Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/Y7ayARvbYJBLfe3vp4W9v_P3rss.roa
File: Y7ayARvbYJBLfe3vp4W9v_P3rss.roa (raw, json)
Hash identifier: dUaJTBjjtSwH29cUEez0PnC9Q/Nyh4qAC0/yQk/Zo2U=
Subject key identifier: 63:B6:B2:01:1B:DB:60:90:4B:7D:ED:EF:A7:85:BD:BF:F3:F7:AE:CB
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 019D7344295B52A439558DDD72C3EA35AE6A
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/Y7ayARvbYJBLfe3vp4W9v_P3rss.roa
Signing time: Thu 09 Apr 2026 17:22:20 +0000
ROA not before: Thu 09 Apr 2026 17:22:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 132.243.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:73:44:29:5b:52:a4:39:55:8d:dd:72:c3:ea:35:ae:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Apr 9 17:22:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63b6b2011bdb60904b7dedefa785bdbff3f7aecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:48:5b:a8:7f:db:13:fb:b7:74:2c:63:e6:4e:
29:8a:fb:fa:6e:74:bf:2a:f1:eb:e6:34:5f:b4:65:
1d:9a:46:41:f1:c2:86:4b:5a:e1:b3:ea:9b:88:1c:
23:5c:b5:68:a2:ab:c8:8a:3e:66:e5:23:a5:a9:10:
28:cc:2e:16:46:1a:c9:76:8a:77:7b:02:45:1c:2a:
18:31:5a:b3:32:e3:63:57:1d:e0:a3:af:6f:49:c2:
bf:85:3b:c2:00:1b:ef:3a:0e:50:2b:31:2e:65:8d:
8b:28:a8:ac:af:f9:47:dc:f6:d0:f2:cc:59:15:93:
80:ff:81:20:88:c3:06:6f:97:e4:2e:83:89:07:69:
94:c6:91:6d:6e:37:1e:e7:b3:0a:aa:c2:5e:02:86:
14:0d:7b:49:43:1c:e3:ee:8c:7e:a5:7a:67:49:e1:
65:44:22:c2:6e:41:c5:cc:2f:60:8e:29:ed:f2:82:
95:58:18:d8:5a:87:f8:70:e9:39:b8:2f:1b:48:57:
91:f5:1c:06:80:4d:0b:a1:07:d2:71:6c:24:df:93:
5c:3b:65:2f:7e:01:9e:f7:33:61:4b:2e:91:af:32:
9f:a4:37:f4:24:de:61:92:06:b1:95:d4:b6:84:f5:
ca:72:15:4a:7c:bc:6b:77:c2:87:ac:77:01:3e:b7:
ab:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B6:B2:01:1B:DB:60:90:4B:7D:ED:EF:A7:85:BD:BF:F3:F7:AE:CB
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/Y7ayARvbYJBLfe3vp4W9v_P3rss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.243.215.0/24
Signature Algorithm: sha256WithRSAEncryption
14:b2:57:78:10:90:d1:f7:47:ab:fa:ae:03:c4:4c:41:3d:82:
b3:e2:ea:a3:80:e5:72:8a:35:2b:0c:9b:b4:ac:8f:88:04:d5:
dc:b1:f1:85:91:45:3b:d5:59:58:35:68:19:0a:c6:32:d4:67:
3c:98:4c:f7:df:e1:1a:35:0c:52:37:f6:b2:2e:2a:61:44:67:
4e:d4:80:46:d8:86:35:32:dd:f5:57:23:15:1e:6a:e8:52:bc:
07:d0:88:cf:f6:a8:e7:90:10:37:da:79:60:af:e8:df:98:f4:
a4:18:38:1e:59:95:95:38:78:7a:15:4b:d5:01:da:42:5f:06:
34:de:ca:6e:e4:10:cd:88:fe:a1:3b:8f:eb:58:27:1a:33:df:
5d:c0:b8:3d:be:fd:9c:96:39:c8:61:7a:b5:b2:54:b1:3f:3b:
31:5f:61:2c:37:78:5d:0b:e5:ad:52:49:9c:04:ff:d3:30:9f:
c5:af:38:20:6c:bc:a3:23:57:d3:42:90:1c:5b:1c:39:35:06:
9a:64:98:1d:52:86:c7:29:90:27:bc:1d:e1:6a:cf:ac:b0:e3:
03:6d:54:dc:7d:33:c2:da:7a:20:ad:fa:a4:b8:a9:c6:36:d2:
38:13:e0:35:fc:50:80:b8:d3:95:2f:43:17:61:0a:c3:2a:e5:
c2:bb:fd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:27:07 2026 by rpki-client