Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/YGc8XwIVxvPvNOy1PgoUyW2QPp0.roa
File: YGc8XwIVxvPvNOy1PgoUyW2QPp0.roa (raw, json)
Hash identifier: jYxSVOKSDjKakNAM1hB0qhbPKHM/2nh6XhBXQd6OChs=
Subject key identifier: 60:67:3C:5F:02:15:C6:F3:EF:34:EC:B5:3E:0A:14:C9:6D:90:3E:9D
Certificate issuer: /CN=4459120809c23bf3033e3f573995276f0c7a2533
Certificate serial: 01A0AAA5CCDE4C9383ED0D68EDA1C570F912
Authority key identifier: 44:59:12:08:09:C2:3B:F3:03:3E:3F:57:39:95:27:6F:0C:7A:25:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/YGc8XwIVxvPvNOy1PgoUyW2QPp0.roa
Signing time: Wed 16 Sep 2026 14:36:27 +0000
ROA not before: Wed 16 Sep 2026 14:36:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218852
IP address blocks: 178.175.168.0/24 maxlen: 24
178.175.169.0/24 maxlen: 24
178.175.170.0/24 maxlen: 24
178.175.171.0/24 maxlen: 24
178.175.172.0/24 maxlen: 24
178.175.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 17:58:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:a5:cc:de:4c:93:83:ed:0d:68:ed:a1:c5:70:f9:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459120809c23bf3033e3f573995276f0c7a2533
Validity
Not Before: Sep 16 14:36:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=60673c5f0215c6f3ef34ecb53e0a14c96d903e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f4:ec:f6:c5:6d:26:ac:43:92:a4:3b:0e:2f:
a6:c1:a2:0c:4f:0f:bd:16:8d:d2:d7:46:c7:2f:86:
93:5e:d2:fd:8c:5a:61:88:b5:4c:b0:6f:a2:f0:29:
38:7f:a2:11:02:06:47:7c:c6:5c:a5:1e:b3:f9:47:
d7:02:af:d8:b0:74:b7:0c:ca:07:1c:2a:90:38:16:
99:eb:ed:87:1b:86:6a:80:3e:fa:56:9b:8d:34:83:
fc:28:39:8e:f4:61:05:10:13:6a:ba:cd:03:90:37:
87:a4:3f:14:ba:d2:c8:7a:34:64:fc:52:4d:23:d0:
fe:e5:0e:7c:ac:2a:6b:c3:e8:38:f0:93:57:c2:a6:
c3:51:8d:6b:f0:93:94:ca:40:e3:75:09:30:24:20:
b3:d1:7e:f8:37:7b:be:4d:79:4d:fb:e3:d2:70:dd:
e5:76:93:05:b0:10:04:30:39:97:34:06:2e:fe:4f:
99:97:e2:42:3e:62:d9:56:80:bf:35:83:f4:38:9b:
b7:cd:0e:a5:84:52:ba:0a:5c:00:64:05:b2:ea:77:
fa:46:af:0f:67:dd:5e:13:d9:ea:e1:b6:9a:22:8b:
52:1c:22:90:5a:a0:39:29:68:22:0a:27:73:b1:e7:
88:1f:a2:9f:81:d0:d7:5b:f4:2e:d3:2d:38:05:61:
98:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:67:3C:5F:02:15:C6:F3:EF:34:EC:B5:3E:0A:14:C9:6D:90:3E:9D
X509v3 Authority Key Identifier:
keyid:44:59:12:08:09:C2:3B:F3:03:3E:3F:57:39:95:27:6F:0C:7A:25:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/YGc8XwIVxvPvNOy1PgoUyW2QPp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.175.168.0-178.175.173.255
Signature Algorithm: sha256WithRSAEncryption
8a:f6:36:10:7d:ba:07:59:87:3c:ce:0f:e3:3a:e9:cd:c7:09:
aa:2a:f7:f5:2d:a0:44:2c:90:2b:cc:8d:59:c6:a3:2d:06:c9:
3d:0e:21:ef:f7:ca:b4:5e:5d:7e:40:18:d3:ae:09:21:50:34:
68:e6:07:0a:93:10:55:3b:2e:7e:66:3d:6a:57:36:3a:33:ae:
c6:41:aa:56:0f:26:a9:1f:db:14:0f:6f:a2:bc:78:f3:a5:57:
ef:a7:8f:60:af:41:ac:70:ca:c1:a1:73:dc:7f:78:fe:b9:79:
f2:a9:da:a3:9d:de:9b:4a:51:84:6d:a6:a9:1e:2e:21:cf:c4:
7d:9f:49:6a:b5:6a:14:f0:b6:a3:70:93:4f:ab:17:1c:33:1a:
44:6f:6b:51:86:d3:29:d2:5f:7c:aa:c4:57:9b:04:36:91:ac:
2e:dd:c6:76:5d:bd:74:4e:09:34:ed:89:6d:3f:fd:81:8a:0e:
72:6b:e9:bd:42:38:c3:e4:43:3f:90:39:e5:ba:8b:fa:e9:1e:
83:81:c3:2a:53:b4:15:b3:c3:d4:3f:40:b7:cd:61:93:ee:c3:
8d:96:09:c0:4d:01:45:4c:be:b3:b0:c4:54:3c:9b:62:c7:4c:
8b:a0:43:e9:fe:53:e3:36:4e:d8:bf:7a:81:c2:a5:98:73:d1:
fe:94:37:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:12:50 2026 by rpki-client