Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/bd6229-bb6d-45c7-9c2d-6f3957ffc4ae/1/Y3VzoJn-G6AotjVH8MvzLWEsGmc.roa
File: Y3VzoJn-G6AotjVH8MvzLWEsGmc.roa (raw, json)
Hash identifier: NAemI75QGyX3xuubQFlHIzoJ5u9jYBV1F2kxkjMJ1Pk=
Subject key identifier: 63:75:73:A0:99:FE:1B:A0:28:B6:35:47:F0:CB:F3:2D:61:2C:1A:67
Certificate issuer: /CN=ce8f1e2cd6cb28150a5c89e5f9b088781134ceaf
Certificate serial: 01A019895D85D921B8BDDFEB84411DB89EA3
Authority key identifier: CE:8F:1E:2C:D6:CB:28:15:0A:5C:89:E5:F9:B0:88:78:11:34:CE:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zo8eLNbLKBUKXInl-bCIeBE0zq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/bd6229-bb6d-45c7-9c2d-6f3957ffc4ae/1/Y3VzoJn-G6AotjVH8MvzLWEsGmc.roa
Signing time: Wed 19 Aug 2026 10:20:27 +0000
ROA not before: Wed 19 Aug 2026 10:20:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44946
IP address blocks: 91.242.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/bd6229-bb6d-45c7-9c2d-6f3957ffc4ae/1/zo8eLNbLKBUKXInl-bCIeBE0zq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/bd6229-bb6d-45c7-9c2d-6f3957ffc4ae/1/zo8eLNbLKBUKXInl-bCIeBE0zq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zo8eLNbLKBUKXInl-bCIeBE0zq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:89:5d:85:d9:21:b8:bd:df:eb:84:41:1d:b8:9e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8f1e2cd6cb28150a5c89e5f9b088781134ceaf
Validity
Not Before: Aug 19 10:20:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=637573a099fe1ba028b63547f0cbf32d612c1a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0c:3e:2e:60:56:bf:03:63:aa:f5:c3:f9:e2:
2c:7f:a1:89:98:8f:bb:cb:06:d8:66:67:6e:01:f0:
eb:c4:9d:9d:e0:ed:57:42:30:bc:f1:20:c5:9d:01:
44:b1:e2:53:0b:54:af:7c:93:96:9a:c9:c2:81:b1:
42:86:e9:78:a3:06:34:60:1b:a4:bd:9f:ba:89:33:
f2:b5:0d:61:21:1f:d3:36:98:30:d0:a9:73:dd:96:
cf:14:df:d9:29:7d:3c:77:cd:ec:99:26:0e:87:57:
3d:15:39:47:fa:67:02:6d:e5:b4:a3:3a:f4:c1:34:
f2:cf:01:dc:64:f8:d1:b8:ba:d4:df:c0:82:bb:51:
2d:7f:cd:ca:1e:7a:db:47:1e:b0:54:2b:f2:46:9a:
00:62:b8:49:d8:b4:95:8d:26:8c:12:3d:25:30:8b:
54:14:19:58:e5:e8:9e:19:93:b8:95:a4:a4:53:7f:
5a:38:2a:dc:b7:c7:71:e3:eb:1b:79:40:ed:18:bd:
8d:20:20:d1:64:65:95:27:50:00:3f:83:cd:28:d1:
af:fc:01:0f:60:02:28:a1:8b:9b:aa:b5:48:7d:32:
c6:ae:ea:31:59:39:d2:10:ce:4b:50:45:33:79:e2:
76:89:05:b5:18:28:ea:8d:8a:78:d7:c7:69:6d:5e:
ec:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:75:73:A0:99:FE:1B:A0:28:B6:35:47:F0:CB:F3:2D:61:2C:1A:67
X509v3 Authority Key Identifier:
keyid:CE:8F:1E:2C:D6:CB:28:15:0A:5C:89:E5:F9:B0:88:78:11:34:CE:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zo8eLNbLKBUKXInl-bCIeBE0zq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/bd6229-bb6d-45c7-9c2d-6f3957ffc4ae/1/Y3VzoJn-G6AotjVH8MvzLWEsGmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/bd6229-bb6d-45c7-9c2d-6f3957ffc4ae/1/zo8eLNbLKBUKXInl-bCIeBE0zq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.212.0/24
Signature Algorithm: sha256WithRSAEncryption
45:2c:d7:fe:44:e9:d2:5b:7e:b0:92:d4:07:90:18:75:29:0b:
09:77:f0:44:22:14:a3:aa:81:e2:9d:2c:6c:12:f0:1d:04:eb:
b9:38:9c:60:18:b1:31:75:09:d0:e7:c4:20:58:7f:69:4b:17:
2f:90:b5:6d:5d:dc:64:85:24:4e:74:7a:eb:50:ad:8c:c5:50:
e6:67:da:97:e9:f7:7b:65:4b:e3:7c:6e:3c:b7:fd:87:b3:b6:
23:13:fb:ea:97:b6:18:6c:42:26:ed:58:37:70:bf:76:c7:d2:
1f:1c:a6:5b:3d:3c:f9:c9:9b:2d:62:68:bc:f7:73:38:a7:d3:
ab:83:21:c4:49:12:97:b6:e8:04:9e:b8:76:22:49:f9:54:12:
65:57:09:04:f8:a5:ac:db:84:61:44:b4:89:8e:ff:63:47:b4:
8d:f5:76:c1:f9:61:9a:6a:b1:61:28:9e:a0:c5:e2:7c:c8:ab:
c5:a8:5b:02:7b:c3:6a:b3:2c:c8:34:c4:af:cf:51:a0:23:c6:
69:3b:f9:2e:57:ed:18:2f:64:c1:5e:d6:0a:83:12:0a:7d:79:
39:99:59:c7:21:ff:43:dd:2f:98:9f:be:ba:3e:eb:3a:0b:71:
82:98:2b:75:64:57:ea:5e:e3:68:6f:3b:ab:0a:27:48:3c:f0:
4a:b4:e9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:45:17 2026 by rpki-client