Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/yQZZyJ-guGbGAaz47oUguuGjfLc.roa
File: yQZZyJ-guGbGAaz47oUguuGjfLc.roa (raw, json)
Hash identifier: o8aHjEfUbVkyklvg+YTE8nyjgPYwybI1TJcaTA9wb/Y=
Subject key identifier: C9:06:59:C8:9F:A0:B8:66:C6:01:AC:F8:EE:85:20:BA:E1:A3:7C:B7
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 019D44DE132A02233DFAA06780C68B58002D
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/yQZZyJ-guGbGAaz47oUguuGjfLc.roa
Signing time: Tue 31 Mar 2026 17:08:17 +0000
ROA not before: Tue 31 Mar 2026 17:08:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40994
IP address blocks: 132.243.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:44:de:13:2a:02:23:3d:fa:a0:67:80:c6:8b:58:00:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Mar 31 17:08:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c90659c89fa0b866c601acf8ee8520bae1a37cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:d7:08:32:9d:0d:51:23:96:01:5f:9b:c4:8f:
60:6e:2f:92:94:f9:27:0f:13:bb:9e:42:cb:ad:0c:
ff:09:9e:3f:9a:cf:e2:be:e0:88:56:a7:28:21:6f:
ac:96:45:10:4e:d2:76:51:1c:c8:24:9e:bc:07:9a:
a1:a6:37:17:7d:d2:d1:8d:aa:f3:14:27:23:c3:f3:
cb:eb:dd:de:cd:08:39:e7:0a:b0:38:4d:34:69:35:
d2:88:3b:c8:7c:02:f7:8c:c4:a6:23:d5:bc:38:ba:
ed:f2:f0:68:bf:db:07:22:79:dd:f5:db:d1:ea:3b:
dc:ef:e0:61:8e:48:9d:bb:9e:34:f9:e0:df:ea:f6:
19:48:20:c4:4e:dc:5a:56:0c:e3:53:2b:02:be:c6:
39:3d:98:05:ba:06:64:7a:0e:fd:95:43:7a:4c:23:
60:b6:26:b0:a3:e6:f3:89:8a:ad:7b:b5:61:e8:e6:
32:cf:95:45:02:91:2f:23:2d:80:c0:6b:09:0a:c6:
4e:64:b0:21:23:14:ac:79:b4:a1:53:92:4b:bc:23:
38:d0:a6:3a:30:31:d8:7d:f8:2e:c9:7a:ce:c3:5a:
ba:dd:54:8d:62:e9:f6:92:5d:bb:cf:a1:70:f1:b7:
a4:7d:f1:db:39:ba:14:af:da:56:6d:52:03:47:93:
b3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:06:59:C8:9F:A0:B8:66:C6:01:AC:F8:EE:85:20:BA:E1:A3:7C:B7
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/yQZZyJ-guGbGAaz47oUguuGjfLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.243.203.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:79:db:9c:76:f2:de:ae:f6:6f:30:cb:65:ca:5b:71:76:a6:
8b:5c:77:23:63:0c:5d:9f:6c:a6:ee:9a:41:f5:c1:ff:2a:7a:
9b:26:70:ed:98:28:c8:f1:9e:12:83:18:b0:2d:75:23:57:ca:
0b:21:d2:fb:f5:17:ed:43:ca:b7:20:ca:5f:8a:da:23:2e:04:
fd:8e:34:80:7e:9d:87:60:1c:f6:62:a8:68:7f:86:85:26:98:
96:82:5c:ef:3e:ee:50:b2:93:79:98:09:cb:9b:79:5b:5b:cb:
4c:ad:ac:42:59:45:d4:b7:22:4f:a9:02:39:d5:c1:41:dd:a0:
04:d4:1e:3d:56:21:02:24:c2:a6:05:a1:e2:73:5c:4d:03:3d:
9a:1e:2e:fc:e6:84:5a:1d:0a:de:14:b6:19:23:a7:9d:53:40:
0e:8e:90:d7:a1:a1:cb:df:bc:90:e8:9e:1c:69:90:eb:1d:a5:
1c:51:73:c9:26:48:a0:97:91:d0:e6:b5:d6:cc:27:d4:56:1c:
a6:8d:d3:99:90:89:c1:10:eb:f8:31:57:d8:3d:85:e3:d2:d4:
ef:6b:ff:11:21:83:c7:27:89:c5:56:dd:27:cf:95:26:95:2d:
03:d3:24:8e:fa:0f:cb:da:0b:9c:47:f3:9b:19:b7:5e:2d:f4:
e6:3a:96:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:54:16 2026 by rpki-client