Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/yd9EH4-PNfXaKnFsgpj-E0I-Hpo.roa
File: yd9EH4-PNfXaKnFsgpj-E0I-Hpo.roa (raw, json)
Hash identifier: 8g1lQ5gsbw6TqXkgRbd0BplxOk5M2zN7QFi/L4xQDp4=
Subject key identifier: C9:DF:44:1F:8F:8F:35:F5:DA:2A:71:6C:82:98:FE:13:42:3E:1E:9A
Certificate issuer: /CN=20820f796481ac0e9637c962414597b1fe227c24
Certificate serial: 019FAE0B280BC5F437171E8D71586F8F6452
Authority key identifier: 20:82:0F:79:64:81:AC:0E:96:37:C9:62:41:45:97:B1:FE:22:7C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/yd9EH4-PNfXaKnFsgpj-E0I-Hpo.roa
Signing time: Wed 29 Jul 2026 13:23:14 +0000
ROA not before: Wed 29 Jul 2026 13:23:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 140079
IP address blocks: 5.145.180.0/23 maxlen: 23
5.145.180.0/24 maxlen: 24
5.145.181.0/24 maxlen: 24
5.145.182.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:0b:28:0b:c5:f4:37:17:1e:8d:71:58:6f:8f:64:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20820f796481ac0e9637c962414597b1fe227c24
Validity
Not Before: Jul 29 13:23:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c9df441f8f8f35f5da2a716c8298fe13423e1e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0c:4a:b0:65:72:38:fc:c5:94:35:07:dc:2f:
f8:eb:82:5a:96:7f:db:b7:1e:92:d1:e4:6d:e8:64:
36:7d:99:58:04:5b:47:53:07:11:08:dd:fa:fa:db:
c2:2a:50:62:c7:f0:74:b6:0d:5b:9f:24:22:70:60:
a8:4b:67:2e:11:21:3f:11:46:ad:c5:d0:1c:b9:a5:
74:13:1a:46:41:46:60:93:47:7a:a7:b9:b4:f8:75:
9d:77:eb:8d:d2:93:71:61:66:cc:4d:37:ea:9b:71:
94:b4:ce:8f:50:c3:8f:11:b2:c2:e5:fb:b5:71:c9:
88:bb:30:a2:d8:73:a2:67:9b:c3:0b:85:c3:1f:fa:
f3:6b:b6:36:eb:3e:d0:58:b8:cc:fc:4d:88:b4:1b:
c1:3f:95:89:58:fd:91:7b:9b:97:c9:5a:9e:ee:f7:
18:d2:f2:63:1e:0d:f7:da:02:50:a0:84:a8:2d:2d:
fc:29:bc:b9:f2:80:71:0e:5d:d1:e7:c9:af:54:38:
4b:74:e9:19:cd:bd:8c:b3:be:74:83:87:7a:84:c9:
08:96:53:c3:46:47:4b:a2:1b:7f:3f:ca:34:8d:90:
bc:f1:5f:d7:24:5e:bf:f7:d9:29:f3:fa:01:69:49:
ca:32:5b:1e:ae:8d:9a:e4:d0:f0:41:c3:82:77:50:
c9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DF:44:1F:8F:8F:35:F5:DA:2A:71:6C:82:98:FE:13:42:3E:1E:9A
X509v3 Authority Key Identifier:
keyid:20:82:0F:79:64:81:AC:0E:96:37:C9:62:41:45:97:B1:FE:22:7C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/yd9EH4-PNfXaKnFsgpj-E0I-Hpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.145.180.0/22
Signature Algorithm: sha256WithRSAEncryption
34:68:9b:b3:a0:98:ea:29:39:fb:27:9a:06:a9:24:fa:23:79:
6a:b8:16:f0:9c:ae:7a:da:f9:4c:3c:b0:f7:36:31:80:d3:a1:
f1:bb:f8:68:41:d1:d7:41:5c:15:0e:b1:f7:dd:5c:8a:aa:7e:
9b:93:ed:12:72:cf:48:c0:33:f3:9a:89:28:95:92:5a:83:77:
e0:53:37:23:ce:31:52:22:38:e0:c4:fc:8a:77:e5:ce:af:e3:
da:5c:2f:83:4b:fc:87:67:47:2f:15:1a:4e:39:89:8a:a4:ca:
ee:7c:5f:6c:09:8b:95:9a:5e:73:66:9f:15:63:70:f3:8e:ed:
fa:ef:76:5e:ed:f2:21:7a:d5:9c:6e:4e:ed:9f:eb:03:8b:48:
94:5c:ad:bc:12:7d:db:3f:c0:62:4d:ca:63:15:35:7b:58:3e:
36:16:99:17:26:06:73:3d:00:75:ba:b1:5c:1b:da:f5:78:a8:
3d:ab:a9:9c:29:63:33:0b:92:d2:70:5b:39:cd:19:2b:6d:92:
3d:d0:1c:55:b5:e1:e6:bd:37:f4:6b:b3:04:5b:25:01:b0:9b:
a7:57:5f:f6:22:b4:95:d9:cc:77:ba:8e:b1:47:03:7a:97:25:
40:38:ae:92:cc:b7:83:7c:35:d6:49:6d:ad:23:25:47:89:b1:
fe:a4:46:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 13:31:49 2026 by rpki-client