Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/yMW3TW9152cW1DYeZYxdZkr-K6A.roa
File: yMW3TW9152cW1DYeZYxdZkr-K6A.roa (raw, json)
Hash identifier: n3BeZybOUYQWTsEJMiZ9th8Uj9vvq5MfmSdVF/ZPKPc=
Subject key identifier: C8:C5:B7:4D:6F:75:E7:67:16:D4:36:1E:65:8C:5D:66:4A:FE:2B:A0
Certificate issuer: /CN=c38f6c474a4a4414a9c9277be4d6aaae2bedea4b
Certificate serial: 019EB745E5004753E28615E08DB47495F7D8
Authority key identifier: C3:8F:6C:47:4A:4A:44:14:A9:C9:27:7B:E4:D6:AA:AE:2B:ED:EA:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w49sR0pKRBSpySd75Naqrivt6ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/yMW3TW9152cW1DYeZYxdZkr-K6A.roa
Signing time: Thu 11 Jun 2026 15:21:11 +0000
ROA not before: Thu 11 Jun 2026 15:21:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203691
IP address blocks: 194.180.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/w49sR0pKRBSpySd75Naqrivt6ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:45:e5:00:47:53:e2:86:15:e0:8d:b4:74:95:f7:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38f6c474a4a4414a9c9277be4d6aaae2bedea4b
Validity
Not Before: Jun 11 15:21:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8c5b74d6f75e76716d4361e658c5d664afe2ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5f:40:ae:42:73:c0:45:02:6c:34:5b:3a:fe:
8f:5d:85:70:a7:e2:c7:93:0a:60:09:00:b5:0f:5a:
53:a2:83:e2:a6:a4:ff:8b:c8:14:46:e8:db:1b:00:
3e:76:ae:df:05:b3:98:c2:1d:bb:b2:85:66:29:11:
ab:06:09:4a:cb:0f:96:a1:1f:3e:17:1b:e6:f5:73:
f2:09:cf:8d:95:b6:ce:15:d8:28:e0:8e:df:5b:2e:
4c:d4:1e:4f:e2:4c:01:2c:e7:ab:64:d2:88:0d:c1:
95:48:41:e2:9a:ad:5f:9c:a2:8e:59:ab:53:29:e8:
bb:2d:8c:32:47:0c:aa:db:a0:81:5e:ff:0c:1e:de:
10:87:fa:9c:e5:13:5a:c9:62:7f:1a:65:7b:68:0c:
8d:c7:dd:89:08:19:ec:1e:0c:45:6a:c8:c3:a1:d1:
e4:54:07:fa:45:d0:5c:78:1c:f4:cf:19:48:8d:63:
3c:44:93:b6:95:04:d4:b1:19:a6:f0:7e:2f:61:80:
6b:d3:32:70:f9:cf:d9:73:65:51:59:c8:35:23:95:
70:79:84:0f:91:90:fd:4e:73:49:44:41:34:9f:ec:
f0:26:ac:6a:af:a8:8d:1b:f8:6d:04:2a:33:08:4e:
f8:9e:8f:ad:48:2a:92:b1:dd:88:81:dd:6e:6f:80:
dd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C5:B7:4D:6F:75:E7:67:16:D4:36:1E:65:8C:5D:66:4A:FE:2B:A0
X509v3 Authority Key Identifier:
keyid:C3:8F:6C:47:4A:4A:44:14:A9:C9:27:7B:E4:D6:AA:AE:2B:ED:EA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w49sR0pKRBSpySd75Naqrivt6ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/yMW3TW9152cW1DYeZYxdZkr-K6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.248.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:7c:f1:e9:7d:be:5f:b3:49:ee:ca:48:25:bc:2c:d7:3e:48:
20:b0:27:8a:b1:56:e9:e3:6d:f6:82:59:1f:9c:69:f7:c5:a0:
94:00:06:89:63:2e:22:38:f5:12:f7:4b:3a:b1:41:9c:17:3a:
b3:e7:3f:01:59:09:77:32:20:5e:e3:a8:ab:94:27:a8:b9:0a:
96:06:d5:5f:e2:eb:45:35:cc:3b:e9:6d:b5:95:9a:09:2f:51:
20:48:67:b4:c5:df:99:05:22:49:96:f0:c9:a2:b7:2f:06:33:
1d:22:06:eb:fd:26:67:00:79:f9:69:d3:43:e5:b4:dc:15:c1:
37:b4:25:85:4c:99:8d:c6:72:4f:b4:31:78:bd:a3:fe:c1:52:
78:c0:5f:21:8e:3c:57:39:a6:3c:24:c7:e3:08:85:ce:47:01:
d2:83:9f:b0:55:b8:fa:70:d7:e9:a4:96:08:20:c9:68:62:1d:
23:76:99:af:81:89:48:af:9d:9e:53:0d:b9:83:55:88:3f:95:
48:b6:e5:59:d8:66:c9:9f:83:11:65:87:6a:ab:6c:12:85:12:
2c:33:b2:d1:0b:c1:33:2f:82:50:a6:41:6e:36:de:d3:13:a1:
65:33:51:f2:d7:aa:80:29:32:14:fa:53:cc:84:a7:a3:c2:21:
ea:f8:d0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:41:11 2026 by rpki-client