Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/yw6q1hkAJlSyS4cx4aE_Somz8R0.roa
File: yw6q1hkAJlSyS4cx4aE_Somz8R0.roa (raw, json)
Hash identifier: yxlYFiZu48s1aJCqUUrEWED3axrhE7jpSTvifZqxXUo=
Subject key identifier: CB:0E:AA:D6:19:00:26:54:B2:4B:87:31:E1:A1:3F:4A:89:B3:F1:1D
Certificate issuer: /CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Certificate serial: 019D8B6C8C94887C23E5A71FEE351EBFCE21
Authority key identifier: 82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/yw6q1hkAJlSyS4cx4aE_Somz8R0.roa
Signing time: Tue 14 Apr 2026 09:57:19 +0000
ROA not before: Tue 14 Apr 2026 09:57:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58249
IP address blocks: 194.33.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8b:6c:8c:94:88:7c:23:e5:a7:1f:ee:35:1e:bf:ce:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Validity
Not Before: Apr 14 09:57:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb0eaad619002654b24b8731e1a13f4a89b3f11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8f:75:54:80:73:ee:a9:1a:10:c7:52:47:36:
d0:ac:59:8e:93:b3:7f:65:ab:e3:30:f7:af:01:68:
09:09:26:4a:f3:12:73:c4:cb:54:86:d8:4b:34:08:
3b:ac:61:59:d0:03:f2:5c:bd:47:3c:48:70:38:5b:
1f:71:b1:74:05:50:71:e1:36:02:69:00:20:98:b4:
7b:36:8f:04:41:5e:20:1b:52:d0:b7:b8:5a:fe:30:
fe:27:99:65:d4:f3:69:97:80:e7:7c:21:55:ca:30:
4f:16:d8:6f:a8:2d:f4:c8:94:c6:09:6f:a7:5f:45:
be:57:28:3f:52:b8:31:d7:f4:c5:e4:07:1b:88:b6:
b3:26:bc:80:b3:fd:b3:2c:72:55:1f:aa:fe:ea:4f:
7b:84:ff:f3:e3:0e:2d:bf:6b:65:52:2d:d3:71:4b:
f3:80:f5:d8:93:04:3a:1b:c1:67:5b:e0:f6:13:67:
45:d5:19:99:4c:bd:ad:77:17:39:1b:c3:2c:22:1c:
e4:d3:bb:7b:ff:66:09:fd:d6:56:4e:a7:b4:e1:25:
d6:be:46:30:39:1d:82:6e:11:e1:6f:a5:4d:3e:e1:
f6:2f:56:c4:23:ee:2a:74:19:5a:9d:47:bb:8b:26:
4f:e7:e8:25:5b:da:ae:69:93:75:16:74:12:e0:7d:
fa:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0E:AA:D6:19:00:26:54:B2:4B:87:31:E1:A1:3F:4A:89:B3:F1:1D
X509v3 Authority Key Identifier:
keyid:82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/yw6q1hkAJlSyS4cx4aE_Somz8R0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.124.0/24
Signature Algorithm: sha256WithRSAEncryption
51:27:87:b2:51:2e:2c:ac:7a:7c:e8:4a:0e:10:53:aa:02:e7:
cd:d8:a8:fb:e2:98:b0:ca:62:47:ce:a1:22:2d:01:66:a9:3c:
99:3e:61:0d:c4:4d:65:7d:3a:17:84:13:d6:39:71:cc:12:48:
e5:e8:ca:14:c5:ee:92:17:e9:ec:9d:19:c9:cb:93:0c:7f:6b:
ea:d5:a8:c7:1f:c6:cb:51:fa:7b:08:b9:d1:dc:c7:59:f0:d2:
78:b6:d0:00:8f:49:bb:60:f5:39:91:e2:e1:b8:6c:35:40:7e:
a4:1c:54:ff:3a:bd:d2:0d:e1:16:f5:a1:96:cc:c5:0c:82:f9:
95:f7:d5:26:8c:e7:4f:ba:43:36:95:98:1e:d8:5a:b9:a9:4f:
43:34:e1:7e:5b:eb:de:3d:7e:0a:4c:e7:46:74:05:96:ad:0c:
48:37:24:d0:ad:b6:56:e0:08:e7:5c:ed:96:c5:5f:5a:a3:58:
59:c0:5c:b2:33:1a:f4:bd:ee:e8:5b:6f:5b:20:7c:ef:c0:6e:
de:a2:ba:50:ab:79:33:63:e7:22:34:96:e5:c2:74:29:3b:26:
f0:d5:47:8d:d2:a8:c9:72:c1:27:74:fc:24:96:df:73:de:64:
fb:a8:17:84:53:7a:1d:15:d9:c3:65:78:b1:2e:f0:a6:4b:4a:
90:0e:fb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:02:45 2026 by rpki-client