Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/YDFh77yT-IAeidtbkshLWKYL558.roa
File: YDFh77yT-IAeidtbkshLWKYL558.roa (raw, json)
Hash identifier: 9yFB7HILF1LINHTtWaNZ1o6vHvdX/sGMAdOvo7fcqRw=
Subject key identifier: 60:31:61:EF:BC:93:F8:80:1E:89:DB:5B:92:C8:4B:58:A6:0B:E7:9F
Certificate issuer: /CN=2ef67b74ce8f2a4ca350163a7b3e13c37173c7ae
Certificate serial: 01A0D756A514EDABBBA996259A8819F78B48
Authority key identifier: 2E:F6:7B:74:CE:8F:2A:4C:A3:50:16:3A:7B:3E:13:C3:71:73:C7:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/YDFh77yT-IAeidtbkshLWKYL558.roa
Signing time: Fri 25 Sep 2026 06:52:54 +0000
ROA not before: Fri 25 Sep 2026 06:52:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206092
IP address blocks: 136.176.193.0/24 maxlen: 24
136.176.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.mft
rsync://rpki.ripe.net/repository/DEFAULT/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:56:a5:14:ed:ab:bb:a9:96:25:9a:88:19:f7:8b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ef67b74ce8f2a4ca350163a7b3e13c37173c7ae
Validity
Not Before: Sep 25 06:52:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=603161efbc93f8801e89db5b92c84b58a60be79f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bc:89:7b:18:9e:1e:42:f6:6a:25:25:67:cb:
3e:bf:22:85:7c:3a:d7:78:de:2d:3a:7e:5a:d4:94:
fa:2a:93:55:05:d6:72:c5:6b:c0:9c:8f:9f:9b:91:
b5:3d:76:1e:eb:26:a2:d3:59:79:2d:60:4d:65:db:
b8:e4:46:7e:f0:bb:f8:2b:45:fb:6e:73:70:8e:c3:
f7:ec:32:38:df:20:43:72:4f:fd:9a:f8:e6:34:ff:
58:e5:c0:5d:24:e4:e4:7c:8c:bf:b5:f3:1b:ba:ff:
c6:9e:f6:4f:cf:41:e3:8c:d0:43:ce:04:b2:37:cf:
80:c9:4b:ce:13:cb:18:46:42:2d:07:50:33:45:e6:
8d:8f:42:87:b4:60:d0:51:ed:62:a9:71:a5:bf:b4:
aa:de:8c:0b:ed:9c:7d:07:e3:03:6e:1e:ae:80:a2:
c0:c8:c9:97:3b:4b:89:53:47:b1:27:99:fd:2d:ff:
a7:82:c0:66:c3:13:f3:93:e1:3a:5c:4f:33:e2:f9:
6c:d1:ee:4f:8c:65:09:6b:d8:cb:55:e6:c5:e8:4a:
56:a8:3f:8c:25:e3:1c:03:85:f5:c0:ee:20:fc:88:
7b:37:c3:e0:14:fe:b3:93:cd:02:7e:c7:f5:13:f5:
8b:d1:81:34:f1:ae:e1:97:4e:b2:2c:ce:44:0f:3c:
bb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:31:61:EF:BC:93:F8:80:1E:89:DB:5B:92:C8:4B:58:A6:0B:E7:9F
X509v3 Authority Key Identifier:
keyid:2E:F6:7B:74:CE:8F:2A:4C:A3:50:16:3A:7B:3E:13:C3:71:73:C7:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/YDFh77yT-IAeidtbkshLWKYL558.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/19ce75-14e3-4707-af45-0f93ee335c23/1/LvZ7dM6PKkyjUBY6ez4Tw3Fzx64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.176.193.0/24
136.176.216.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:78:77:5f:6e:c5:37:a1:e9:e1:b7:99:1c:75:67:17:00:c0:
69:88:31:ba:27:a6:8d:9b:6b:8b:72:79:3b:db:f9:f1:b4:e2:
7b:03:c9:84:76:49:8f:5e:d3:a9:35:60:0f:ff:10:a4:7e:6e:
76:78:50:92:ce:29:94:dd:20:ff:f1:35:b1:2d:5c:db:69:ff:
b3:c8:30:90:a4:51:4d:fd:99:a9:42:ed:fb:ba:99:ca:51:b7:
b6:d2:f0:94:40:ce:02:e9:72:4e:de:83:84:bb:0c:f2:1d:95:
03:26:86:30:dd:52:2e:7c:6e:66:77:a1:05:a0:b7:04:25:c2:
17:91:2f:5e:df:ea:4a:41:be:07:47:f6:74:27:a9:ab:22:66:
c6:42:10:3e:8c:04:eb:41:e0:51:e6:c1:a4:d0:c0:ad:fa:e9:
c1:52:3a:de:b8:6f:2e:9e:8b:53:99:45:5a:8b:d4:c8:e2:64:
c5:15:8b:a5:94:6d:f7:b7:df:ee:f0:aa:72:19:aa:70:91:c5:
0e:03:ca:be:d2:a1:37:bb:d9:46:6b:71:4e:93:b4:e4:47:9f:
71:ff:d3:b1:92:7f:c0:04:6d:28:16:91:4e:36:f5:07:bb:45:
f9:fc:84:b5:64:7b:57:ac:62:53:96:8d:05:a2:41:d6:e1:e8:
c1:bb:32:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:29:50 2026 by rpki-client