Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/y1Csr5At2N8XQeBr1r6h-Mv6FEg.roa
File: y1Csr5At2N8XQeBr1r6h-Mv6FEg.roa (raw, json)
Hash identifier: l0l9dSE1CtcsEYj8Pnn7aV0ie5hR/1HukMTFiup0/DI=
Subject key identifier: CB:50:AC:AF:90:2D:D8:DF:17:41:E0:6B:D6:BE:A1:F8:CB:FA:14:48
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0A5982C69B3CFE176F07CCC7B3F9CA352
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/y1Csr5At2N8XQeBr1r6h-Mv6FEg.roa
Signing time: Tue 15 Sep 2026 15:03:28 +0000
ROA not before: Tue 15 Sep 2026 15:03:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154648
IP address blocks: 82.109.224.0/22 maxlen: 24
87.84.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:98:2c:69:b3:cf:e1:76:f0:7c:cc:7b:3f:9c:a3:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 15 15:03:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb50acaf902dd8df1741e06bd6bea1f8cbfa1448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:85:02:8d:de:1e:d2:e8:bc:9e:09:00:e7:fd:
da:b8:b7:7f:5a:4d:b4:67:bb:61:ee:57:0f:4f:92:
7c:87:b5:eb:ee:20:16:77:bd:43:84:9a:fa:c8:a3:
17:db:d1:e7:bc:60:e1:24:37:8c:bf:00:f5:ef:25:
83:73:2f:3c:ca:37:c9:df:bd:24:e9:1d:0f:18:74:
99:19:61:f2:51:e3:e7:97:ad:ea:25:40:e2:9b:43:
c1:19:91:8b:33:e8:61:6c:25:07:27:b7:4e:d1:22:
fe:9d:25:e4:bd:a2:eb:e6:30:8b:84:5f:b0:b9:89:
60:e2:3f:d2:06:1b:c8:e3:5b:8f:54:ee:fb:7e:a9:
0e:95:e2:41:51:d0:58:23:4b:c9:70:8b:42:d7:08:
a3:ee:44:25:4a:cc:e2:90:d9:bd:b2:4c:19:1a:76:
e4:c2:c2:0a:da:b7:65:7b:fb:97:4d:bf:30:75:4e:
d6:50:fa:94:48:a9:ab:f1:ef:f8:fa:f8:a8:26:83:
59:8c:bb:24:14:5a:c2:0a:38:41:25:3c:b6:61:63:
5c:80:c3:2c:cf:38:6a:7b:61:f5:72:7e:89:c8:85:
9b:28:f9:5c:03:f7:09:85:4c:81:d6:4e:6f:74:2b:
9f:b1:23:2d:1b:53:0f:cf:6a:28:1b:16:58:45:33:
39:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:50:AC:AF:90:2D:D8:DF:17:41:E0:6B:D6:BE:A1:F8:CB:FA:14:48
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/y1Csr5At2N8XQeBr1r6h-Mv6FEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.224.0/22
87.84.190.0/23
Signature Algorithm: sha256WithRSAEncryption
47:3c:35:a3:51:ca:ba:a4:af:5f:0f:ba:62:b7:ff:41:88:96:
9a:30:38:00:05:fa:b1:50:ff:34:04:a6:0c:0e:b3:b4:11:d1:
3b:11:9f:14:1a:94:13:3d:67:7f:5c:5f:1d:4c:dd:d3:9d:35:
60:b0:2a:5e:83:90:81:86:c8:66:83:e5:6a:55:b0:94:e6:74:
f6:0a:50:21:94:8a:04:a2:af:7b:d4:b7:90:ab:0e:22:b3:7e:
96:d7:09:de:c7:f5:f2:77:dd:30:83:08:f7:71:45:ba:11:64:
15:3f:34:29:4e:ac:11:a0:ad:3c:0b:c5:66:ba:23:2c:e9:1e:
67:a6:95:bf:e5:9f:21:be:17:50:79:fd:ca:b0:43:f5:a5:33:
2d:47:f6:e4:90:2c:54:8a:32:eb:83:08:3c:87:d4:e2:08:51:
1a:c4:9a:d1:3b:e4:0e:4b:8d:c6:71:93:b4:22:bb:75:4a:68:
1c:bc:17:ef:ed:8e:d7:ef:da:38:07:35:78:8a:27:da:f4:23:
28:8f:1c:e5:b0:a5:74:43:66:17:c9:04:bb:c3:bb:d7:c5:6d:
ea:27:4a:97:b2:7b:c2:e4:b4:b7:e0:2e:95:ce:62:14:35:73:
24:c4:9c:8a:8d:d8:e8:a5:bd:00:47:1c:f3:0a:e3:bd:2c:dc:
96:f6:fb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:22:18 2026 by rpki-client