Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/yzKmZsge7trUv4Txs2kYPlL6-RE.roa
File: yzKmZsge7trUv4Txs2kYPlL6-RE.roa (raw, json)
Hash identifier: wcxVH/6cau217WxdwHGYfj7PaYBWv7RknCW4wcCZPgM=
Subject key identifier: CB:32:A6:66:C8:1E:EE:DA:D4:BF:84:F1:B3:69:18:3E:52:FA:F9:11
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 019EBAE7281BC781CB4A7EBB5FBD3497309F
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/yzKmZsge7trUv4Txs2kYPlL6-RE.roa
Signing time: Fri 12 Jun 2026 08:16:11 +0000
ROA not before: Fri 12 Jun 2026 08:16:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44094
IP address blocks: 212.102.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:e7:28:1b:c7:81:cb:4a:7e:bb:5f:bd:34:97:30:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jun 12 08:16:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb32a666c81eeedad4bf84f1b369183e52faf911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c8:5a:3c:f5:67:5b:89:9b:d3:a4:30:44:e8:
fd:5d:c2:ba:64:87:10:3e:bb:4b:e4:79:6b:9e:a5:
05:5f:af:92:2e:26:f0:f8:21:40:d1:6c:10:3d:21:
ef:48:d7:52:0f:f4:ba:8b:83:40:7d:53:bc:78:a4:
10:cb:9a:8b:8f:1a:96:54:19:a9:3e:a2:0e:c7:17:
ab:03:83:86:b5:ab:f3:ac:2d:a3:33:a0:af:10:7c:
32:fa:47:7f:7b:71:48:66:15:5a:ef:bd:7c:67:dc:
46:6b:bb:6e:8f:97:54:2a:b1:d7:56:eb:53:55:51:
ab:dc:74:8b:46:4c:4a:81:0c:e7:10:20:c7:31:53:
b9:71:fb:77:de:79:55:43:d3:91:30:0b:cd:fc:6d:
e5:0c:63:92:ff:7b:af:c5:3f:2c:f0:f8:cf:1d:e6:
ac:1a:e5:f8:02:8b:dd:97:ad:c0:84:2e:30:fb:6e:
a9:94:4e:ea:d6:86:82:73:7f:bd:c8:95:f3:72:ca:
0c:f7:cb:58:00:0d:29:84:3d:43:16:63:f1:11:fb:
df:a4:66:d6:fc:75:92:44:f9:48:e7:0e:a8:4d:0b:
b1:b6:81:0f:0c:98:12:4f:42:30:c8:26:36:b3:5f:
8c:cf:6b:04:37:92:f4:ee:48:05:7f:a2:92:f6:50:
a3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:32:A6:66:C8:1E:EE:DA:D4:BF:84:F1:B3:69:18:3E:52:FA:F9:11
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/yzKmZsge7trUv4Txs2kYPlL6-RE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.107.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:da:39:47:4b:00:04:35:f9:d5:43:6c:27:1f:e0:05:76:db:
67:37:29:7e:93:32:a8:6b:87:40:aa:9f:57:5b:46:7f:99:97:
53:6a:f8:ba:61:6a:b8:65:c1:a3:fa:a9:d4:14:ee:50:75:ab:
c3:ce:46:3d:cb:8a:7e:fa:0a:6b:59:2f:43:5e:5b:16:0b:6a:
7e:f3:5e:25:f1:09:e2:d0:56:6e:62:e4:b2:68:25:83:ba:0d:
cf:23:c4:f9:8a:59:5c:b2:77:f1:5b:15:ed:4a:64:64:f0:3e:
30:aa:16:a7:6c:a1:2e:a7:84:f2:08:00:f4:9c:63:ca:06:73:
cb:ed:04:8d:ac:bb:18:83:ba:64:ea:c6:b4:98:08:7d:4d:d5:
14:e5:96:94:b9:5c:a8:52:d9:1b:4b:30:e2:a0:e4:ea:98:29:
53:05:c5:76:67:25:7f:1c:36:ff:95:a8:52:93:e8:24:33:5a:
8e:ec:a6:af:44:c3:2e:88:d3:2f:da:8d:8f:af:3a:cf:8d:2f:
c8:2f:85:51:20:ec:6f:4e:4f:16:da:6b:03:9f:ad:a2:31:01:
6d:a0:81:86:61:40:7a:06:87:21:10:4a:e6:c7:a1:f2:93:d1:
e8:de:65:90:22:d0:8b:ff:1f:76:93:72:d5:7e:67:2d:5c:d2:
61:d4:0f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:05:26 2026 by rpki-client