:d3:a5:77:01:6b:f8:9a:25:bb:
bd:55:db:5f:8f:02:ff:45:db:d6:a9:a5:5a:81:8e:
cc:05:c3:64:00:71:70:5b:75:ef:6a:b2:b2:10:2d:
2b:ff:c5:3e:c3:94:60:54:ea:f1:21:af:64:9e:bf:
e7:aa:1b:1c:1e:01:53:a4:aa:68:96:26:14:bf:ac:
7f:61:4c:cc:9c:19:48:71:91:e6:18:0a:64:c5:18:
9b:8d:55:70:cd:22:44:a2:f5:a7:01:df:df:c6:a5:
12:97:ba:b9:c4:5e:21:0b:9b:38:56:f3:1e:c8:fb:
f0:86:1d:c8:8c:8a:a2:08:fd:9e:3e:a6:8f:76:1a:
10:7c:f0:63:a5:1b:7c:af:5f:99:87:cc:cf:2f:19:
6e:aa:66:41:3a:d8:c7:f2:37:96:5f:b0:38:a2:50:
17:10:90:a2:7b:36:f5:fa:ca:a5:64:e8:bb:fa:de:
d6:b6:c0:fa:fc:c9:f4:38:75:0b:c0:7f:60:6f:a0:
49:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D5:29:1D:8F:9D:DF:FD:77:A3:4B:2A:0C:4A:AB:56:8A:B8:05:C6
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/t9UpHY-d3_13o0sqDEqrVoq4BcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.53.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:c5:c8:e3:ee:b2:26:63:3d:24:fb:2d:94:1e:6e:95:3d:a5:
55:32:b9:ab:0e:66:42:49:a3:3c:67:3a:a5:69:ab:a4:02:0c:
ce:59:97:fc:16:d5:3b:bf:ca:31:d1:bd:41:d9:e0:b4:d2:94:
e2:a2:70:d6:e5:61:be:0c:71:30:80:7b:96:9a:f1:b5:c9:1b:
78:95:46:fa:ba:a6:ce:3e:0f:52:33:31:da:9e:1f:ae:c4:bd:
b1:43:3a:67:b1:2f:ae:cc:85:83:c9:73:32:a6:10:ba:f1:0a:
76:e2:db:2e:a0:11:64:42:66:27:98:61:41:48:cb:10:82:0d:
eb:66:ad:cb:dd:d9:56:59:f3:ef:a1:c5:e8:e2:57:c9:11:63:
4d:f2:6f:a7:64:c8:9c:90:6f:57:68:3f:d6:37:be:2b:51:83:
79:5f:e8:b5:13:31:46:ad:b9:75:e5:96:34:90:51:2d:0b:e2:
92:b6:6a:be:b6:ae:f8:f1:21:b4:41:5f:61:25:56:e0:ff:d8:
a4:e6:b6:ed:51:16:fd:a0:23:be:8f:aa:6a:6d:f5:08:60:cc:
83:71:73:93:fa:55:6a:19:33:a6:eb:98:7c:a7:1b:a1:aa:0a:
f4:0c:5a:43:07:ce:ca:32:84:9d:ac:0a:09:5c:18:9d:80:9a:
fb:ea:30:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 22:35:35 2026 by rpki-client