Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/YJtrcFArWD_uz2yNOX-m6WSFQ3M.roa
File: YJtrcFArWD_uz2yNOX-m6WSFQ3M.roa (raw, json)
Hash identifier: xruXaUcy87Eg8MhTGHBVaGMg8Mu4blgygDn6oYs8oqo=
Subject key identifier: 60:9B:6B:70:50:2B:58:3F:EE:CF:6C:8D:39:7F:A6:E9:64:85:43:73
Certificate issuer: /CN=ebdf399044b1f1cc61cc771e89b49d238582c07d
Certificate serial: 019FA2FA835F2D4CBD425EC263D42B4303E8
Authority key identifier: EB:DF:39:90:44:B1:F1:CC:61:CC:77:1E:89:B4:9D:23:85:82:C0:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/YJtrcFArWD_uz2yNOX-m6WSFQ3M.roa
Signing time: Mon 27 Jul 2026 09:49:14 +0000
ROA not before: Mon 27 Jul 2026 09:49:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51234
IP address blocks: 176.117.0.0/21 maxlen: 21
195.191.78.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:fa:83:5f:2d:4c:bd:42:5e:c2:63:d4:2b:43:03:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebdf399044b1f1cc61cc771e89b49d238582c07d
Validity
Not Before: Jul 27 09:49:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=609b6b70502b583feecf6c8d397fa6e964854373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b2:db:81:a5:33:fb:6e:cd:c5:57:50:21:b5:
ea:ae:ca:5c:65:b2:51:e9:af:9c:f4:2e:65:b5:68:
8f:46:f7:90:26:25:42:87:1c:36:2c:5e:23:dd:fc:
0d:4d:2e:64:68:d2:3e:1c:61:5e:43:d6:74:c3:b3:
a0:81:44:3f:7c:71:ad:66:be:09:27:b5:74:57:ef:
1f:2a:36:0e:25:33:92:5a:e0:77:28:45:2e:48:94:
40:f8:4b:e3:a5:ca:5b:3c:46:a9:c8:1d:bc:c7:20:
09:50:92:85:ee:6e:9f:99:38:90:40:a4:4a:f7:ca:
c1:36:bb:90:5c:fe:a0:52:0e:c7:be:5e:1c:2a:8c:
e7:4e:b7:82:db:8b:e1:63:59:7b:60:cc:b9:06:ec:
e1:f6:9a:2f:66:9a:6a:19:4a:1c:f1:65:6b:29:25:
3f:09:4b:97:d3:56:32:2a:72:78:b6:03:c7:ce:86:
d9:05:d3:05:10:04:56:73:02:82:0e:38:1f:21:b5:
69:a5:5f:58:15:fb:6b:f4:46:40:c3:79:fd:60:30:
b7:c3:70:8d:28:bc:8e:4c:d1:33:27:81:65:d0:5d:
ed:6f:97:f4:11:63:4f:63:ab:77:46:15:22:2e:34:
5f:e8:0f:cc:22:2d:7d:d7:4e:5b:ce:40:17:e6:58:
9e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9B:6B:70:50:2B:58:3F:EE:CF:6C:8D:39:7F:A6:E9:64:85:43:73
X509v3 Authority Key Identifier:
keyid:EB:DF:39:90:44:B1:F1:CC:61:CC:77:1E:89:B4:9D:23:85:82:C0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/YJtrcFArWD_uz2yNOX-m6WSFQ3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.117.0.0/21
195.191.78.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:94:37:dd:b4:c9:a6:ac:60:c2:97:a8:f5:49:4d:a2:ef:35:
78:cd:ae:3c:bb:66:9b:3f:5c:6d:b5:29:0f:7d:d5:35:74:87:
84:85:5c:ae:23:e4:d4:4a:ac:df:27:bf:ce:fa:35:33:72:19:
b2:f5:0d:b1:29:52:63:48:02:4f:7b:c4:36:25:53:fc:e5:85:
d1:cc:81:71:0e:b1:53:d1:ac:7f:bc:80:8e:88:49:fc:4d:7b:
a1:4c:9a:28:da:dc:08:a3:aa:0e:14:b7:c5:c0:34:2d:48:56:
19:c1:d1:0c:f1:df:8e:76:2c:c4:60:2f:b3:1c:ed:e7:ee:7d:
ec:13:13:b9:3b:f3:49:02:ab:05:ac:c5:53:a8:22:41:de:3c:
5c:72:c9:a5:93:f1:d8:ab:97:38:af:8a:15:d0:06:9e:30:b8:
8e:9f:99:87:2d:ea:17:44:7f:0b:5c:18:93:19:56:33:82:87:
be:6b:b5:51:ae:fa:f7:50:fa:db:52:9a:81:0f:02:55:06:9f:
d0:80:a6:88:d5:27:fc:c6:d8:d4:1b:8d:43:ab:76:82:04:21:
4c:be:2e:5c:a7:0e:63:f1:e1:d4:8d:7a:7c:46:37:7e:a5:72:
60:42:99:f2:ef:39:56:df:9e:d3:46:22:08:42:12:30:b0:6e:
67:b9:2d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:05:25 2026 by rpki-client