Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/y2acnhD1Qle98ny8SvQjdRwfXUY.roa
File: y2acnhD1Qle98ny8SvQjdRwfXUY.roa (raw, json)
Hash identifier: cxToiNZ+ktSM6/cxvq+vDOW9En/IhYo/LkdV4bJ3yr4=
Subject key identifier: CB:66:9C:9E:10:F5:42:57:BD:F2:7C:BC:4A:F4:23:75:1C:1F:5D:46
Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Certificate serial: 019D48AFFBBF026A9E0742CB27B3AC47EF46
Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/y2acnhD1Qle98ny8SvQjdRwfXUY.roa
Signing time: Wed 01 Apr 2026 10:56:25 +0000
ROA not before: Wed 01 Apr 2026 10:56:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137517
IP address blocks: 95.170.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:48:af:fb:bf:02:6a:9e:07:42:cb:27:b3:ac:47:ef:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Validity
Not Before: Apr 1 10:56:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb669c9e10f54257bdf27cbc4af423751c1f5d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:82:30:7d:cf:fd:57:46:69:2e:87:a5:27:62:
e5:9b:7f:1f:9b:ab:54:6f:17:c3:0f:93:d7:2e:29:
7b:7e:c6:3c:06:59:19:ca:43:04:b5:8e:b7:e6:50:
ec:f5:16:8b:49:66:fb:08:3f:11:84:1f:bb:8b:19:
05:88:8e:92:2f:39:dd:66:af:a3:a5:4d:de:ff:a8:
6c:83:37:61:08:2b:0c:86:9d:5c:94:da:35:a5:7b:
95:1b:ca:f9:ab:84:db:cf:ff:17:e4:70:cd:76:1a:
09:5f:40:1f:4f:06:f8:d2:f5:b0:d7:ba:96:11:49:
6c:5b:e3:05:6d:15:91:a2:7d:11:f1:61:eb:ab:2f:
4e:67:c5:0b:a7:1a:6e:91:3c:42:47:3d:51:5a:c0:
0c:fd:7a:66:d2:5d:8e:c6:76:60:9e:47:ed:be:57:
2f:18:9c:2e:1e:29:c9:af:db:00:b3:22:33:be:df:
3b:f8:79:89:b2:f3:5a:a2:b3:28:a7:c9:03:db:52:
9b:a5:81:58:cf:83:6b:84:eb:d1:c4:0e:37:c4:42:
d3:20:11:08:d2:a0:51:d3:b8:5f:02:de:f5:0f:cb:
87:f8:ef:a9:69:32:e6:d3:98:58:26:dc:2f:4f:ac:
16:1b:f9:f4:39:52:6a:1a:39:f8:29:aa:1c:1f:ba:
61:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:66:9C:9E:10:F5:42:57:BD:F2:7C:BC:4A:F4:23:75:1C:1F:5D:46
X509v3 Authority Key Identifier:
keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/y2acnhD1Qle98ny8SvQjdRwfXUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.170.12.0/24
Signature Algorithm: sha256WithRSAEncryption
82:81:c2:13:8f:43:3e:27:ed:c6:f7:f1:e7:87:e1:ed:68:39:
a3:81:91:c6:63:14:92:57:05:2f:34:2f:ef:e5:c0:c8:75:32:
e0:44:7e:79:e5:f3:4e:5c:ff:27:96:d6:4f:62:ee:8c:47:af:
22:d1:fe:72:7e:27:28:92:20:35:32:a0:7d:a0:a3:60:a6:52:
86:55:da:aa:ed:fd:e7:c6:78:85:d6:46:ff:02:2f:d5:4f:f4:
fa:ad:b1:99:fa:f5:91:b8:9e:52:ef:69:5b:b0:7a:84:f1:7a:
4f:a8:24:36:c6:b0:3c:81:25:b6:97:dc:a4:c2:22:1f:a1:7b:
70:32:6f:42:ad:0e:22:e4:e8:dd:f2:0e:82:ee:2e:4d:b8:0d:
e2:21:d9:82:0a:ee:74:be:e6:c6:f9:d2:4d:05:d7:e5:13:de:
a9:c9:1c:b5:d1:6b:88:a2:da:04:bb:d1:36:e7:ca:c7:99:97:
7a:2f:9a:26:d0:45:8a:4c:61:e5:6b:0e:0d:bc:5c:63:75:3a:
2c:48:47:bb:28:70:d1:3c:5a:3b:70:13:97:15:c7:b3:0d:f0:
79:81:cc:18:9c:41:23:6d:57:e9:a7:84:72:71:50:f1:b8:16:
41:be:64:87:a1:7f:75:35:36:df:a6:5d:b9:2c:38:26:a3:b0:
12:2b:56:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:14:32 2026 by rpki-client