Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/N0yXHUnyqI9AcfgHuAzqodetZOU.roa
File: N0yXHUnyqI9AcfgHuAzqodetZOU.roa (raw, json)
Hash identifier: uOAActN4XyvIBVzO4R2n2+4reFssBEajy/J11W05BVM=
Subject key identifier: 37:4C:97:1D:49:F2:A8:8F:40:71:F8:07:B8:0C:EA:A1:D7:AD:64:E5
Certificate issuer: /CN=cab936b35f92cdec5e90df33bdc508661c27b455
Certificate serial: 019FA75EC735045583F627A0F1D969D723E4
Authority key identifier: CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/N0yXHUnyqI9AcfgHuAzqodetZOU.roa
Signing time: Tue 28 Jul 2026 06:17:14 +0000
ROA not before: Tue 28 Jul 2026 06:17:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35699
IP address blocks: 193.178.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:5e:c7:35:04:55:83:f6:27:a0:f1:d9:69:d7:23:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab936b35f92cdec5e90df33bdc508661c27b455
Validity
Not Before: Jul 28 06:17:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=374c971d49f2a88f4071f807b80ceaa1d7ad64e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:53:d1:5e:8f:fc:cc:86:67:f3:40:e1:85:d5:
f1:cc:91:03:a1:83:d6:4b:ba:25:ef:6d:21:eb:a3:
bf:a9:6d:5d:e9:1e:8d:c1:16:dd:0f:2a:d9:53:0f:
53:66:34:46:b4:29:67:66:c8:4f:fb:6e:0e:f4:54:
70:82:7a:63:2e:34:65:15:b2:05:58:5c:a9:9c:50:
33:53:de:3a:86:85:c6:00:b0:2e:fe:49:f6:f8:8f:
6e:66:0d:fd:71:83:18:58:3e:c6:f6:b2:c7:9e:b4:
97:8e:a2:fa:7f:de:b7:f2:50:9f:a9:aa:3c:d1:9b:
df:8a:d7:ba:7e:fa:6d:bc:19:d5:de:50:2e:4f:42:
e6:ae:fe:a3:3e:a9:ec:ca:af:6c:26:91:47:3f:c9:
60:2f:a5:d8:90:25:b2:a9:98:9b:bf:c4:3b:29:1e:
c6:bf:53:17:b4:2b:7f:2e:36:3b:69:17:62:e2:b8:
62:a8:d2:c1:2e:46:b1:c4:a7:a8:fc:7a:6e:9e:d6:
b2:b1:ee:c7:25:38:e4:ac:2f:d0:2e:50:0d:e2:f9:
06:71:6f:47:8f:08:9d:4a:e3:88:ed:4b:b1:86:68:
75:34:57:5e:98:34:8f:cb:ac:b0:11:ed:6d:5c:be:
c5:c1:e4:56:dd:40:45:19:3b:15:ae:4b:8f:5e:aa:
ec:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4C:97:1D:49:F2:A8:8F:40:71:F8:07:B8:0C:EA:A1:D7:AD:64:E5
X509v3 Authority Key Identifier:
keyid:CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/N0yXHUnyqI9AcfgHuAzqodetZOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.47.0/24
Signature Algorithm: sha256WithRSAEncryption
05:6f:dc:90:ad:94:9e:1f:58:b5:84:12:b0:fd:6a:4f:d4:ad:
57:ae:02:ba:5b:9d:d4:f7:60:a6:da:0b:0f:99:15:9a:b8:fe:
b2:8d:f7:b7:50:0c:8b:d6:e5:be:44:16:ee:e1:e5:23:a7:05:
d9:6a:44:a4:e1:d2:41:ef:c8:3f:55:83:6b:94:ae:a4:29:7c:
44:51:92:47:bc:fb:bb:4e:ac:f0:a0:38:0f:69:34:5d:97:22:
3a:4f:0e:8d:34:0c:35:76:5c:9d:8d:20:b7:df:d1:0e:e4:1d:
66:02:cf:d2:32:a5:6e:c2:2c:5b:88:64:18:2d:47:6b:5b:e2:
7b:23:cb:d5:61:df:4c:22:48:78:7e:5f:7c:42:f7:6d:00:84:
37:b3:f9:c7:76:2f:cf:24:16:ce:22:c4:6b:a8:b9:23:28:b1:
c7:58:0c:5b:bc:b3:8f:b6:6b:24:73:27:52:d9:43:3f:89:31:
7b:5d:55:e3:ca:68:8d:df:c5:bc:cb:bf:4a:6d:6c:20:02:cf:
f0:fa:eb:4d:83:73:b0:60:04:1e:9e:4d:79:3a:11:08:fa:7e:
a5:61:34:26:da:c4:d1:fd:85:a6:a3:f2:a5:8c:51:4e:88:a8:
0c:bb:c8:66:d4:8d:2a:da:42:73:a6:d3:f6:ed:28:69:b0:03:
f6:32:8e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:22:41 2026 by rpki-client