Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/yrZPY9seMBHQYY00yx0kcIfvPSo.roa
File: yrZPY9seMBHQYY00yx0kcIfvPSo.roa (raw, json)
Hash identifier: n+1JjnHqhtfH2tG9RFSlGczNMiFj7I4fc6/vefHlAgg=
Subject key identifier: CA:B6:4F:63:DB:1E:30:11:D0:61:8D:34:CB:1D:24:70:87:EF:3D:2A
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A17DF9BEFF917E5AAB6D6DFE3DF9127242
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/yrZPY9seMBHQYY00yx0kcIfvPSo.roa
Signing time: Tue 27 Oct 2026 15:28:01 +0000
ROA not before: Tue 27 Oct 2026 15:28:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 94.229.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:f9:be:ff:91:7e:5a:ab:6d:6d:fe:3d:f9:12:72:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 27 15:28:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cab64f63db1e3011d0618d34cb1d247087ef3d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8c:a3:67:96:24:79:9f:a8:a1:f6:0c:46:72:
7b:4f:42:52:c4:25:5d:09:26:9e:df:92:9b:7d:70:
fd:32:b1:f5:b2:a8:66:66:69:94:6e:5f:bd:b6:02:
a9:a6:5a:35:ba:0c:9b:12:6f:b6:69:df:cf:b6:42:
c0:4d:97:0f:fd:e2:a8:33:2f:eb:73:41:53:04:66:
1a:0e:be:45:20:11:f1:4a:6b:1a:75:5f:69:54:66:
36:8e:a2:1b:6c:a2:cd:bb:4b:62:95:88:9b:d9:f6:
be:c0:1e:1e:7e:a7:4a:cc:49:a6:f5:c2:ae:20:43:
2f:30:82:d8:be:75:dc:c9:eb:46:84:ec:87:8a:e1:
18:2c:90:56:8c:9a:1c:0f:ce:c1:ee:84:6d:1a:e3:
8e:f2:c0:e0:f5:8c:31:18:97:e5:a6:1a:91:e4:9a:
78:c6:da:69:16:95:35:42:d9:81:a0:0d:d9:4e:e6:
d8:dc:dd:2e:c3:2e:75:17:80:63:ef:25:cc:02:0c:
18:07:4e:96:a7:ce:9e:9e:2c:cd:ed:20:54:a1:f5:
be:50:38:08:b5:ec:33:ba:4c:62:f5:7e:41:d3:bc:
9b:ff:f5:52:91:76:b5:49:bb:c7:3a:a8:39:b5:b4:
13:93:df:57:51:1e:3e:7b:ce:43:a7:bf:15:61:0d:
3c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B6:4F:63:DB:1E:30:11:D0:61:8D:34:CB:1D:24:70:87:EF:3D:2A
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/yrZPY9seMBHQYY00yx0kcIfvPSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.229.218.0/24
Signature Algorithm: sha256WithRSAEncryption
74:61:a8:87:36:57:2e:35:4f:a1:38:c7:0f:28:0e:c5:03:ba:
bc:19:73:a9:48:89:e7:06:20:99:1a:bc:cb:37:ac:61:d9:36:
b5:f3:2a:88:3d:ba:ba:a2:9f:16:94:74:d5:9a:ef:fd:1c:a0:
d4:6e:f6:76:28:92:f7:45:f0:44:15:bb:c1:cd:4f:43:f5:03:
1f:fd:9c:76:28:5f:ba:2f:8f:f2:29:c0:ec:c2:67:f1:fd:e3:
97:26:9c:13:03:fd:44:b8:07:a1:c0:f2:7e:cb:65:a8:a8:40:
48:2c:e0:0d:18:70:62:ab:ff:1c:14:da:23:2f:a6:86:a0:f2:
f9:a6:84:e1:db:1c:e2:1f:80:4b:58:0a:fa:ac:f1:a5:99:f3:
a1:51:ec:5b:61:8a:5c:41:dd:5d:57:1e:70:2e:0c:f2:70:80:
88:1c:e8:49:e9:35:50:15:d6:2b:5f:a1:8a:c7:0d:90:4b:c5:
c9:5f:44:b8:90:90:ea:fa:a1:01:0e:b4:b3:82:87:a9:8a:92:
a7:31:24:bd:0d:e6:76:26:80:ff:4c:2f:b1:14:ba:2e:4d:1c:
52:8a:79:88:3d:99:83:70:a7:91:95:c4:63:9e:9b:0f:f9:bc:
88:66:f4:5c:a4:b3:2d:cb:98:d6:20:35:83:d8:0e:ad:52:b0:
b5:53:f8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 17:04:37 2026 by rpki-client