Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Ya8tk4RWGMgTfVGdXZPIzeu1Ips.roa
File: Ya8tk4RWGMgTfVGdXZPIzeu1Ips.roa (raw, json)
Hash identifier: IB7HwrsGj2BEZqmwr/+BMxWw49+dPUyB2sOyqTd63f8=
Subject key identifier: 61:AF:2D:93:84:56:18:C8:13:7D:51:9D:5D:93:C8:CD:EB:B5:22:9B
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 019ECA008476845FD81586366999075CD789
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Ya8tk4RWGMgTfVGdXZPIzeu1Ips.roa
Signing time: Mon 15 Jun 2026 06:38:11 +0000
ROA not before: Mon 15 Jun 2026 06:38:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202914
IP address blocks: 81.29.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ca:00:84:76:84:5f:d8:15:86:36:69:99:07:5c:d7:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jun 15 06:38:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61af2d93845618c8137d519d5d93c8cdebb5229b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a0:9c:67:12:3e:27:d2:80:79:d0:d9:d4:13:
1a:37:da:b1:18:ff:66:dd:a6:ba:94:ac:77:8e:34:
db:6e:42:33:32:ec:76:2b:c7:c7:71:bc:b4:cc:2b:
f1:fc:73:41:f5:46:de:2a:56:6f:42:89:8a:fc:da:
d4:df:59:c5:f0:65:12:63:77:e8:de:38:e8:3e:1c:
6d:03:50:bc:d1:cc:62:41:a1:cb:15:61:06:69:ee:
ab:dd:8e:3f:06:eb:3e:4c:71:ec:ac:b4:77:ef:45:
8e:88:c9:23:e5:f1:ca:be:33:d2:cc:5d:40:3d:4a:
31:a7:dd:3d:9c:a6:51:56:89:54:c9:be:c6:78:ee:
27:f3:63:d5:fd:c8:bb:00:90:75:97:d9:c1:d2:b9:
d1:66:c6:55:d8:7f:90:2d:4b:b2:bb:07:3a:7c:58:
74:d3:d4:52:b8:ce:1f:79:cb:9b:ea:ed:42:15:af:
2f:c6:ad:cd:55:80:2f:a2:ac:9b:49:e6:4e:62:91:
c5:17:91:0d:76:3c:c0:b0:a5:95:7f:2e:df:49:c8:
cc:bf:cb:d8:f5:f8:bf:66:8f:42:1b:6e:c4:b7:93:
56:7e:91:0f:a5:e2:d8:ba:72:bb:e9:52:44:ec:f7:
8f:fa:48:36:cb:db:0a:ee:a8:67:b3:e5:f5:1f:f7:
db:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:AF:2D:93:84:56:18:C8:13:7D:51:9D:5D:93:C8:CD:EB:B5:22:9B
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Ya8tk4RWGMgTfVGdXZPIzeu1Ips.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.148.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:30:17:c5:b6:50:76:64:9f:55:ae:37:98:32:48:8d:e1:f8:
3e:ea:3c:78:09:10:a2:96:02:d2:64:21:ff:95:8c:85:8b:1e:
be:d2:79:1e:d3:21:42:71:cf:c4:e1:43:0d:1a:64:2b:e8:b4:
32:1f:6e:f0:5d:54:47:53:aa:2f:74:26:71:a2:75:7d:5a:46:
da:08:dc:15:ba:4b:01:48:61:de:e8:91:03:6c:9d:99:a9:48:
a4:7e:2a:cc:5c:28:ce:67:ad:46:d7:34:74:7b:66:aa:a9:73:
46:eb:0a:45:e0:82:97:06:c1:da:55:5a:3a:74:ba:e6:e6:2d:
60:9c:53:0c:a4:9b:9c:8f:1a:86:94:1d:bb:f6:d4:cf:9b:ff:
bc:96:e0:ce:e8:fd:8d:13:02:39:66:00:52:cd:cf:ef:90:09:
43:a9:7f:3c:aa:eb:bf:ce:e8:6b:4a:de:37:af:1d:11:8e:ca:
92:ea:a6:2b:8e:49:10:cf:f5:67:01:e1:9d:90:5b:6e:61:51:
27:37:1e:fc:3d:cf:71:91:a8:da:42:fe:42:3e:07:78:42:32:
68:ff:46:dc:70:8a:75:9e:af:25:8e:05:fb:f6:ec:a3:b8:8b:
96:24:e6:7d:17:e2:7e:f4:ae:3b:b1:b3:8c:c6:e3:86:25:30:
9b:4d:2d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:55:28 2026 by rpki-client