Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/yJ8vgY2GCL4dBcDLaaGn1ZWFVbY.roa
File: yJ8vgY2GCL4dBcDLaaGn1ZWFVbY.roa (raw, json)
Hash identifier: w+ietJkW8qQyZK8LO9nTo6u2RA3gOV2lOERyuxwNOvs=
Subject key identifier: C8:9F:2F:81:8D:86:08:BE:1D:05:C0:CB:69:A1:A7:D5:95:85:55:B6
Certificate issuer: /CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Certificate serial: 01A00C1267CB211195FE69856620FCB8CC45
Authority key identifier: C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/yJ8vgY2GCL4dBcDLaaGn1ZWFVbY.roa
Signing time: Sun 16 Aug 2026 19:35:27 +0000
ROA not before: Sun 16 Aug 2026 19:35:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215294
IP address blocks: 213.220.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0c:12:67:cb:21:11:95:fe:69:85:66:20:fc:b8:cc:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Validity
Not Before: Aug 16 19:35:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c89f2f818d8608be1d05c0cb69a1a7d5958555b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cd:54:ea:f4:f1:95:f3:ce:d7:9a:1d:98:c2:
58:41:f6:84:62:15:fe:8e:50:ac:89:5e:06:44:6d:
c6:05:e7:a6:3f:72:aa:1e:21:45:d2:68:30:8c:96:
d7:7c:9a:42:85:5b:db:6d:c4:2f:f5:ad:1e:80:2d:
42:ce:45:d6:a0:4a:dd:ed:56:24:e5:b6:79:db:10:
38:1c:5d:a2:d0:4e:8a:00:b1:87:82:68:1e:cd:5e:
94:26:32:78:e6:3a:90:1f:6b:0c:e4:34:00:6b:a5:
12:72:c0:c8:8a:8a:62:e0:cf:72:c4:a9:ae:10:4d:
14:59:33:40:83:fb:a0:0d:0c:cd:0c:1a:f0:30:49:
49:c2:93:63:e8:93:27:64:51:8d:34:ca:25:e3:fa:
c3:f9:55:92:59:57:3c:8c:65:b2:ed:70:c7:0c:54:
96:72:d3:23:7f:e7:17:3b:34:d0:6d:c0:28:f0:b6:
40:a1:55:5a:85:71:52:56:dd:bb:43:fe:cd:f6:de:
75:d0:61:b4:1e:4a:68:d5:20:41:e4:db:4a:75:b3:
68:bc:50:63:b0:b8:36:04:5d:50:c3:6e:11:ee:b9:
25:3a:84:0d:a3:da:c7:f2:60:48:ff:53:bf:1c:e3:
34:b9:57:9a:7f:d2:7a:9c:88:89:57:1f:a8:66:6c:
24:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9F:2F:81:8D:86:08:BE:1D:05:C0:CB:69:A1:A7:D5:95:85:55:B6
X509v3 Authority Key Identifier:
keyid:C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/yJ8vgY2GCL4dBcDLaaGn1ZWFVbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.220.3.0/24
Signature Algorithm: sha256WithRSAEncryption
25:f4:0b:54:7e:a2:52:10:d5:4a:c8:14:42:33:f7:fa:ee:2b:
6e:19:cd:0e:ca:ef:fd:f9:11:15:eb:88:ab:5b:2b:c4:4b:5b:
38:a7:e1:80:84:f9:56:7d:bf:00:2f:ec:86:7a:21:00:fe:de:
b7:68:5b:99:c5:0a:1b:c6:b0:20:fb:2f:ba:76:1a:54:c2:55:
af:0d:7a:2a:7f:35:78:34:78:61:63:20:5f:2c:d0:f6:46:1f:
70:b4:3f:8b:00:72:79:f0:c9:47:4f:f6:39:e6:01:15:73:85:
96:c3:07:82:fb:45:aa:c5:80:df:84:54:44:35:3e:8c:00:f5:
3c:1f:fc:69:c0:a3:33:b3:73:9c:b1:5f:38:df:e0:f8:76:4f:
15:89:22:ae:c6:52:fa:52:10:37:08:18:a0:17:bf:f0:6c:ac:
ed:9f:ea:0a:03:9b:c1:de:a1:a4:8a:5d:11:80:7a:24:9c:46:
10:e2:ac:3c:b6:6c:00:1a:d7:49:bb:18:13:ea:bc:23:36:77:
c8:f6:7b:79:ec:9f:e8:b1:bf:3d:c6:06:ac:09:18:e1:e4:f1:
9e:fc:ea:0c:fe:2f:26:41:69:f4:42:1c:94:a2:95:6c:de:f7:
1c:d6:bf:5a:c7:64:be:35:86:01:b7:14:1a:73:a2:ee:25:a6:
e1:d5:e3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:09:30 2026 by rpki-client