Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/YU2PfYClu9ods7OIVMXTM1gfT-s.roa
File: YU2PfYClu9ods7OIVMXTM1gfT-s.roa (raw, json)
Hash identifier: vgGpyNSi4szw0MOFiG3xNxocVMlT/+cj/OnKigyXPcI=
Subject key identifier: 61:4D:8F:7D:80:A5:BB:DA:1D:B3:B3:88:54:C5:D3:33:58:1F:4F:EB
Certificate issuer: /CN=450bc67f549eb049257720a000eb05b54f5d2bc0
Certificate serial: 019B7C80D2420633FD22A9365ED0BF583E88
Authority key identifier: 45:0B:C6:7F:54:9E:B0:49:25:77:20:A0:00:EB:05:B5:4F:5D:2B:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/YU2PfYClu9ods7OIVMXTM1gfT-s.roa
Signing time: Fri 02 Jan 2026 02:19:35 +0000
ROA not before: Fri 02 Jan 2026 02:19:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57614
IP address blocks: 81.162.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:d2:42:06:33:fd:22:a9:36:5e:d0:bf:58:3e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=450bc67f549eb049257720a000eb05b54f5d2bc0
Validity
Not Before: Jan 2 02:19:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=614d8f7d80a5bbda1db3b38854c5d333581f4feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:27:6c:cb:e4:5f:52:50:6b:f8:a0:94:37:e0:
d1:40:0e:3c:12:e5:75:b9:6f:c4:a4:a8:6a:4a:78:
d6:5e:ea:aa:77:81:55:48:4a:99:c3:00:47:3d:77:
a6:b6:bf:43:95:57:f3:17:1a:a4:3d:35:37:18:bd:
de:6a:97:ea:dd:77:39:3b:e3:24:d4:43:2c:93:ce:
ed:64:c9:02:06:dc:5c:b0:6d:d0:59:12:38:cd:bc:
9f:2e:56:d7:3b:bb:23:af:91:a7:09:45:2a:b2:58:
b0:c9:bb:bd:50:7e:d4:91:da:a2:5a:55:9f:5c:66:
fe:14:ca:66:e7:9c:70:5d:e4:91:1b:e6:86:b7:00:
f7:f0:55:3d:1c:03:06:c1:e7:d6:0e:be:16:03:e2:
76:d3:61:5b:b4:93:cb:24:25:18:1e:0d:67:2d:59:
45:c9:38:68:35:37:9b:5d:4a:5e:9f:c2:3f:2c:0e:
10:59:31:6b:b5:47:8c:0a:39:d3:e1:05:5e:94:d3:
1c:85:0d:ef:44:78:aa:3a:68:71:59:42:d3:39:c4:
a5:19:19:5c:02:98:f2:f6:7f:88:23:e8:42:dc:50:
98:ff:4c:2c:bd:3c:53:27:9a:6a:78:97:46:7c:96:
54:d0:dc:dd:2d:10:1b:1a:96:8b:a7:23:4b:0d:8f:
96:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4D:8F:7D:80:A5:BB:DA:1D:B3:B3:88:54:C5:D3:33:58:1F:4F:EB
X509v3 Authority Key Identifier:
keyid:45:0B:C6:7F:54:9E:B0:49:25:77:20:A0:00:EB:05:B5:4F:5D:2B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/YU2PfYClu9ods7OIVMXTM1gfT-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.162.48.0/22
Signature Algorithm: sha256WithRSAEncryption
13:c6:20:fb:5d:37:31:f9:02:d6:59:9b:1a:90:e5:c4:50:38:
7f:1a:21:c0:9b:14:e2:b0:83:61:68:70:75:c2:c9:6e:c1:44:
26:f7:4a:d5:49:6b:56:91:9f:10:14:66:b6:c2:e4:ad:93:cb:
92:68:84:b5:b9:35:42:4a:ed:38:3b:0c:49:33:12:71:01:4c:
de:9a:ac:c9:70:db:6c:55:3a:d3:15:8d:06:e1:23:ac:2f:23:
e6:6a:94:21:98:33:88:3a:38:7c:71:a3:ee:d1:17:02:56:27:
d8:d2:ca:c4:d3:a2:de:1b:77:a8:61:a8:7b:d4:71:14:41:ba:
5e:1a:27:cc:0d:9e:a5:5a:db:54:66:fb:bf:85:9f:94:36:4a:
71:42:7b:3a:d7:cc:5a:f1:b9:d1:7e:84:19:43:72:6b:5c:32:
9e:04:25:1d:4c:0d:2f:d6:dd:92:12:d2:22:4e:7b:48:36:02:
30:85:73:1d:e5:19:d2:a7:8a:4e:84:ff:e9:b4:29:0a:c9:ce:
0c:d5:72:d2:69:bc:cf:df:36:77:d2:81:e2:53:c5:cb:f7:61:
48:d5:82:1f:af:7a:45:39:5c:72:ba:ae:78:f4:44:e3:23:bf:
93:31:0f:8b:bc:19:57:00:64:0f:87:cd:cb:88:3e:58:dc:35:
9c:12:d6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:02:56 2026 by rpki-client