Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/Yu4sRMhjnaZ-XQmSj1D__phZeD8.roa
File: Yu4sRMhjnaZ-XQmSj1D__phZeD8.roa (raw, json)
Hash identifier: AyFLhX8tiTmblt6O8oktuLS6s2R51Ojkbbk8JbQ8oQg=
Subject key identifier: 62:EE:2C:44:C8:63:9D:A6:7E:5D:09:92:8F:50:FF:FE:98:59:78:3F
Certificate issuer: /CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b
Certificate serial: 01A11B3B063D3D4C4DD1184A2AA85E83A658
Authority key identifier: B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/Yu4sRMhjnaZ-XQmSj1D__phZeD8.roa
Signing time: Thu 08 Oct 2026 11:16:55 +0000
ROA not before: Thu 08 Oct 2026 11:16:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57973
IP address blocks: 46.245.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:27:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:3b:06:3d:3d:4c:4d:d1:18:4a:2a:a8:5e:83:a6:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5cb2b5eaf3cc15dd4b3b23ad8b9472a5240c03b
Validity
Not Before: Oct 8 11:16:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62ee2c44c8639da67e5d09928f50fffe9859783f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bb:b5:b0:5a:92:36:d7:ce:83:7d:1a:f6:22:
e3:81:eb:9d:ed:75:33:98:ae:27:a3:d6:cc:43:37:
94:52:1c:51:12:08:ad:d2:c0:96:34:dd:bd:7c:33:
98:be:62:da:c9:4a:6c:7f:25:f5:5f:9b:e9:52:8c:
9d:c3:6a:9f:34:b0:a9:31:64:06:03:16:8f:bb:15:
a3:d8:69:69:e2:02:ca:49:3e:79:91:67:15:a2:00:
0d:74:99:db:d8:f8:99:ea:c8:0d:dc:ae:a8:33:b0:
b4:1c:4f:62:eb:aa:e1:39:42:cc:69:56:ed:bb:4d:
fb:30:c9:3b:35:bf:05:86:75:51:39:34:b0:10:2d:
cd:62:db:85:70:e8:12:44:56:7b:bd:f9:91:58:e1:
e0:9e:c7:e8:f6:35:4a:75:d4:b4:c3:08:52:32:f6:
5d:6e:b4:87:97:ee:61:61:9f:d2:96:64:9b:22:80:
7a:26:89:e6:5c:5a:2c:08:5f:e5:3f:72:f1:a9:cc:
1a:c0:12:e4:14:fc:58:43:58:29:4e:ad:8a:eb:d5:
1d:33:fb:3b:f5:fb:ab:8e:26:b8:ed:3a:5b:2c:71:
5d:e1:a3:12:d3:a6:4e:7a:16:39:6b:e0:b5:70:7c:
c9:6d:e9:57:1f:9a:6e:1c:aa:df:c6:9b:e4:75:5b:
66:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:EE:2C:44:C8:63:9D:A6:7E:5D:09:92:8F:50:FF:FE:98:59:78:3F
X509v3 Authority Key Identifier:
keyid:B5:CB:2B:5E:AF:3C:C1:5D:D4:B3:B2:3A:D8:B9:47:2A:52:40:C0:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcsrXq88wV3Us7I62LlHKlJAwDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/Yu4sRMhjnaZ-XQmSj1D__phZeD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/795ed9-8fad-4c44-8583-06ca709a3c59/1/tcsrXq88wV3Us7I62LlHKlJAwDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.234.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:d8:95:ee:cb:06:fd:d3:18:c9:8b:8b:b3:56:37:dd:99:ad:
43:4b:f4:00:be:0a:dd:1a:14:92:41:6b:a8:15:c1:10:1f:1a:
b7:66:cb:f3:b0:f5:31:cf:5c:db:88:d3:44:78:a1:e7:ac:c1:
ca:f2:d7:52:11:08:e3:5f:33:9e:b5:37:45:f5:11:b5:ab:b5:
2e:7b:cb:29:b1:8d:28:b2:8a:09:e7:61:44:15:25:55:e2:2e:
58:51:19:ea:a1:ad:c3:91:3e:ba:97:bc:7e:ff:f3:2e:1a:a4:
8a:ff:f1:6c:b9:5f:a0:7b:97:4e:bb:73:d4:d5:a8:d4:7b:90:
de:d8:cb:ec:37:70:b5:8c:09:25:a4:6e:11:48:09:4b:b3:10:
fd:fe:f1:14:9e:2b:76:f5:7f:97:ad:e2:e0:8f:b9:e5:7c:e9:
fd:47:61:07:cb:e1:02:3e:b1:a0:77:5a:70:f2:fa:2d:b4:dc:
f5:df:8a:a4:69:0b:7b:d7:cb:9a:0a:6b:26:55:26:fc:63:1e:
4c:ad:20:40:20:5e:eb:e5:5b:33:88:bd:1a:68:14:ef:ef:e2:
50:80:68:83:4b:5e:44:ad:f2:f1:24:d8:ec:b4:09:c9:2c:98:
4b:fb:5b:0f:52:88:bf:7d:b0:98:86:ad:10:e1:06:ef:5d:be:
76:96:87:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:46:50 2026 by rpki-client