Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/a83569-cd25-404a-99c0-162cecdc1779/1/yy7vtGMh8xC_BoHGqD8eQM5Te4c.roa
File: yy7vtGMh8xC_BoHGqD8eQM5Te4c.roa (raw, json)
Hash identifier: F5EGsyxS3ivhRJ1/PHUpCb2FHWCDJWUwjE1aNL40W8w=
Subject key identifier: CB:2E:EF:B4:63:21:F3:10:BF:06:81:C6:A8:3F:1E:40:CE:53:7B:87
Certificate issuer: /CN=90ca2f02d7a1c124d8aa3864cb4e37917aa324a4
Certificate serial: 01A0FCF5ED738D9F7AA74FD9ED7BDE701F83
Authority key identifier: 90:CA:2F:02:D7:A1:C1:24:D8:AA:38:64:CB:4E:37:91:7A:A3:24:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMovAtehwSTYqjhky043kXqjJKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a83569-cd25-404a-99c0-162cecdc1779/1/yy7vtGMh8xC_BoHGqD8eQM5Te4c.roa
Signing time: Fri 02 Oct 2026 14:12:50 +0000
ROA not before: Fri 02 Oct 2026 14:12:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61360
IP address blocks: 137.22.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a83569-cd25-404a-99c0-162cecdc1779/1/kMovAtehwSTYqjhky043kXqjJKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a83569-cd25-404a-99c0-162cecdc1779/1/kMovAtehwSTYqjhky043kXqjJKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kMovAtehwSTYqjhky043kXqjJKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:f5:ed:73:8d:9f:7a:a7:4f:d9:ed:7b:de:70:1f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ca2f02d7a1c124d8aa3864cb4e37917aa324a4
Validity
Not Before: Oct 2 14:12:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb2eefb46321f310bf0681c6a83f1e40ce537b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ba:22:19:5c:fe:6c:0b:e3:dc:b6:df:77:a3:
cd:6f:87:94:2e:b0:d7:31:c2:dd:08:11:df:3d:15:
36:55:54:2a:b5:7e:c6:b9:cd:17:8c:e9:d7:3b:05:
f2:5a:dc:15:ae:0a:f9:e0:9e:24:40:0f:62:30:9d:
4f:6e:fc:04:92:3d:87:a4:11:1a:77:6c:fe:f4:29:
45:7b:82:c3:d8:79:66:8b:70:83:71:59:db:42:bb:
91:29:4a:26:3b:41:2c:b1:6f:43:1e:76:ae:ca:dd:
59:3e:52:79:32:2d:46:11:97:97:53:00:fb:22:07:
c2:13:47:fb:54:4d:2a:1f:62:a6:d4:f8:33:53:b3:
9f:a0:9e:45:24:cf:69:5b:cf:30:29:a7:c5:74:e3:
73:c0:34:a3:8f:c1:cb:35:03:1c:46:22:00:4e:9e:
b6:38:00:78:e1:21:8a:69:6f:4a:bc:58:78:ab:8e:
9e:da:89:18:57:3a:9f:81:42:ff:63:f4:ee:eb:34:
f2:bb:4d:cf:61:2a:a2:9a:8a:65:15:fe:fe:5c:00:
82:bd:56:4f:56:f9:bb:ae:c5:57:e8:9d:dc:97:66:
75:24:d5:a9:a6:74:41:a1:f9:14:cc:b5:b6:2f:8b:
7a:09:72:08:6a:8d:13:a2:de:02:51:ea:cc:17:6a:
8e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2E:EF:B4:63:21:F3:10:BF:06:81:C6:A8:3F:1E:40:CE:53:7B:87
X509v3 Authority Key Identifier:
keyid:90:CA:2F:02:D7:A1:C1:24:D8:AA:38:64:CB:4E:37:91:7A:A3:24:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMovAtehwSTYqjhky043kXqjJKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a83569-cd25-404a-99c0-162cecdc1779/1/yy7vtGMh8xC_BoHGqD8eQM5Te4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a83569-cd25-404a-99c0-162cecdc1779/1/kMovAtehwSTYqjhky043kXqjJKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.22.136.0/22
Signature Algorithm: sha256WithRSAEncryption
95:37:32:76:6f:eb:9f:69:20:41:38:6a:b9:a2:ab:20:d1:0d:
af:3b:9d:74:86:54:2d:d2:17:99:87:51:6e:f7:7e:0e:ed:53:
94:6f:af:da:8a:7d:bc:16:2a:a7:15:74:a1:1e:34:f2:1c:6c:
5e:5f:28:e6:57:95:44:2e:85:bc:0f:cd:f1:d8:12:90:5a:f8:
d2:38:1f:ee:04:ba:78:05:c7:4a:bc:bc:42:da:67:ee:f5:4e:
b1:cc:6d:5a:65:77:fa:de:e4:cd:7e:a2:45:5d:df:f2:67:b9:
b9:24:bb:76:c9:8f:5e:03:56:a6:71:48:7c:99:eb:ca:56:2c:
9e:9a:4e:59:16:a7:e0:83:ba:08:76:7e:60:85:d7:06:38:85:
c9:c8:eb:77:ed:e7:f7:8b:94:b3:e3:14:fc:62:53:99:50:5f:
8a:ce:98:5e:de:fa:df:17:91:ee:82:4d:d2:6c:cb:cf:42:2c:
55:a9:fa:39:05:94:93:bd:1d:47:e5:3d:05:b6:bf:07:87:52:
78:a0:03:51:d7:4d:f2:fa:67:9d:00:ec:1d:9d:22:f3:fd:f2:
29:73:e0:da:4c:90:e5:7e:84:5f:5f:d2:e1:92:e6:43:5b:43:
4c:2e:40:e0:57:43:9a:94:de:93:6d:07:3c:1e:97:09:61:21:
a4:32:0a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:00:31 2026 by rpki-client