Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/Yu1zmysTEBKjL5YYLMMg4Z_eWEA.roa
File: Yu1zmysTEBKjL5YYLMMg4Z_eWEA.roa (raw, json)
Hash identifier: KRT9o5BiHue3+B57E9epeCM9JN4yPOhoqN4HYF+hLEU=
Subject key identifier: 62:ED:73:9B:2B:13:10:12:A3:2F:96:18:2C:C3:20:E1:9F:DE:58:40
Certificate issuer: /CN=7c3c39d1899e699bf5177418ee381489edff4380
Certificate serial: 01A09026FBF72EABFCAA1603008DEDF1516F
Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/Yu1zmysTEBKjL5YYLMMg4Z_eWEA.roa
Signing time: Fri 11 Sep 2026 11:07:49 +0000
ROA not before: Fri 11 Sep 2026 11:07:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215294
IP address blocks: 185.27.178.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:26:fb:f7:2e:ab:fc:aa:16:03:00:8d:ed:f1:51:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380
Validity
Not Before: Sep 11 11:07:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62ed739b2b131012a32f96182cc320e19fde5840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:6e:5f:18:0b:45:33:21:a6:03:43:43:fc:6d:
06:5d:b6:f8:75:65:1c:7c:fd:8d:29:c9:9e:a7:ac:
ba:e9:5e:6d:a9:43:a1:e0:94:86:36:86:13:dd:60:
a2:38:9c:73:2b:80:c3:dd:16:1e:c1:93:47:90:c9:
8d:10:cd:43:4c:bb:bc:7f:5e:60:20:81:6a:f3:bd:
c3:f4:21:ea:86:cf:c1:51:4d:6a:0a:54:5c:61:fd:
7d:28:45:14:ce:62:d0:1a:38:47:2a:e1:9f:71:aa:
b7:ea:e5:8d:40:a3:fc:2a:de:b3:5e:21:1a:f4:1a:
27:0d:b9:d3:19:18:67:91:99:13:28:8f:56:55:57:
87:49:47:a7:06:d1:b7:88:95:c9:48:3f:8d:67:67:
af:19:66:79:2b:fe:7e:9c:93:e6:fd:0c:dc:9e:2f:
54:30:bf:6f:bd:2a:10:cf:3a:14:27:e4:4c:6a:7b:
cb:9a:dd:6b:96:91:2f:67:c1:83:33:8b:50:50:05:
9e:d8:16:af:60:22:e1:23:bb:95:2f:c3:40:31:9a:
a2:2b:99:f8:d3:32:7b:61:c4:04:66:81:4d:d0:53:
36:cd:26:8f:83:74:fb:e1:44:0d:f9:55:50:25:5f:
32:65:86:53:0f:7b:8e:9f:7a:85:0d:a0:09:58:59:
09:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:ED:73:9B:2B:13:10:12:A3:2F:96:18:2C:C3:20:E1:9F:DE:58:40
X509v3 Authority Key Identifier:
keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/Yu1zmysTEBKjL5YYLMMg4Z_eWEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.27.178.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:0b:81:63:dd:3b:e9:b1:da:21:9a:19:61:ef:69:c6:9c:b1:
a7:a9:4a:8f:1b:81:f1:b2:9c:f5:05:fd:65:4b:11:6b:59:41:
10:8f:4e:e8:ee:f1:00:04:87:c3:2d:22:6a:f2:d1:c3:70:a4:
46:6f:b8:a8:96:fe:51:0d:ce:f0:5a:d8:47:40:31:57:c3:35:
70:d3:30:33:71:cb:43:8d:7f:45:d2:1a:f8:36:fa:8a:b9:20:
8e:d9:26:d9:bb:6a:3f:d5:77:35:13:f1:ff:af:a1:50:41:93:
43:1a:37:29:77:88:db:a6:7f:1a:12:e0:e1:75:d5:00:08:c7:
7f:3b:25:e0:d5:af:8e:2c:59:94:05:74:25:42:70:99:1a:97:
9e:2d:c7:ce:19:24:a2:8e:89:3a:43:7a:eb:7e:1c:bb:9e:8e:
f1:00:62:7b:70:d2:26:4f:10:30:bd:ae:30:7c:4d:64:13:b4:
cf:83:b7:72:51:06:b7:7c:4b:b6:e1:87:17:25:fb:42:75:1d:
bf:44:5f:8e:ff:68:52:5b:d0:5d:0d:42:4c:7e:22:6f:61:6f:
1f:d8:cb:c8:66:b2:10:ee:ce:5f:2f:7e:49:07:ba:b2:3e:00:
fd:7f:3e:55:6f:c2:01:64:08:0f:40:5b:29:d2:34:fd:4a:bb:
6f:42:a7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:58:29 2026 by rpki-client