Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/yOXKC3E1yiHk-mHTdp3_5Ud7-vc.roa
File: yOXKC3E1yiHk-mHTdp3_5Ud7-vc.roa (raw, json)
Hash identifier: UrGgYaummeApzhSb8xfxLeNUjJ7TzV1P+NKJnp9gtDI=
Subject key identifier: C8:E5:CA:0B:71:35:CA:21:E4:FA:61:D3:76:9D:FF:E5:47:7B:FA:F7
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0A4EC0C6784DF60BD428BF38C87F1FE57
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/yOXKC3E1yiHk-mHTdp3_5Ud7-vc.roa
Signing time: Tue 15 Sep 2026 11:55:28 +0000
ROA not before: Tue 15 Sep 2026 11:55:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142146
IP address blocks: 46.34.29.0/24 maxlen: 24
82.108.211.0/24 maxlen: 24
87.84.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:ec:0c:67:84:df:60:bd:42:8b:f3:8c:87:f1:fe:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 15 11:55:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8e5ca0b7135ca21e4fa61d3769dffe5477bfaf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6f:96:20:50:b6:d2:5d:a3:54:c7:83:61:dd:
9c:03:be:f3:e5:58:c7:1e:f7:9e:71:35:69:5c:1c:
60:7b:b0:9e:fc:cd:b7:39:bf:26:1c:80:79:8a:09:
ee:38:16:92:5f:b9:ab:4d:92:16:35:22:56:82:e2:
c6:30:1b:a9:f4:d2:64:73:a7:4c:3f:e3:f8:c5:72:
05:5f:dc:4d:8d:9f:75:13:57:ce:52:dc:39:ec:7d:
cc:ca:fb:d3:0c:4e:f1:91:ec:49:f2:3b:ac:6b:7c:
1e:56:64:79:08:c3:c0:02:1c:b8:d0:0b:77:c1:d8:
80:f0:8e:82:14:d7:b1:e5:27:fc:52:0e:c1:c6:7a:
f5:10:5c:63:71:37:22:45:31:10:8f:31:df:cc:51:
df:37:9a:65:5f:4c:b6:90:2a:b4:45:42:be:a6:cf:
fa:6d:96:bd:ac:62:ae:a6:28:b8:d1:55:11:21:5a:
1c:1b:ae:bd:46:7d:ca:c1:9c:9b:43:d7:7d:83:e2:
d0:75:e5:45:87:55:31:23:78:e6:24:55:74:13:c1:
cf:20:5f:34:20:40:3f:1a:55:54:79:2f:7f:a9:57:
8d:e1:4b:9a:35:05:db:f9:ac:a1:4e:8f:ad:df:9b:
10:3b:35:16:49:3c:4d:a0:24:5a:3b:2c:85:6e:3d:
ca:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E5:CA:0B:71:35:CA:21:E4:FA:61:D3:76:9D:FF:E5:47:7B:FA:F7
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/yOXKC3E1yiHk-mHTdp3_5Ud7-vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.29.0/24
82.108.211.0/24
87.84.200.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:b9:a2:3f:47:13:1c:10:df:c1:26:17:a2:f4:b3:c8:46:6d:
4e:5d:cf:22:ce:94:43:e0:97:e3:c0:c5:3c:7f:c5:01:14:d0:
3d:89:50:10:7b:f0:c1:3f:76:11:a4:29:10:41:2c:3f:f4:50:
8d:cf:46:17:e4:71:1e:3a:ef:0b:81:b2:f7:e1:82:f0:86:0e:
6b:2d:3c:44:b9:eb:c2:2e:f2:56:de:ad:5b:c3:a6:c0:9b:ac:
f5:32:3a:1c:70:98:98:fb:65:41:ed:d5:b1:3c:da:36:86:8d:
f9:f5:00:fa:55:3b:38:37:ff:0e:8a:f7:2f:2b:62:8c:f4:43:
37:79:67:0a:04:db:0e:93:fd:71:64:3e:33:2f:07:6c:c9:2e:
7f:76:b4:b9:a1:f4:2a:e7:67:d4:c5:b4:4a:cd:f8:f4:0e:d7:
aa:25:5a:d1:7c:0c:fe:b2:35:09:78:c9:5c:55:38:ff:0e:4c:
98:e1:dd:31:3b:5c:97:cb:32:09:32:c2:25:d7:76:10:03:3c:
19:9f:bd:3f:b6:24:90:0e:ca:98:c7:10:b0:93:ac:ca:48:70:
0c:1c:6e:62:d5:03:30:bd:97:29:1c:b8:06:9d:3d:34:9d:fd:
38:53:40:08:51:7a:4b:f3:b2:9f:be:96:33:22:df:cb:6b:ca:
34:45:9d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:21:14 2026 by rpki-client