Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/yQr--s5nbDLSBq1f6WJ6QHGeyzk.roa
File: yQr--s5nbDLSBq1f6WJ6QHGeyzk.roa (raw, json)
Hash identifier: 0G99mwqEuR6I8GBLFxxB42DbMhMAwQDAL1U9zeTz8vE=
Subject key identifier: C9:0A:FE:FA:CE:67:6C:32:D2:06:AD:5F:E9:62:7A:40:71:9E:CB:39
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 019FFA654FF05CD68FA7202703F9D20A80CF
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/yQr--s5nbDLSBq1f6WJ6QHGeyzk.roa
Signing time: Thu 13 Aug 2026 09:12:51 +0000
ROA not before: Thu 13 Aug 2026 09:12:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 979
IP address blocks: 216.195.212.0/24 maxlen: 24
216.195.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 18:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:65:4f:f0:5c:d6:8f:a7:20:27:03:f9:d2:0a:80:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Aug 13 09:12:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c90afeface676c32d206ad5fe9627a40719ecb39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:df:bc:0e:ee:12:be:c6:b2:fc:2d:5a:3f:45:
26:1d:50:e1:d5:1d:64:72:d1:1d:a4:a1:a6:30:20:
af:29:cd:1b:f0:f4:b8:00:34:f1:11:a5:62:c5:9a:
ba:62:8d:23:1b:77:e0:66:da:36:23:36:7d:7b:e9:
2c:b9:24:24:56:9b:b1:69:56:47:79:c7:58:fe:b1:
a7:9a:91:01:2f:32:40:0e:3f:2e:1f:84:52:fc:78:
91:7c:e0:19:9d:81:c1:11:5d:d5:14:74:75:84:94:
c1:a1:41:04:93:e5:4f:ad:f9:29:33:9b:b6:1f:9c:
1d:b2:29:4c:e0:c2:d6:1d:a3:3f:6e:83:00:b7:4d:
4a:c9:e0:05:67:bb:f8:76:10:6c:59:bb:a1:0d:8b:
75:97:fa:b4:5a:02:71:41:a8:3e:1d:ba:da:f6:ca:
17:9c:86:43:22:8d:c6:21:48:e3:67:f8:9d:46:0c:
f0:c8:10:37:cd:65:ba:05:b6:4f:59:a3:68:d5:17:
4c:7e:89:e1:30:a4:e5:24:96:38:31:ad:f8:bb:0d:
cf:65:95:2f:56:43:4e:02:40:29:98:a1:6b:60:f5:
51:9a:53:38:f6:e2:3b:8c:8b:23:57:9b:7d:f3:81:
47:af:73:67:1c:6f:e4:b6:02:c9:87:4b:2c:11:cc:
05:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0A:FE:FA:CE:67:6C:32:D2:06:AD:5F:E9:62:7A:40:71:9E:CB:39
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/yQr--s5nbDLSBq1f6WJ6QHGeyzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.195.212.0/23
Signature Algorithm: sha256WithRSAEncryption
47:10:1c:6f:c4:e1:39:f9:a5:27:ac:f4:18:86:5e:5c:35:60:
9f:14:95:15:ef:32:ac:89:f0:29:9d:6c:c1:a6:5d:5e:f2:12:
0a:6a:03:2c:7e:7e:a1:43:66:77:95:d4:fb:b2:17:a9:74:ce:
42:14:b1:17:3a:b3:f9:ff:f7:f9:0c:95:9e:fc:6d:82:da:ed:
fc:fb:6b:56:8e:27:f9:be:38:95:56:1c:21:eb:4e:9b:26:49:
00:a3:92:36:ca:2b:e7:3d:3e:85:9b:9c:96:f4:4e:81:f7:0f:
fd:50:04:dd:28:26:14:7a:4d:d5:a0:b8:43:ee:46:05:0f:94:
96:cd:e1:74:d3:c2:36:96:f0:dd:e5:d8:52:d9:55:d2:1b:27:
6f:3e:4f:cd:82:a6:b3:2f:ca:50:76:fa:1b:44:c6:d2:78:c6:
57:62:b2:ee:e4:67:16:43:23:0b:41:7f:f8:3e:0d:3f:3d:49:
b2:69:6a:7c:07:cb:20:f3:26:a3:18:b3:c9:74:5f:e3:f4:8b:
29:18:ea:aa:59:3f:38:05:84:91:8c:0e:22:9d:71:df:ac:55:
bc:a0:22:4c:ca:61:2b:29:5e:7d:fb:01:62:d0:99:d0:30:0e:
09:9d:c0:17:f4:40:57:d6:58:af:88:9e:1e:1a:27:00:62:7a:
a8:2f:e9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:33:16 2026 by rpki-client