Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/f9d6db-8c12-4951-a5d8-c8cef1c72f16/1/_YWFB8tl5Y8gMiLHOtKbHI--A70.roa
File: _YWFB8tl5Y8gMiLHOtKbHI--A70.roa (raw, json)
Hash identifier: IjVGacV+Q23BecX32dX/SDafJuoloB3F56TXBAzJvXM=
Subject key identifier: FD:85:85:07:CB:65:E5:8F:20:32:22:C7:3A:D2:9B:1C:8F:BE:03:BD
Certificate issuer: /CN=d6dad8855c27ac3f1d6d7e2ef8e597577a6aa920
Certificate serial: 01A1027FF4DB116B810E5E5AC60B29A54DD8
Authority key identifier: D6:DA:D8:85:5C:27:AC:3F:1D:6D:7E:2E:F8:E5:97:57:7A:6A:A9:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1trYhVwnrD8dbX4u-OWXV3pqqSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d6db-8c12-4951-a5d8-c8cef1c72f16/1/_YWFB8tl5Y8gMiLHOtKbHI--A70.roa
Signing time: Sat 03 Oct 2026 16:01:42 +0000
ROA not before: Sat 03 Oct 2026 16:01:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205590
IP address blocks: 195.110.30.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d6db-8c12-4951-a5d8-c8cef1c72f16/1/1trYhVwnrD8dbX4u-OWXV3pqqSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d6db-8c12-4951-a5d8-c8cef1c72f16/1/1trYhVwnrD8dbX4u-OWXV3pqqSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1trYhVwnrD8dbX4u-OWXV3pqqSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:7f:f4:db:11:6b:81:0e:5e:5a:c6:0b:29:a5:4d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6dad8855c27ac3f1d6d7e2ef8e597577a6aa920
Validity
Not Before: Oct 3 16:01:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd858507cb65e58f203222c73ad29b1c8fbe03bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0c:77:e4:b2:77:c3:ce:22:2c:fd:bf:0a:4c:
7a:58:d4:3f:6d:16:81:83:7f:53:dd:cc:de:45:e9:
4b:89:e0:9a:8e:d7:e6:65:ff:99:06:9f:79:8a:d4:
99:70:9e:23:c8:eb:6f:03:08:f9:3a:8e:83:be:82:
b0:67:32:3a:27:53:c6:0b:8e:d4:11:38:57:17:cc:
14:7c:66:2a:80:03:a7:d4:88:b1:95:8a:f3:c2:b3:
c4:b7:95:e9:7c:34:73:07:c5:f4:da:52:e8:17:33:
67:76:d2:5a:04:cb:a2:30:c0:db:3f:94:af:4f:8d:
0b:14:8e:e5:0d:00:75:c6:61:42:1d:14:27:12:60:
4c:cb:ff:98:b0:51:e0:a3:fd:52:2a:9d:31:80:7c:
e8:fc:6e:c2:c4:8a:ab:40:34:7c:b0:88:d4:27:24:
30:78:67:c3:67:f0:45:0d:1d:04:cd:5e:00:4a:8e:
30:f9:74:2c:14:7e:34:b1:2e:55:b5:16:40:6b:1e:
88:66:a3:35:a0:03:4f:4e:7b:f8:3a:33:29:cd:b4:
dd:ed:ad:62:96:d8:21:6d:21:d3:34:1b:04:f9:be:
af:ef:a5:20:fd:71:a2:26:a5:94:cf:ec:82:3c:69:
3c:a4:74:9a:c0:c8:27:78:77:ca:c7:e9:cd:b1:1a:
e6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:85:85:07:CB:65:E5:8F:20:32:22:C7:3A:D2:9B:1C:8F:BE:03:BD
X509v3 Authority Key Identifier:
keyid:D6:DA:D8:85:5C:27:AC:3F:1D:6D:7E:2E:F8:E5:97:57:7A:6A:A9:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1trYhVwnrD8dbX4u-OWXV3pqqSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d6db-8c12-4951-a5d8-c8cef1c72f16/1/_YWFB8tl5Y8gMiLHOtKbHI--A70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d6db-8c12-4951-a5d8-c8cef1c72f16/1/1trYhVwnrD8dbX4u-OWXV3pqqSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.110.30.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:28:92:8c:aa:5a:7d:7f:f7:8c:c3:0d:bd:45:1a:49:4e:41:
74:5e:43:23:0e:0d:8e:50:ee:c6:0c:00:cf:1a:52:b0:d6:ed:
9e:4c:e4:5d:13:4a:6e:07:5e:4c:d6:eb:7e:2e:08:d9:b7:68:
52:5d:1a:b4:da:77:d3:02:ba:7d:a0:1b:fd:22:da:fb:12:07:
6b:92:52:a7:a0:63:2a:ae:73:7c:58:c2:be:38:02:01:ff:61:
12:58:70:7e:5a:86:20:e0:3c:fd:63:63:69:cb:6e:31:56:6a:
16:70:c9:e4:cf:97:39:34:c2:3d:60:d9:1b:6c:db:df:df:e1:
66:e3:67:c7:f8:88:f7:46:b3:3f:54:b4:91:80:85:3a:e4:3d:
50:b7:54:04:ac:3d:e1:21:4a:dd:ea:56:e5:25:2e:d4:e2:04:
a0:15:a9:24:6e:87:04:7c:82:2e:af:4a:20:ba:07:41:eb:b4:
50:7e:5b:f6:ff:9f:2f:5c:09:e0:eb:62:f0:f7:8b:86:41:19:
9c:98:e1:e1:57:fe:2c:8d:ec:e2:06:d7:24:69:9e:ed:6f:10:
a6:cf:3e:7c:54:8a:2a:31:da:55:c9:0f:e6:b0:cc:a6:90:70:
a4:29:a9:29:cf:a6:57:bf:7e:c8:33:82:29:25:b4:46:02:a4:
d5:b0:32:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:49:21 2026 by rpki-client