Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/YAGBi7YspjccCZpCwW1YpyTO1Lc.roa
File: YAGBi7YspjccCZpCwW1YpyTO1Lc.roa (raw, json)
Hash identifier: +3efENSmdJOOQbhEQ5y/PYDi3pfdR+KtoXH+H7YROxc=
Subject key identifier: 60:01:81:8B:B6:2C:A6:37:1C:09:9A:42:C1:6D:58:A7:24:CE:D4:B7
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019D5EB7A33A2DB6F2A663D37800F4E1A065
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/YAGBi7YspjccCZpCwW1YpyTO1Lc.roa
Signing time: Sun 05 Apr 2026 17:36:26 +0000
ROA not before: Sun 05 Apr 2026 17:36:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 85.208.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:5e:b7:a3:3a:2d:b6:f2:a6:63:d3:78:00:f4:e1:a0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Apr 5 17:36:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6001818bb62ca6371c099a42c16d58a724ced4b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:30:99:d3:89:d1:78:a8:f2:67:57:c1:ee:fa:
42:d0:8b:ec:74:38:a0:29:0d:4b:6a:6e:3f:40:68:
d8:94:91:0f:d6:31:f2:a6:8a:a0:8b:95:9f:fc:99:
9f:73:e3:74:2e:47:0b:58:d7:0c:c5:6a:42:16:cc:
f3:d0:47:4a:eb:18:47:70:05:07:53:8f:ae:f7:4c:
05:ef:71:6f:c0:45:19:87:dd:fa:99:13:cb:93:7a:
f9:64:f2:d2:4b:6a:70:bf:ad:bb:ff:55:a1:21:b4:
d4:7f:67:f6:78:ce:54:83:c9:ed:4e:92:e7:4d:e4:
2f:43:32:8c:0d:15:27:a1:24:1f:28:53:0e:b3:aa:
60:04:fd:a9:a2:1b:51:0c:7e:d5:27:f3:80:38:14:
76:77:68:9c:e2:9e:43:03:35:d0:55:f2:d8:a8:dd:
de:c8:12:0e:10:60:f0:ca:0a:ad:0c:b6:05:49:07:
fd:6d:6e:d4:55:6b:27:a8:f4:92:ee:61:cb:df:2c:
c9:34:2e:aa:96:30:6d:7d:27:14:a3:71:a2:68:54:
c8:ab:f9:28:3a:84:73:72:b0:9e:ee:e4:ef:d1:7c:
25:d6:e2:d9:ef:9c:13:b9:85:26:3f:60:7c:04:33:
43:e5:5e:fa:68:f2:8d:55:52:23:18:54:7d:eb:c0:
4d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:01:81:8B:B6:2C:A6:37:1C:09:9A:42:C1:6D:58:A7:24:CE:D4:B7
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/YAGBi7YspjccCZpCwW1YpyTO1Lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.105.0/24
Signature Algorithm: sha256WithRSAEncryption
98:fa:66:5a:10:f6:6e:cc:6d:8c:a2:bf:68:8c:a4:75:ec:9c:
c7:b7:b2:d4:03:45:c8:e4:9b:b4:4b:5d:4a:28:f8:42:95:3e:
9d:e8:dd:61:a4:24:92:b3:15:31:2a:5d:34:30:37:9c:19:18:
71:8e:92:a1:53:7a:f1:33:e3:a5:2b:cf:46:ef:b1:df:fc:ac:
4b:4f:df:c1:d5:b4:a8:0d:73:44:e6:a4:28:7d:c9:d1:2a:8c:
50:f9:c1:7f:d8:39:f2:41:ad:d6:f6:3f:4d:01:8b:d9:a5:35:
13:83:9a:32:0a:8c:25:ba:e9:ef:01:a8:83:9b:9c:82:32:9d:
a5:35:17:ba:b0:75:26:09:a2:cf:a5:89:7e:84:88:2a:f8:91:
17:83:bc:75:3f:dd:0c:e3:ef:e6:4d:6c:ff:13:31:ab:69:df:
c2:5a:9b:5d:78:21:f7:ba:a4:12:4a:83:ac:a5:1f:c5:88:9d:
4c:35:62:b2:fa:a2:73:d7:92:65:bd:54:6e:de:ea:17:d7:23:
23:5a:6a:36:20:0c:f3:7f:b8:3a:89:b5:f6:fa:ab:01:41:a5:
3c:87:0f:24:47:48:7e:a4:35:57:fc:ea:d8:6a:6f:4e:2c:35:
88:b4:b5:d8:9e:5a:20:ab:db:f8:94:a0:49:1f:e0:3c:69:6e:
7f:5f:a0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 10:31:09 2026 by rpki-client