Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/CYtuVU0sbWBUALYLU6zRKuDdNos.roa
File: CYtuVU0sbWBUALYLU6zRKuDdNos.roa (raw, json)
Hash identifier: p/Z6mIOgkBgm2djYUHmco8dUrJgppMghuSCBMeA0BPY=
Subject key identifier: 09:8B:6E:55:4D:2C:6D:60:54:00:B6:0B:53:AC:D1:2A:E0:DD:36:8B
Certificate issuer: /CN=7fd18a6a49910cc331dc91114ae59b7185d5f30d
Certificate serial: 019B7A5B0B0D35F18C063FA60D430B8CEBD5
Authority key identifier: 7F:D1:8A:6A:49:91:0C:C3:31:DC:91:11:4A:E5:9B:71:85:D5:F3:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9GKakmRDMMx3JERSuWbcYXV8w0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/CYtuVU0sbWBUALYLU6zRKuDdNos.roa
Signing time: Thu 01 Jan 2026 16:19:05 +0000
ROA not before: Thu 01 Jan 2026 16:19:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58043
IP address blocks: 194.76.244.0/24 maxlen: 25
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
rsync://rpki.ripe.net/repository/DEFAULT/f9GKakmRDMMx3JERSuWbcYXV8w0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5b:0b:0d:35:f1:8c:06:3f:a6:0d:43:0b:8c:eb:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd18a6a49910cc331dc91114ae59b7185d5f30d
Validity
Not Before: Jan 1 16:19:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=098b6e554d2c6d605400b60b53acd12ae0dd368b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a1:2f:97:f9:db:ae:a1:af:e4:28:b4:bc:86:
61:90:32:a3:72:f8:aa:29:81:4d:17:1f:a0:dd:cc:
dc:07:fc:45:b2:e7:76:7e:a6:e3:79:47:8e:10:46:
d8:2d:d6:fc:92:c8:2d:23:29:c3:4e:5d:7a:c0:55:
da:96:07:c1:c3:05:bd:02:e2:4a:99:c1:31:3e:9b:
7d:ba:d5:63:f9:64:72:92:98:92:c5:77:95:cd:d6:
d4:2b:2d:51:de:36:1c:30:9a:70:b6:d6:a2:0c:48:
1d:90:e0:5e:d0:e5:05:fe:5e:9a:ec:71:00:d6:5c:
95:02:b4:f3:98:07:59:bf:8d:88:e8:dc:d5:30:45:
9b:2b:b5:e6:89:3a:34:37:e2:bd:d8:89:ea:70:22:
aa:e5:43:a1:f1:13:28:86:6d:b9:27:e8:f3:fd:58:
dc:f6:7f:bf:d3:89:5e:42:00:ad:74:c4:40:a7:a4:
0a:e8:09:c3:e1:74:c2:78:b7:87:be:86:27:1b:67:
ab:b6:fe:08:f8:77:b8:e7:d7:70:ef:12:aa:4f:82:
03:8b:46:a4:ca:88:ea:4c:08:d9:81:67:5a:d6:d0:
26:fa:f0:37:5e:a4:d6:d5:87:bb:45:24:52:90:25:
31:36:f0:9e:82:11:46:4a:7c:9b:fa:b0:8c:d3:cb:
b5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8B:6E:55:4D:2C:6D:60:54:00:B6:0B:53:AC:D1:2A:E0:DD:36:8B
X509v3 Authority Key Identifier:
keyid:7F:D1:8A:6A:49:91:0C:C3:31:DC:91:11:4A:E5:9B:71:85:D5:F3:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9GKakmRDMMx3JERSuWbcYXV8w0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/CYtuVU0sbWBUALYLU6zRKuDdNos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.244.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:30:a5:b4:e7:e1:db:2d:13:ec:31:45:53:b6:93:31:d3:1f:
f1:f5:1b:10:5a:71:fe:88:10:d5:48:6f:a8:6f:d8:fc:8f:e4:
5f:d1:fa:f7:36:6e:39:02:cf:06:1b:f2:95:f8:2a:e8:6d:c8:
ee:2a:86:71:88:4c:ca:4f:aa:9e:f4:23:d6:d1:e5:ae:53:fb:
c4:32:0c:34:c7:fe:50:6e:ae:73:4a:c6:f9:88:12:fd:23:20:
1b:29:4c:98:15:72:8f:ae:88:39:1b:72:a0:97:c5:58:ad:15:
80:3b:ca:6f:40:43:0c:38:6d:dd:a6:59:95:64:29:e0:85:bf:
86:c3:03:31:0e:90:60:cd:a2:86:39:6d:c7:f8:aa:ab:84:9a:
b8:03:57:f4:8f:4f:fc:3b:e4:e6:e6:9c:67:5b:2f:df:71:42:
c4:c5:a0:98:2a:82:4a:9a:2e:82:03:c6:b3:c9:57:00:e5:39:
50:79:b3:c0:13:08:0c:32:61:5b:85:6c:b0:62:48:17:9c:5f:
87:90:f2:2c:a6:cc:25:bc:e2:5d:bb:f5:99:90:5e:fe:c6:38:
18:86:e8:7d:2b:67:a5:73:e7:5d:3a:30:96:fe:dd:21:1d:cb:
a2:1f:65:11:27:df:e3:ac:6f:8c:b2:0b:2c:a5:14:49:06:71:
0e:ea:1e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:31:14 2026 by rpki-client