Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/b35c9a-8495-4169-8c50-3692f7841619/1/yJzTIcAhRcC6ZEzxWsi_CH0k6Sk.roa
File: yJzTIcAhRcC6ZEzxWsi_CH0k6Sk.roa (raw, json)
Hash identifier: YVqSm3FfhpaemLgcMqrRSZQk3gYIEbjzjgNvnaJ9X18=
Subject key identifier: C8:9C:D3:21:C0:21:45:C0:BA:64:4C:F1:5A:C8:BF:08:7D:24:E9:29
Certificate issuer: /CN=90d5822d3c7bbf7ab5404dda88fd9da92138de21
Certificate serial: 019B7B36E6892DA7B78A08522497850C220A
Authority key identifier: 90:D5:82:2D:3C:7B:BF:7A:B5:40:4D:DA:88:FD:9D:A9:21:38:DE:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNWCLTx7v3q1QE3aiP2dqSE43iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/b35c9a-8495-4169-8c50-3692f7841619/1/yJzTIcAhRcC6ZEzxWsi_CH0k6Sk.roa
Signing time: Thu 01 Jan 2026 20:19:14 +0000
ROA not before: Thu 01 Jan 2026 20:19:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42779
IP address blocks: 77.244.112.0/20 maxlen: 20
77.244.116.0/23 maxlen: 23
77.244.118.0/23 maxlen: 23
77.244.124.0/23 maxlen: 23
77.244.126.0/23 maxlen: 23
2a02:4380::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/b35c9a-8495-4169-8c50-3692f7841619/1/kNWCLTx7v3q1QE3aiP2dqSE43iE.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/b35c9a-8495-4169-8c50-3692f7841619/1/kNWCLTx7v3q1QE3aiP2dqSE43iE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNWCLTx7v3q1QE3aiP2dqSE43iE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:e6:89:2d:a7:b7:8a:08:52:24:97:85:0c:22:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d5822d3c7bbf7ab5404dda88fd9da92138de21
Validity
Not Before: Jan 1 20:19:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c89cd321c02145c0ba644cf15ac8bf087d24e929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2d:50:40:91:90:8b:ff:5c:b3:2c:61:f2:fa:
16:66:9e:7d:14:75:4f:0e:87:d4:aa:5e:1b:0e:59:
0a:e6:a4:5b:ef:0a:e3:61:4f:4d:66:eb:12:c4:da:
b4:7d:4d:36:e3:13:87:78:66:e1:68:d6:f2:e2:75:
37:90:49:9b:d7:54:e7:04:28:4c:76:d4:6a:eb:9b:
3f:31:81:2c:df:93:70:8f:c0:a4:18:14:38:7b:07:
4d:c7:2c:c0:df:da:3f:f4:da:76:62:97:bf:ab:9e:
4a:a6:f0:66:dc:a7:5b:48:cb:b2:64:a0:a5:09:0e:
5c:bb:86:e7:c8:c3:15:99:f5:0a:62:da:45:dc:65:
63:6c:2c:44:11:fb:2e:94:df:c6:75:89:e7:a2:66:
fb:6e:00:7d:4d:76:38:a4:19:53:ac:33:6d:4c:c5:
38:5b:ae:a6:01:8f:c2:98:96:62:1e:20:45:e7:d2:
5a:ac:4a:f6:a5:f2:97:e5:64:ae:07:e8:1c:2c:3e:
e6:1e:4a:75:33:c2:82:99:54:37:18:94:29:1e:5f:
cb:c4:08:41:cd:c6:b8:06:54:e3:46:0a:c9:56:ef:
35:6b:cb:db:fe:bd:0e:5f:e0:4c:50:3d:bb:e8:d1:
12:a0:aa:ce:a5:79:b5:1c:fb:b4:45:b4:8a:48:cb:
4e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9C:D3:21:C0:21:45:C0:BA:64:4C:F1:5A:C8:BF:08:7D:24:E9:29
X509v3 Authority Key Identifier:
keyid:90:D5:82:2D:3C:7B:BF:7A:B5:40:4D:DA:88:FD:9D:A9:21:38:DE:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNWCLTx7v3q1QE3aiP2dqSE43iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b35c9a-8495-4169-8c50-3692f7841619/1/yJzTIcAhRcC6ZEzxWsi_CH0k6Sk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b35c9a-8495-4169-8c50-3692f7841619/1/kNWCLTx7v3q1QE3aiP2dqSE43iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.244.112.0/20
IPv6:
2a02:4380::/32
Signature Algorithm: sha256WithRSAEncryption
14:81:aa:bd:e0:4d:f6:d7:ff:6c:2d:9c:e7:62:6d:73:52:f2:
13:5f:4f:8d:c1:50:f0:af:89:30:7d:2f:3b:39:12:19:a7:3e:
5e:be:af:50:89:f4:1b:97:ae:08:42:07:81:f3:af:bd:b5:a3:
8c:52:ad:f3:00:f5:4a:45:dc:16:3e:33:b2:ce:e7:3a:11:61:
5d:d7:8b:34:f7:37:5f:e8:86:3e:ce:a2:3a:88:91:37:53:db:
39:27:0f:ad:2c:8c:d0:0f:0f:91:8b:6e:38:af:70:68:d1:96:
f2:bf:2d:24:f2:1d:43:3c:68:39:e3:f7:37:d4:f8:7a:2e:6d:
ab:1b:1d:c3:3a:18:72:0d:6f:f5:02:22:91:b0:45:3d:d7:cf:
4b:c4:46:60:d1:0f:83:d0:bc:6c:89:41:12:1c:7b:58:d2:e0:
73:88:f6:92:bf:6f:3f:a9:14:fe:fe:c1:5e:e4:37:d0:a1:4c:
fc:82:ef:4c:01:87:f5:0f:f8:18:25:fb:2a:35:f3:aa:b5:50:
9d:c8:71:48:f3:8c:68:b5:1d:80:df:1a:a0:9d:6c:07:0d:10:
c7:39:f5:98:4e:71:4b:b8:22:e7:d3:16:e0:8f:65:be:c3:ae:
af:10:5c:1d:8b:47:6d:d3:5a:8f:d9:0d:34:8c:d2:49:c6:a4:
2e:81:db:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:01:09 2026 by rpki-client