Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/Y8VlvghNzow3X2EDqq7nsovsvYM.roa
File: Y8VlvghNzow3X2EDqq7nsovsvYM.roa (raw, json)
Hash identifier: tV/yAkzLhEHgulAxOFJx7q2gmyEPCZA1rHMBVOUmeq8=
Subject key identifier: 63:C5:65:BE:08:4D:CE:8C:37:5F:61:03:AA:AE:E7:B2:8B:EC:BD:83
Certificate issuer: /CN=509f391f29d92078ba6e2c76faa2f8ae947343e6
Certificate serial: 01A06B6FD45DD0B164113C9DC1D20B191644
Authority key identifier: 50:9F:39:1F:29:D9:20:78:BA:6E:2C:76:FA:A2:F8:AE:94:73:43:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/Y8VlvghNzow3X2EDqq7nsovsvYM.roa
Signing time: Fri 04 Sep 2026 08:01:26 +0000
ROA not before: Fri 04 Sep 2026 08:01:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47638
IP address blocks: 92.243.76.0/22 maxlen: 24
185.130.156.0/22 maxlen: 24
185.214.220.0/22 maxlen: 24
2a07:6a80::/29 maxlen: 48
2a0d:d5c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6b:6f:d4:5d:d0:b1:64:11:3c:9d:c1:d2:0b:19:16:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509f391f29d92078ba6e2c76faa2f8ae947343e6
Validity
Not Before: Sep 4 08:01:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63c565be084dce8c375f6103aaaee7b28becbd83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4e:8c:95:b6:9b:20:26:6a:70:00:66:73:0d:
28:47:3b:ba:09:20:6d:19:1f:b5:e0:2c:b9:d6:50:
9d:b8:c1:72:e4:bc:e0:38:7c:aa:72:8b:fb:e7:66:
34:33:09:34:d2:55:be:45:4d:aa:17:af:46:68:32:
97:42:69:74:c8:c9:ea:4b:21:7c:3d:40:4f:8b:31:
e5:f2:d8:f5:c3:6c:ff:3a:9b:e9:c8:bb:b6:a1:c2:
7e:23:ea:ba:17:0d:0d:33:f7:93:86:ce:ca:70:45:
8a:c7:b0:47:7f:21:5e:22:5a:20:f5:4d:62:1d:5e:
c9:0f:b5:69:85:60:f3:cf:8a:ed:68:f7:d4:ca:1c:
66:2e:10:b6:f2:42:a3:9b:b4:78:1f:9c:cd:a5:f8:
b6:42:a6:59:4c:18:5e:c4:03:c1:65:7e:8d:36:fe:
7d:d0:1c:e6:a6:79:2b:e4:fa:9f:8c:10:4f:38:aa:
11:37:30:da:f3:ba:d2:96:cc:dc:37:e3:31:4e:c7:
3b:87:c0:10:5b:43:0c:22:68:2e:41:df:71:59:43:
38:e6:ff:b9:f6:d7:38:fc:a3:bc:4a:a7:23:78:ae:
39:0d:79:44:bd:f6:9f:80:89:c3:ee:ff:09:78:7e:
2d:4a:25:2a:6b:04:90:94:bf:4a:c9:ac:27:9e:d7:
c0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C5:65:BE:08:4D:CE:8C:37:5F:61:03:AA:AE:E7:B2:8B:EC:BD:83
X509v3 Authority Key Identifier:
keyid:50:9F:39:1F:29:D9:20:78:BA:6E:2C:76:FA:A2:F8:AE:94:73:43:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/Y8VlvghNzow3X2EDqq7nsovsvYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.243.76.0/22
185.130.156.0/22
185.214.220.0/22
IPv6:
2a07:6a80::/29
2a0d:d5c0::/29
Signature Algorithm: sha256WithRSAEncryption
1c:aa:b9:bf:b5:00:dd:1e:c6:cd:c3:a7:52:6c:bb:6c:94:96:
31:aa:5a:75:cb:e8:8a:66:d2:73:54:f3:7b:2e:0d:df:c8:49:
52:b2:1c:40:6e:ee:b0:48:29:fb:1d:c7:e8:36:ff:6b:60:4f:
e9:08:98:fb:49:e9:b6:49:c1:1c:97:30:bd:36:bf:19:b3:57:
83:25:1c:a6:9e:53:31:0b:3a:ab:01:30:f7:6a:77:df:f0:ce:
96:84:5e:b5:cf:c6:2a:65:f1:4d:02:ff:4b:3f:ee:00:d5:f3:
32:fd:d1:17:9c:56:61:5b:99:6f:83:97:19:58:80:d4:a2:90:
bf:88:4f:20:88:77:55:98:3b:a9:03:7f:c9:a8:53:09:ce:6b:
5b:60:1e:b6:b2:2e:b8:20:ab:e8:b1:ff:c4:a7:66:be:3a:d8:
4c:05:d2:10:f4:34:ae:e9:f7:e6:20:37:15:e9:c5:1d:c4:48:
e6:c3:4c:09:3d:a7:2f:88:6d:a5:c7:f1:c8:66:1e:49:37:1e:
c0:8c:ca:b8:ae:c8:4e:47:ff:39:d9:12:89:69:ea:e6:f3:54:
35:a6:f4:d3:13:0a:0a:03:7e:3e:e4:3c:8b:cc:65:f7:22:75:
37:61:21:4f:58:07:5d:a3:27:ff:63:82:2c:98:3f:61:bf:00:
17:16:42:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:55:45 2026 by rpki-client