Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/y1bR5jl013Y3lzMs7c_lC8K_wF4.roa
File: y1bR5jl013Y3lzMs7c_lC8K_wF4.roa (raw, json)
Hash identifier: ZOf1GD5+F7Ix58HDKPiEjn4TBv+b/5vVBq1mleIzuFg=
Subject key identifier: CB:56:D1:E6:39:74:D7:76:37:97:33:2C:ED:CF:E5:0B:C2:BF:C0:5E
Certificate issuer: /CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Certificate serial: 019D8D94D8FDF052D87037C99997DC0D4C70
Authority key identifier: B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/y1bR5jl013Y3lzMs7c_lC8K_wF4.roa
Signing time: Tue 14 Apr 2026 20:00:35 +0000
ROA not before: Tue 14 Apr 2026 20:00:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15490
IP address blocks: 185.141.252.0/22 maxlen: 24
185.141.252.0/24 maxlen: 24
185.141.254.0/23 maxlen: 23
185.141.254.0/24 maxlen: 24
2a07:2780::/29 maxlen: 48
2a07:2780:7357::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8d:94:d8:fd:f0:52:d8:70:37:c9:99:97:dc:0d:4c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Validity
Not Before: Apr 14 20:00:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb56d1e63974d7763797332cedcfe50bc2bfc05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:86:78:b7:38:1f:09:09:fe:6f:6a:7b:69:e1:
2d:eb:36:ae:58:2d:45:05:a5:f2:2c:b7:43:eb:9c:
88:1e:8b:b4:0a:d0:c8:1a:0c:6b:4b:06:19:aa:e0:
d8:a7:14:80:95:62:74:04:f9:82:99:bd:dc:5d:90:
ab:7e:06:70:91:f3:e2:78:8a:44:44:5e:d2:3c:1a:
08:44:51:00:93:af:30:b6:1c:9a:f0:c9:16:71:a5:
25:46:17:5c:19:55:af:1f:00:20:dc:d6:c6:39:2a:
61:37:97:9e:44:8a:93:20:65:68:19:c3:7f:bf:25:
27:78:39:65:82:42:0e:6b:2a:f3:3f:da:39:7d:a3:
7f:8b:6a:5f:e7:b3:c3:6a:b1:03:d2:bf:f3:3d:d1:
07:f0:de:ab:d4:bd:bf:a7:1b:05:ed:5e:e4:9b:74:
bd:d8:c4:20:e3:f6:27:7e:2a:f6:30:67:e0:e5:f4:
51:11:9a:b3:56:a1:5b:ab:9f:c9:ef:b4:2e:09:58:
e6:95:71:54:c8:4c:3e:27:37:f6:fb:a8:e4:30:c9:
c5:66:3d:6b:42:6c:e1:ac:e9:dd:3f:79:65:d8:40:
eb:5d:2f:45:9d:1d:cc:56:89:81:b0:7b:fc:23:a6:
05:a5:07:8f:ec:62:a5:88:55:c6:4d:c7:f5:14:79:
02:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:56:D1:E6:39:74:D7:76:37:97:33:2C:ED:CF:E5:0B:C2:BF:C0:5E
X509v3 Authority Key Identifier:
keyid:B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/y1bR5jl013Y3lzMs7c_lC8K_wF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.252.0/22
IPv6:
2a07:2780::/29
Signature Algorithm: sha256WithRSAEncryption
a9:c6:01:29:a7:54:01:f1:12:c8:fb:90:82:24:60:90:f4:9f:
c6:fb:6d:16:5d:73:b7:fd:1e:c5:b3:e0:1e:de:07:a5:4b:24:
19:d1:0d:44:6e:e5:ca:08:67:a4:50:d9:4a:1d:19:b8:fb:6e:
83:83:f5:6a:49:aa:ad:c5:fd:ec:5a:74:f9:57:d6:6b:9e:0c:
79:55:9d:13:e1:06:9b:28:d3:fe:93:b9:91:e6:d8:42:3e:c3:
47:90:a5:23:05:dc:87:01:07:f1:49:09:92:9e:9f:1a:ce:88:
6f:fe:1c:95:a8:1d:3b:cf:2c:55:7f:10:fa:03:92:c9:af:f5:
1e:cd:92:1a:2f:ef:b7:ca:b2:c0:60:4c:b1:bc:aa:d4:1a:65:
0c:27:4c:24:6f:c8:4a:17:58:7c:2e:d3:23:3e:90:45:dd:ae:
f6:d3:7f:ad:07:bf:f7:b6:f7:05:01:a0:d1:30:50:4d:9a:df:
d7:4a:cd:65:a1:54:ee:05:da:c2:0d:a4:02:ce:32:b7:bf:73:
d7:24:18:d9:37:ee:d4:56:4d:53:e1:a9:b1:89:2b:e3:af:f9:
8d:29:ff:cb:cd:9f:ce:c8:cb:b6:ab:91:3d:7c:38:95:e1:8c:
92:90:2a:9b:3a:98:79:15:ea:82:28:2a:bb:70:8f:7d:b4:bb:
86:4e:6b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:43:32 2026 by rpki-client