Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/yde-3lSgZiRr0HU1KS1x7njAoeA.roa
File: yde-3lSgZiRr0HU1KS1x7njAoeA.roa (raw, json)
Hash identifier: eSGD7O7kwdqNPAeSE2PmhfFGu0OTxONTMV1cXFqWo/g=
Subject key identifier: C9:D7:BE:DE:54:A0:66:24:6B:D0:75:35:29:2D:71:EE:78:C0:A1:E0
Certificate issuer: /CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0
Certificate serial: 019F236842BFCB951287FDF3FEC839350BDC
Authority key identifier: 6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/yde-3lSgZiRr0HU1KS1x7njAoeA.roa
Signing time: Thu 02 Jul 2026 15:17:43 +0000
ROA not before: Thu 02 Jul 2026 15:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 86.110.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 Jul 2026 03:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:42:bf:cb:95:12:87:fd:f3:fe:c8:39:35:0b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0
Validity
Not Before: Jul 2 15:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c9d7bede54a066246bd07535292d71ee78c0a1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:92:70:9b:f8:e9:43:c1:ee:5c:1d:31:2c:f4:
f8:04:09:c6:e2:27:a2:68:ff:42:1a:c8:b1:c1:e7:
1c:9b:6b:e3:d1:a7:28:42:1d:6b:8b:b7:7c:14:e3:
a8:b5:4c:58:62:90:3a:1d:dd:f3:87:48:68:4e:b2:
48:09:5a:f7:09:c2:47:fa:40:f9:10:60:86:5a:8e:
6f:ca:8f:ae:82:03:e6:65:9d:06:83:b5:df:1d:3c:
87:a6:5c:b6:5e:eb:a8:f7:d6:91:59:bf:c3:b2:22:
e2:6a:05:c6:3c:53:6c:c7:f1:3f:03:0d:3e:96:4c:
2d:10:60:c4:2a:85:92:f6:03:86:b1:c3:36:59:ad:
a8:67:70:37:25:62:72:94:51:40:91:74:ad:e1:bc:
95:b1:8f:26:a4:8f:8d:56:c3:fb:4e:74:2e:ef:a7:
67:50:31:e4:3f:aa:73:a1:5d:47:d3:61:8a:df:65:
72:dd:cd:b3:2c:7c:89:5a:72:d2:3b:23:d6:85:99:
a6:fa:be:c7:03:e9:30:3b:9e:42:a6:53:6d:7f:ca:
88:3e:aa:27:eb:e8:ec:b1:ec:50:30:f4:cf:12:69:
bc:7c:5d:9d:cf:50:ce:19:0f:73:48:27:b2:9a:64:
c2:4c:6f:7a:c8:9a:4b:de:2d:53:c1:34:41:db:78:
e7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D7:BE:DE:54:A0:66:24:6B:D0:75:35:29:2D:71:EE:78:C0:A1:E0
X509v3 Authority Key Identifier:
keyid:6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/yde-3lSgZiRr0HU1KS1x7njAoeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.52.0/24
Signature Algorithm: sha256WithRSAEncryption
35:df:ba:b9:1c:e7:da:37:3d:78:33:42:d4:17:0e:26:0e:fd:
c9:9f:f1:bd:ef:83:34:09:24:5b:4a:1e:84:d7:20:8b:5d:73:
a4:3c:72:5f:b8:e9:82:34:7b:f4:ef:60:b0:f9:84:08:10:d3:
71:7c:de:a2:fd:22:a4:fe:fa:3a:ad:08:2d:9b:6e:dd:c9:22:
ab:cf:83:b9:9c:13:15:42:7b:d6:54:07:fe:88:fe:31:ef:4b:
36:bc:88:0b:77:db:36:da:55:f4:cc:98:08:f9:97:7a:0a:08:
d4:ad:27:8e:69:05:b1:de:3b:59:53:10:79:59:7c:c4:be:a1:
4a:18:25:6d:12:11:57:55:8f:5a:9a:a2:db:e4:13:80:36:de:
03:83:ac:a0:5f:36:09:d5:44:54:ea:b6:2f:d4:a6:43:3c:f1:
ea:4f:e2:9a:94:75:07:1b:62:fc:56:5d:24:19:66:f1:ab:7b:
ba:08:89:90:d2:81:a9:93:8c:c0:c4:f8:27:c3:60:98:71:d6:
f9:da:e3:6e:7f:f9:7d:20:57:66:97:a1:ee:ce:65:58:fc:25:
68:20:2a:8d:86:74:7e:2a:86:3c:ce:0f:1b:01:c6:0b:15:c5:
7b:82:66:54:85:99:45:f5:fe:39:0c:02:75:62:c9:9d:a7:d2:
6d:e2:1a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 09:20:51 2026 by rpki-client