Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/0yr8aXhOgym_087pCWjaXD2xwbo.roa
File: 0yr8aXhOgym_087pCWjaXD2xwbo.roa (raw, json)
Hash identifier: ibUboXeSVZSey6KFBr4VW/S44K1bXt0+EVOA97v+hoA=
Subject key identifier: D3:2A:FC:69:78:4E:83:29:BF:D3:CE:E9:09:68:DA:5C:3D:B1:C1:BA
Certificate issuer: /CN=7ca598322a69905a5c6e0295a0ca1fb55666c14b
Certificate serial: 019D5A317C4F8C9C99E2F4157415825B88D9
Authority key identifier: 7C:A5:98:32:2A:69:90:5A:5C:6E:02:95:A0:CA:1F:B5:56:66:C1:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKWYMippkFpcbgKVoMoftVZmwUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/0yr8aXhOgym_087pCWjaXD2xwbo.roa
Signing time: Sat 04 Apr 2026 20:31:25 +0000
ROA not before: Sat 04 Apr 2026 20:31:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209442
IP address blocks: 185.204.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKWYMippkFpcbgKVoMoftVZmwUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:5a:31:7c:4f:8c:9c:99:e2:f4:15:74:15:82:5b:88:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca598322a69905a5c6e0295a0ca1fb55666c14b
Validity
Not Before: Apr 4 20:31:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d32afc69784e8329bfd3cee90968da5c3db1c1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:af:88:ca:2a:d5:63:9f:b0:8b:bc:63:fc:14:
32:80:4d:d6:0f:32:dc:05:26:c4:1d:c9:5e:1a:7f:
47:58:88:cd:4a:0c:3f:48:80:0e:e1:3f:e2:6b:2b:
d6:f5:a2:48:f7:f4:7f:12:f8:2c:b0:b3:7f:91:4e:
90:93:48:be:2b:db:c5:92:a0:25:23:2f:d0:0f:aa:
98:12:ab:f4:7f:6f:c3:fd:c8:f5:a8:93:fc:93:51:
7d:c5:80:cb:c9:1b:70:d3:1a:a7:4b:eb:26:85:f7:
64:b8:b4:a2:de:0a:48:3a:fc:0b:7b:a1:59:cf:ed:
32:c2:d0:8e:18:04:db:82:bb:37:7a:d8:f0:4f:df:
da:39:47:da:f2:6e:58:c9:08:0c:5b:9c:3f:4a:7f:
9b:15:f3:a6:16:7f:54:b1:cf:d3:c2:57:6a:80:44:
c0:d6:29:9b:bf:da:39:27:3c:6a:27:3d:c0:39:63:
4f:69:c5:a9:b6:9e:a9:4e:a5:e4:f6:42:85:f5:19:
82:5f:fc:58:60:2e:78:91:9d:d5:9b:84:48:0e:55:
15:23:c8:1b:77:a0:a4:23:99:99:70:cf:6d:37:7e:
32:39:7d:1c:43:6f:4c:ae:bf:61:0a:b7:39:55:56:
29:94:ed:ad:1c:95:33:ba:eb:c6:e2:da:71:d2:a6:
85:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2A:FC:69:78:4E:83:29:BF:D3:CE:E9:09:68:DA:5C:3D:B1:C1:BA
X509v3 Authority Key Identifier:
keyid:7C:A5:98:32:2A:69:90:5A:5C:6E:02:95:A0:CA:1F:B5:56:66:C1:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKWYMippkFpcbgKVoMoftVZmwUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/0yr8aXhOgym_087pCWjaXD2xwbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/da66c0-b9f8-4094-a935-580d876885a1/1/fKWYMippkFpcbgKVoMoftVZmwUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.154.0/24
Signature Algorithm: sha256WithRSAEncryption
80:d5:83:99:e1:d6:0a:c9:ce:ac:02:15:d3:e7:ca:b9:c6:69:
2c:ec:81:c6:21:d1:31:47:e6:40:18:ec:82:6c:4b:9e:a9:17:
80:4f:99:dc:f5:99:66:63:4e:33:ea:49:1d:3b:e2:c7:a7:8a:
70:bb:d2:66:44:8b:bf:c7:69:89:d0:07:85:be:f2:48:8e:79:
a3:9d:16:9f:63:c2:e5:81:6d:b5:2a:0f:12:fb:5d:95:9a:c1:
1e:d9:8a:6c:c2:1c:b9:96:94:8d:4b:8e:68:02:b6:9f:65:83:
f3:fa:a3:07:c1:11:3e:ff:13:38:19:1c:e0:bd:19:09:a9:30:
b7:0a:93:b1:d1:0c:e4:a9:57:d1:9f:0f:6c:b1:d0:d8:66:cb:
8d:89:82:59:e2:80:4d:bf:96:9a:60:c8:e4:d1:27:7b:82:4f:
0f:c6:09:6f:01:0a:a6:38:ba:d7:01:75:9b:a7:68:08:40:c2:
91:6d:85:62:96:25:40:12:56:28:bc:de:cc:e2:95:8b:f2:95:
e1:4c:f8:b2:30:15:f5:0e:a9:4c:8d:cb:4d:78:4c:61:17:02:
0a:aa:8a:1f:bf:bc:95:fa:41:8f:c8:d1:b8:3c:b7:78:fe:90:
ce:df:9a:6b:b1:47:96:b3:43:37:3e:88:92:ab:d8:cd:54:b1:
e5:ad:f3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:41:55 2026 by rpki-client