Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/YLCy61Ou1zu1s3hFCdXrN8zxFx8.roa
File: YLCy61Ou1zu1s3hFCdXrN8zxFx8.roa (raw, json)
Hash identifier: C5m7c8v9LmMLSFllgUHl58+da2eRITwPf82h4xo+2Hg=
Subject key identifier: 60:B0:B2:EB:53:AE:D7:3B:B5:B3:78:45:09:D5:EB:37:CC:F1:17:1F
Certificate issuer: /CN=41b88e42f28836df48310dda05636457fa3f70db
Certificate serial: 019F236932C86620AD51D730235A84A6D3BF
Authority key identifier: 41:B8:8E:42:F2:88:36:DF:48:31:0D:DA:05:63:64:57:FA:3F:70:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbiOQvKINt9IMQ3aBWNkV_o_cNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/YLCy61Ou1zu1s3hFCdXrN8zxFx8.roa
Signing time: Thu 02 Jul 2026 15:18:44 +0000
ROA not before: Thu 02 Jul 2026 15:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19905
IP address blocks: 185.150.216.0/23 maxlen: 23
2a07:7c40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/QbiOQvKINt9IMQ3aBWNkV_o_cNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/QbiOQvKINt9IMQ3aBWNkV_o_cNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbiOQvKINt9IMQ3aBWNkV_o_cNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:32:c8:66:20:ad:51:d7:30:23:5a:84:a6:d3:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b88e42f28836df48310dda05636457fa3f70db
Validity
Not Before: Jul 2 15:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=60b0b2eb53aed73bb5b3784509d5eb37ccf1171f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d1:d8:3c:57:97:e6:e4:8e:e9:74:4f:08:30:
b8:01:58:2f:e6:5f:36:d8:16:17:cf:bb:58:b9:45:
ad:90:14:56:07:8f:d8:9f:7e:f0:26:c2:eb:fd:94:
e0:a0:2c:8e:05:7c:c9:60:c1:9a:ef:55:4c:df:7c:
9a:07:d7:3a:8f:4f:fe:0d:e9:20:c4:60:ea:fc:63:
c1:e4:ff:6b:d4:07:e8:dc:4e:3e:53:c2:8a:3c:d7:
cd:c8:c1:b0:69:cc:49:ff:92:7d:7c:ef:08:9f:e8:
a7:29:81:6d:58:ff:46:c5:41:e8:b5:4f:b4:22:72:
5b:66:6c:a6:04:f2:b9:09:cf:89:3f:13:17:d1:c5:
a1:08:3e:22:16:fd:0b:bf:2e:f6:32:c0:d7:50:b9:
39:77:45:b4:e2:7a:62:76:57:a9:99:69:44:ea:95:
27:19:89:32:f9:63:c4:26:7a:3b:10:03:35:64:9e:
59:43:af:f4:1d:7a:ae:b2:1c:73:a0:dc:e5:01:52:
5a:0a:b0:a5:66:35:ce:3f:8c:fe:bc:64:e6:8b:2a:
5e:57:dd:a8:4e:20:18:3f:d0:74:14:3d:ce:e7:ad:
60:a4:b9:74:08:41:c7:cb:3d:63:4f:4c:2a:78:a5:
8d:85:b4:93:9a:cd:9e:b8:6e:50:a4:5e:6e:b8:da:
6d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B0:B2:EB:53:AE:D7:3B:B5:B3:78:45:09:D5:EB:37:CC:F1:17:1F
X509v3 Authority Key Identifier:
keyid:41:B8:8E:42:F2:88:36:DF:48:31:0D:DA:05:63:64:57:FA:3F:70:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbiOQvKINt9IMQ3aBWNkV_o_cNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/YLCy61Ou1zu1s3hFCdXrN8zxFx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/QbiOQvKINt9IMQ3aBWNkV_o_cNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.216.0/23
IPv6:
2a07:7c40::/29
Signature Algorithm: sha256WithRSAEncryption
c6:4f:b7:5f:86:43:d3:7c:89:24:7e:29:5e:e7:af:bf:8c:99:
a7:72:7c:ac:79:f6:a0:db:3e:a6:8e:63:25:5f:8e:4e:f5:3e:
31:5f:c3:80:49:54:9c:95:b0:97:db:a5:e7:80:8b:9d:a8:3e:
3b:92:c2:c8:b5:bf:7c:01:20:4a:15:69:a6:41:99:63:01:17:
ac:00:39:a5:fd:e4:4f:d7:3b:46:ae:36:3f:af:69:4d:45:fc:
e7:f5:1d:dd:b5:dc:da:56:28:eb:0c:e8:aa:51:cd:98:5e:21:
db:73:7a:27:1b:14:57:c4:cd:04:6f:73:5d:1e:df:6c:99:f0:
86:88:ed:04:b2:8e:5e:3e:1f:85:ad:3f:7f:70:fd:d6:ad:8d:
bb:63:09:53:69:1f:11:c2:07:3e:02:13:f5:ae:af:c0:b5:2e:
05:06:3b:77:bd:2f:26:23:21:1c:41:3d:ed:fd:ee:03:62:d0:
dd:07:59:d1:55:16:73:11:28:31:c6:60:36:e7:e3:e7:43:02:
5b:ec:1a:92:c2:1c:65:e1:5f:ed:49:4b:4f:7a:b4:d6:f5:3c:
7a:29:f4:83:80:ba:c6:24:45:cb:da:d4:4a:1f:4a:00:ec:f4:
62:2a:2b:6a:de:e9:45:3e:9e:78:4d:9f:ca:f2:b4:76:99:f8:
20:b8:65:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 19:31:42 2026 by rpki-client