Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/yT1RKaA_jW_Fs_q2Xta-wqJ2rA4.roa
File: yT1RKaA_jW_Fs_q2Xta-wqJ2rA4.roa (raw, json)
Hash identifier: Yhagr78CIxoIwhFIExPGHD+JkDFI98BZt35S7gqnNxU=
Subject key identifier: C9:3D:51:29:A0:3F:8D:6F:C5:B3:FA:B6:5E:D6:BE:C2:A2:76:AC:0E
Certificate issuer: /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial: 019FAE278AAD3EEBA02335AA8531E9AC79BB
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/yT1RKaA_jW_Fs_q2Xta-wqJ2rA4.roa
Signing time: Wed 29 Jul 2026 13:54:14 +0000
ROA not before: Wed 29 Jul 2026 13:54:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200017
IP address blocks: 194.45.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Jul 2026 22:12:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:27:8a:ad:3e:eb:a0:23:35:aa:85:31:e9:ac:79:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Validity
Not Before: Jul 29 13:54:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c93d5129a03f8d6fc5b3fab65ed6bec2a276ac0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:66:12:3e:74:51:f3:6b:a5:de:92:73:71:23:
34:38:b1:7d:1e:c7:ff:50:4a:43:9d:7b:40:5a:87:
20:e5:13:12:02:84:68:ef:86:59:11:b6:00:45:a6:
54:41:2f:07:98:c2:03:15:17:2e:c8:73:53:f9:bd:
a4:49:66:89:d0:30:7b:fc:42:32:fe:b2:95:78:1d:
20:37:f2:60:da:13:d3:7d:b8:c8:df:69:29:4a:84:
f5:bf:18:e9:0e:61:e5:bb:5c:92:e1:a2:9d:b3:5a:
fc:80:bf:6d:c3:e6:13:4a:86:62:7d:39:f8:78:a2:
01:5d:a4:03:28:07:27:bc:74:4f:78:15:bf:31:22:
af:87:6f:8b:00:a4:6b:99:c3:27:ca:4f:fe:7a:f1:
6a:8a:fb:c1:49:19:93:2a:2a:c6:0b:03:dc:b1:cc:
54:6e:aa:72:81:a9:9b:b2:b2:2a:70:a0:ff:fb:3a:
53:e4:41:06:9f:8b:65:64:23:76:46:f9:66:17:e8:
02:1b:7e:f1:00:f6:48:af:70:0d:8d:9b:ea:3c:09:
26:45:17:40:68:0f:dd:2c:4a:9e:72:08:f8:28:76:
b9:14:83:a2:13:75:74:43:3b:e9:16:2a:79:d1:ea:
78:68:99:2e:bf:66:d1:11:96:36:7f:be:26:02:6a:
a9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3D:51:29:A0:3F:8D:6F:C5:B3:FA:B6:5E:D6:BE:C2:A2:76:AC:0E
X509v3 Authority Key Identifier:
keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/yT1RKaA_jW_Fs_q2Xta-wqJ2rA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.45.100.0/24
Signature Algorithm: sha256WithRSAEncryption
53:79:f2:e3:0f:a8:32:48:e6:c5:84:e9:e1:ee:e6:1b:3d:40:
cf:aa:bc:8c:c0:4b:3d:21:b0:67:44:65:55:cc:68:72:14:73:
49:da:19:e7:eb:ef:bc:b3:8b:18:58:dd:2f:24:ba:52:25:72:
4a:08:cd:c4:0d:48:97:81:df:b7:5c:b3:c1:d2:a0:75:f6:a0:
f5:d4:10:14:9f:20:3a:8f:88:8f:9f:72:57:cd:7e:f4:00:3f:
d6:0b:44:3b:e0:44:48:42:71:6c:f0:53:48:86:bc:09:37:a4:
18:e9:c1:5b:f7:40:58:3b:1f:9d:f8:5f:11:94:ed:d9:18:dd:
ea:9f:1a:1f:9d:bb:91:fd:58:b6:90:0f:44:1c:9c:f7:cb:3d:
62:5d:79:2b:72:d5:14:69:4a:09:43:03:b3:10:b9:53:f7:90:
b6:60:76:d5:5f:4b:27:4e:77:18:4a:99:ca:13:18:06:9c:4e:
98:47:0c:8e:06:e4:4a:ef:62:14:0e:b8:69:71:ca:78:1b:c1:
15:24:8e:e5:16:30:34:df:40:96:57:9d:22:8b:76:04:bb:a8:
59:c1:ac:d4:c0:e3:b0:21:f2:5d:14:65:25:c0:36:f3:fc:99:
9d:d5:39:70:ae:3c:8b:2f:6e:e5:fd:35:e2:1a:fe:89:2c:56:
b3:06:77:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 07:03:26 2026 by rpki-client