Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/yAMDwwHx0OJAnZOEGPwEurNTfPY.roa
File: yAMDwwHx0OJAnZOEGPwEurNTfPY.roa (raw, json)
Hash identifier: Y+CqGx1vipPpCzhVGqEMP2VXL6GpbNsaqynSE27ySgE=
Subject key identifier: C8:03:03:C3:01:F1:D0:E2:40:9D:93:84:18:FC:04:BA:B3:53:7C:F6
Certificate issuer: /CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Certificate serial: 01A0A455E3BD25577B582813AAB0414EB7BE
Authority key identifier: AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/yAMDwwHx0OJAnZOEGPwEurNTfPY.roa
Signing time: Tue 15 Sep 2026 09:11:27 +0000
ROA not before: Tue 15 Sep 2026 09:11:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48671
IP address blocks: 89.38.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:55:e3:bd:25:57:7b:58:28:13:aa:b0:41:4e:b7:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Validity
Not Before: Sep 15 09:11:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c80303c301f1d0e2409d938418fc04bab3537cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5f:8a:61:01:a9:fe:2d:b1:03:15:58:ba:09:
03:f6:a3:ea:5b:23:23:43:07:f9:8d:2f:7b:8f:bf:
46:d5:08:d4:04:e7:b9:ad:6e:c8:a6:77:8f:ec:8d:
99:1d:d9:a5:45:56:3a:22:a1:ec:db:47:53:6d:2f:
b6:c8:fa:dd:00:6f:70:d1:93:5d:15:44:db:06:c8:
48:8d:a5:d9:e3:4c:02:c2:3d:66:eb:03:ea:e6:5d:
8b:71:b1:a9:80:20:8c:b6:76:7c:56:fa:c3:7a:31:
08:3e:94:d0:1d:09:87:e7:bb:ba:cd:a9:1c:a3:74:
c4:44:d7:63:bf:91:e4:71:0e:dd:dc:c2:db:f0:3e:
53:1d:1b:cc:55:4f:3b:1a:88:08:1d:27:ce:67:38:
b5:84:e5:fa:9a:a1:ea:1d:1c:74:50:01:eb:e1:09:
87:36:b0:df:9d:2d:74:27:60:4f:c8:bf:fd:6a:74:
ae:9b:63:66:4e:bb:57:7b:af:ea:5f:6e:bc:34:3e:
40:69:73:39:32:28:c5:43:07:db:32:3a:0c:9a:22:
30:b3:f8:6b:49:db:4c:1f:33:48:55:09:fb:a2:19:
8b:4c:0f:b4:b3:de:04:26:12:80:16:82:a7:5d:d6:
c2:07:4f:44:23:89:6b:d2:88:23:78:11:da:ca:0e:
29:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:03:03:C3:01:F1:D0:E2:40:9D:93:84:18:FC:04:BA:B3:53:7C:F6
X509v3 Authority Key Identifier:
keyid:AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/yAMDwwHx0OJAnZOEGPwEurNTfPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.232.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:83:eb:02:76:e4:3f:42:44:09:3b:7e:3d:e9:59:0f:22:30:
d6:6b:a6:ab:4f:64:99:d1:a4:e6:95:fe:66:20:fa:d6:36:c4:
e6:b2:d9:9e:e9:cf:5e:d9:b4:d1:81:3e:41:44:9b:0e:5a:c6:
99:8d:ad:ee:a4:80:a7:8a:9b:30:4b:89:9a:9a:f6:d2:26:f6:
f2:2f:89:4c:a5:a3:25:39:ef:62:5f:17:a2:fd:ca:ba:44:d9:
06:a9:30:4e:7a:ed:2f:63:e5:af:4c:c2:c3:c4:5f:a1:10:aa:
52:5e:4e:04:69:f8:e2:63:4c:0f:07:44:59:87:92:d6:04:d8:
ad:31:ee:21:ae:c9:07:68:47:a2:d5:15:4b:a7:31:14:0b:f9:
6b:62:d3:3b:76:10:d2:32:da:24:8d:80:8b:e5:e8:10:9d:d8:
b2:86:3f:20:f2:26:a1:e1:e4:0c:56:3c:fc:85:25:08:d5:18:
30:1a:31:6c:a9:87:57:36:d3:6d:5a:71:80:bd:4c:86:0f:6d:
11:08:87:9b:7f:1e:ac:00:6f:34:ce:b4:71:48:9f:fc:e7:4c:
0e:fb:76:24:10:7b:55:92:57:bd:4b:d7:0b:e9:88:1b:04:39:
88:60:58:a5:0d:82:31:ff:0d:6f:4b:f1:be:5d:56:a3:83:b6:
76:9a:53:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:52:23 2026 by rpki-client