Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/702302-3d53-4e43-9d5c-28bb2de58ac4/1/YRl8_xEwuoIrYu6XQPSRR-OIwnU.roa
File: YRl8_xEwuoIrYu6XQPSRR-OIwnU.roa (raw, json)
Hash identifier: sKSEmkyPtjhqrem32IW9Z02R19yQuW3+dlnyJf4VWv8=
Subject key identifier: 61:19:7C:FF:11:30:BA:82:2B:62:EE:97:40:F4:91:47:E3:88:C2:75
Certificate issuer: /CN=5b611a3cfae951764cf9669a068d4ce74fa619a8
Certificate serial: 01A0B03179D3F96DC631DE91B4DBFC6A7924
Authority key identifier: 5B:61:1A:3C:FA:E9:51:76:4C:F9:66:9A:06:8D:4C:E7:4F:A6:19:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2EaPPrpUXZM-WaaBo1M50-mGag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/702302-3d53-4e43-9d5c-28bb2de58ac4/1/YRl8_xEwuoIrYu6XQPSRR-OIwnU.roa
Signing time: Thu 17 Sep 2026 16:27:07 +0000
ROA not before: Thu 17 Sep 2026 16:27:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25180
IP address blocks: 176.123.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/702302-3d53-4e43-9d5c-28bb2de58ac4/1/W2EaPPrpUXZM-WaaBo1M50-mGag.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/702302-3d53-4e43-9d5c-28bb2de58ac4/1/W2EaPPrpUXZM-WaaBo1M50-mGag.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2EaPPrpUXZM-WaaBo1M50-mGag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b0:31:79:d3:f9:6d:c6:31:de:91:b4:db:fc:6a:79:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b611a3cfae951764cf9669a068d4ce74fa619a8
Validity
Not Before: Sep 17 16:27:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61197cff1130ba822b62ee9740f49147e388c275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:dd:31:a2:b1:31:81:c0:5c:2a:33:15:e1:52:
7c:43:a0:19:b3:6e:2f:73:15:71:6b:88:b1:93:fa:
e1:2b:29:ad:a1:0a:a6:8b:83:7a:3d:58:ad:34:26:
74:80:fe:59:44:86:09:15:52:81:56:06:b9:2b:9f:
90:fa:8a:fb:23:02:f0:7f:2e:6a:07:e9:00:c0:ba:
2e:a3:d5:c8:eb:52:06:8f:46:24:06:24:6d:18:53:
2a:4e:47:85:74:6b:ff:f3:dc:cf:80:95:f6:dd:83:
6b:ce:b2:d9:5d:9b:4c:39:4f:69:89:2e:6d:6d:38:
e2:03:c3:d2:57:6b:b0:45:ce:f2:f8:25:bf:7f:ff:
27:77:b6:30:4f:b1:18:e3:6c:c7:3a:76:bf:28:30:
40:0b:d1:15:59:3a:43:6d:87:4e:ff:14:0b:3a:2c:
4e:2e:b2:01:4e:7f:16:03:61:17:ff:28:6a:f6:75:
4a:b5:ef:00:ea:89:fc:66:f2:c3:d0:26:4a:7f:da:
56:fc:42:b5:57:35:bd:8b:2d:9f:dd:e6:6d:f6:4e:
57:38:35:51:4f:7b:7d:56:6a:7d:28:6a:3e:8b:33:
d3:4e:9a:5d:d7:35:64:2d:b7:19:af:65:1b:9e:a9:
9e:d8:64:74:58:60:28:64:62:eb:d9:ac:50:e0:bf:
47:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:19:7C:FF:11:30:BA:82:2B:62:EE:97:40:F4:91:47:E3:88:C2:75
X509v3 Authority Key Identifier:
keyid:5B:61:1A:3C:FA:E9:51:76:4C:F9:66:9A:06:8D:4C:E7:4F:A6:19:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2EaPPrpUXZM-WaaBo1M50-mGag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/702302-3d53-4e43-9d5c-28bb2de58ac4/1/YRl8_xEwuoIrYu6XQPSRR-OIwnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/702302-3d53-4e43-9d5c-28bb2de58ac4/1/W2EaPPrpUXZM-WaaBo1M50-mGag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.123.52.0/24
Signature Algorithm: sha256WithRSAEncryption
99:b5:44:60:cf:ab:6a:e5:73:f7:79:8c:15:cd:52:27:0d:42:
bd:60:5d:7a:70:80:47:1b:aa:68:6e:69:94:af:80:fe:f9:af:
3d:75:81:ce:73:b8:b1:a5:b9:75:70:59:3a:13:21:cb:3d:f7:
49:6b:f3:11:a1:19:57:56:11:d0:a9:9a:9b:f5:b5:dd:80:2e:
c2:a1:f8:9c:50:2e:57:7a:0f:4c:ad:ff:12:92:81:da:63:e6:
ea:87:df:26:02:58:c8:a9:8d:0d:95:e9:ea:b4:db:7b:27:5c:
c4:40:c5:e8:46:12:af:e9:47:29:d9:3c:c7:f8:95:a2:71:72:
59:c3:b2:66:e6:16:45:7c:3d:7a:f1:6e:d5:06:1c:e9:69:dd:
21:98:b3:a1:86:1b:22:8a:8f:6f:1e:84:7a:82:64:00:e2:ee:
fe:b0:f8:da:63:d4:f3:4b:81:05:15:87:25:e3:63:02:27:47:
33:95:33:a8:c4:04:a5:0e:43:be:53:b2:ee:a7:be:fa:39:bf:
9f:4c:4a:b0:ae:d7:9d:25:f0:ac:f6:87:bc:60:3b:39:60:bf:
ac:04:fd:5d:ac:47:68:c4:a7:08:87:28:49:93:1e:e7:3f:f1:
b1:f8:f9:95:4c:4f:af:b5:44:67:52:94:c8:a0:16:1a:8e:32:
5a:70:01:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:57:31 2026 by rpki-client