Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/y2R7XAH-3-kA5U74hXHHO_c11dI.roa
File: y2R7XAH-3-kA5U74hXHHO_c11dI.roa (raw, json)
Hash identifier: gWO/uuYDyiGKuAWY4EaQAg3d79DNvwcV+IkMjIH1jbE=
Subject key identifier: CB:64:7B:5C:01:FE:DF:E9:00:E5:4E:F8:85:71:C7:3B:F7:35:D5:D2
Certificate issuer: /CN=39247f77a3ae0af71eac03256449f5d292cffd74
Certificate serial: 019EB12FAA6A830D07726351476421BF86A5
Authority key identifier: 39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/y2R7XAH-3-kA5U74hXHHO_c11dI.roa
Signing time: Wed 10 Jun 2026 10:59:11 +0000
ROA not before: Wed 10 Jun 2026 10:59:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3356
IP address blocks: 31.207.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b1:2f:aa:6a:83:0d:07:72:63:51:47:64:21:bf:86:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39247f77a3ae0af71eac03256449f5d292cffd74
Validity
Not Before: Jun 10 10:59:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb647b5c01fedfe900e54ef88571c73bf735d5d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:6b:4d:12:bc:f4:df:c9:0d:12:0c:8b:0b:39:
c1:1a:d4:9c:60:d7:34:8f:42:6e:87:8b:b3:c0:3d:
60:80:ae:54:62:90:73:bb:5a:a6:31:20:23:1c:8c:
10:5e:43:cb:de:b6:97:8a:5c:53:fa:ae:c5:46:a2:
aa:0c:a1:d1:45:93:30:f6:f7:94:1c:35:2b:73:2c:
cc:5e:25:98:c5:fa:7b:99:5d:45:55:4f:d6:d2:f7:
62:9c:d5:11:5f:48:63:c5:9a:9f:49:4a:73:09:9a:
53:cf:44:c3:8c:b5:39:c3:75:e1:3c:32:13:98:a9:
92:85:14:11:a2:c8:1c:f5:6a:ef:26:42:22:d2:2a:
04:b3:af:be:be:f3:54:bb:d6:e0:10:ae:0c:17:5a:
a4:ca:6d:ef:41:77:6e:a6:d5:75:1d:cc:0d:90:8f:
c2:dd:ce:76:9e:a9:8f:17:8f:ff:e8:2f:56:a9:1c:
02:4f:36:0c:b8:bf:43:6d:9a:0f:26:20:b0:8a:6b:
3c:3e:c8:41:31:6c:30:2f:e8:ea:14:e6:d8:24:2f:
91:ae:ca:93:35:a8:f7:81:00:0c:35:35:77:8a:fe:
8c:4a:10:fe:7c:34:de:68:87:77:92:0a:f6:73:eb:
e3:6f:3c:f3:cd:f6:5d:e5:fb:fb:66:ad:9c:6f:c3:
f1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:64:7B:5C:01:FE:DF:E9:00:E5:4E:F8:85:71:C7:3B:F7:35:D5:D2
X509v3 Authority Key Identifier:
keyid:39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/y2R7XAH-3-kA5U74hXHHO_c11dI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.207.92.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:24:32:75:f9:78:ba:78:b3:62:9c:2b:c8:49:86:2a:f4:2a:
4c:f2:32:bb:26:5f:bd:ca:f6:ca:53:9e:ea:b2:fe:e5:6d:7e:
d7:4d:96:21:08:2f:f2:60:3e:a3:56:49:cf:8d:b3:9c:6b:5a:
91:33:17:8d:51:b0:df:93:03:0e:be:58:d8:e8:81:0e:f2:48:
ae:e9:8e:17:0a:4d:fc:ca:83:8a:23:a4:aa:74:19:71:20:f7:
1d:44:b0:6e:a1:0b:0c:d5:c3:b5:69:3f:83:7a:a4:5d:e8:e8:
e2:db:12:11:6c:24:ca:15:bb:42:53:d3:90:e4:77:bf:40:24:
da:6d:68:4f:33:aa:87:c9:58:37:bc:19:7f:ed:29:53:ca:5e:
11:a2:9d:d7:04:3e:12:cd:12:ba:87:a3:bc:c2:56:d3:ce:45:
3b:15:9b:4f:12:69:83:9e:b4:24:01:fe:23:a0:e2:a3:ff:45:
5d:86:c2:50:f6:9d:3c:8c:c7:0d:6c:34:c2:10:24:32:25:f3:
cf:50:b2:6d:b4:84:32:ab:72:2e:6a:9b:92:d2:b7:73:a8:2f:
52:bf:ad:aa:02:f4:f6:b8:41:43:ca:8f:b0:e1:b1:e1:3d:3b:
d6:0f:b9:a3:b5:b5:73:9f:2b:c3:be:d0:73:65:2a:56:58:5f:
06:26:cf:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:05:17 2026 by rpki-client