Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/YCpQpGJvTMJcO0TicA4fkp7IzaU.roa
File: YCpQpGJvTMJcO0TicA4fkp7IzaU.roa (raw, json)
Hash identifier: k/VcJ1QNPnA5DRYnFFUDe1TP6YstAmFSZmxJIOWET1U=
Subject key identifier: 60:2A:50:A4:62:6F:4C:C2:5C:3B:44:E2:70:0E:1F:92:9E:C8:CD:A5
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01A08CF34675C9CD0358DC1DCB972431D0E0
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/YCpQpGJvTMJcO0TicA4fkp7IzaU.roa
Signing time: Thu 10 Sep 2026 20:12:28 +0000
ROA not before: Thu 10 Sep 2026 20:12:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399955
IP address blocks: 194.38.50.0/24 maxlen: 24
194.38.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:f3:46:75:c9:cd:03:58:dc:1d:cb:97:24:31:d0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Sep 10 20:12:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=602a50a4626f4cc25c3b44e2700e1f929ec8cda5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:25:97:96:5c:a1:a2:44:c2:5a:42:fb:db:c4:
7b:6f:77:35:cb:c8:8d:23:62:50:c9:5c:fa:96:24:
0b:48:f0:43:68:37:bd:47:85:92:e4:27:9d:3b:1b:
30:4e:15:ef:37:91:fe:63:f5:e5:1e:7a:93:26:0b:
c0:37:7e:e2:1d:80:c1:b3:ea:e0:d1:f0:b2:2b:6c:
18:6a:66:66:5e:f9:d6:99:48:e1:6a:fc:38:91:c2:
56:27:ea:b9:70:cb:ad:fe:c0:e8:ab:dd:ee:d0:68:
de:95:1c:f1:85:d4:46:81:db:99:93:20:38:d1:66:
0a:e8:3b:6d:9b:6f:f8:bd:76:05:bd:bb:2f:9e:74:
3b:a5:44:68:b8:58:99:c0:6f:ce:28:64:c0:46:35:
3d:46:80:2b:eb:e4:a9:98:47:f3:8c:e0:1d:90:17:
14:7f:00:6b:c4:f9:65:69:c8:a2:0d:39:f2:cf:2c:
fb:b9:88:93:98:e2:45:09:d6:a7:68:e3:48:42:1c:
a5:02:ea:eb:ee:b0:b7:27:fb:4f:ae:22:22:78:b6:
b1:67:55:db:b7:57:fc:e1:eb:91:0d:af:20:12:40:
cd:e5:ff:b0:72:66:29:5b:82:31:4c:f1:02:cc:75:
b3:36:df:44:40:99:7d:49:05:2f:04:db:88:8e:56:
88:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2A:50:A4:62:6F:4C:C2:5C:3B:44:E2:70:0E:1F:92:9E:C8:CD:A5
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/YCpQpGJvTMJcO0TicA4fkp7IzaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.50.0/23
Signature Algorithm: sha256WithRSAEncryption
80:d0:a3:10:ea:6a:79:5e:e1:9d:03:bd:5c:35:1a:7e:d3:a1:
3a:14:a3:ab:15:18:d2:4f:dd:95:96:3f:06:04:42:51:fc:1d:
80:c9:61:e4:56:27:06:82:9b:55:f5:e0:3c:8c:94:0e:51:4d:
24:7b:b2:df:c1:20:19:2c:47:07:d3:ea:7a:57:14:fe:d0:0c:
cc:0e:fa:97:98:43:7c:39:92:17:4b:dc:46:b8:27:0a:3c:ee:
eb:6a:a3:c0:dc:b8:3c:4b:af:51:28:6b:e2:72:d2:ae:ff:ea:
58:c9:2d:0e:39:8d:0b:fe:58:b3:37:af:34:0c:cb:f5:80:30:
e4:f9:4c:05:d0:44:c9:d7:b1:cb:4c:f5:ec:dd:2e:dd:f0:b0:
a4:42:8d:a8:3e:be:2d:d7:6a:fe:d2:ff:19:80:16:79:bb:d4:
49:b2:1f:b5:32:25:2e:3e:d5:b6:65:a8:d6:ec:db:65:b6:3d:
97:91:90:2e:89:06:5e:36:f9:16:1a:62:af:d4:fd:3c:79:91:
b4:d8:39:60:68:8c:56:28:8b:73:c2:b8:57:df:2e:7c:fe:91:
8a:e1:f0:f7:82:9a:fc:34:53:67:4c:ec:4a:ed:8d:94:de:67:
bc:b2:e4:0e:60:7b:d2:c0:03:f1:26:a8:19:90:e8:aa:56:f4:
b6:45:56:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:29:42 2026 by rpki-client