Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/YpPmYf6zgICwfjz8NuAopnzNieM.roa
File: YpPmYf6zgICwfjz8NuAopnzNieM.roa (raw, json)
Hash identifier: Wfroa7HPPkCm63Ywbw+5nQxutBW2wjmxATyJS+4COgo=
Subject key identifier: 62:93:E6:61:FE:B3:80:80:B0:7E:3C:FC:36:E0:28:A6:7C:CD:89:E3
Certificate issuer: /CN=c42ccc09b18aae25dc6a6c5793f9b920c8f6a190
Certificate serial: 019F2368CD9547E6F96B1FCDB2E13373FDA2
Authority key identifier: C4:2C:CC:09:B1:8A:AE:25:DC:6A:6C:57:93:F9:B9:20:C8:F6:A1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/YpPmYf6zgICwfjz8NuAopnzNieM.roa
Signing time: Thu 02 Jul 2026 15:18:18 +0000
ROA not before: Thu 02 Jul 2026 15:18:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206186
IP address blocks: 185.170.225.0/24 maxlen: 24
188.241.28.0/24 maxlen: 24
2001:678:3b0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:cd:95:47:e6:f9:6b:1f:cd:b2:e1:33:73:fd:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42ccc09b18aae25dc6a6c5793f9b920c8f6a190
Validity
Not Before: Jul 2 15:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6293e661feb38080b07e3cfc36e028a67ccd89e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ca:9b:c4:c9:37:bb:3c:35:d5:28:89:5e:1c:
68:e5:7f:33:d5:e9:42:45:42:e9:40:23:1e:78:2e:
a3:1f:c4:41:0c:c9:f4:90:21:37:9f:f0:01:9a:e9:
8a:35:8b:2a:4f:2a:e2:6a:4c:8c:ab:72:ef:5e:80:
a6:00:90:d3:91:cf:fb:86:99:23:ad:ea:19:76:db:
f3:56:09:cb:4d:ef:ad:24:76:a0:a0:c4:74:b4:5d:
83:19:ab:16:f6:f0:40:b7:5b:00:11:c9:25:44:5c:
94:d1:a3:e8:b3:47:35:2c:3b:30:3b:23:22:3c:82:
84:fe:18:b3:05:33:81:dc:e9:ae:3c:8a:86:c0:46:
b6:2d:73:4d:7f:fc:ef:52:07:9f:ad:a0:d4:b9:cc:
4c:d6:a8:2b:1d:8b:73:af:fd:1f:5f:21:92:f3:03:
5d:41:a3:ae:b7:65:c4:5e:a2:2c:cf:87:ec:9b:f3:
ed:01:98:af:ce:41:1a:bf:b8:a4:96:81:fb:eb:65:
65:af:68:47:f6:ff:86:4e:69:80:6c:ad:f2:f3:47:
ee:06:5f:92:85:5b:99:a3:21:f5:06:90:26:e4:e4:
3a:ce:70:1a:cc:7d:98:d0:48:14:d5:52:f5:4b:80:
a8:3b:46:cc:c7:24:c6:e4:10:bf:ec:71:96:79:53:
8e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:93:E6:61:FE:B3:80:80:B0:7E:3C:FC:36:E0:28:A6:7C:CD:89:E3
X509v3 Authority Key Identifier:
keyid:C4:2C:CC:09:B1:8A:AE:25:DC:6A:6C:57:93:F9:B9:20:C8:F6:A1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/YpPmYf6zgICwfjz8NuAopnzNieM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.225.0/24
188.241.28.0/24
IPv6:
2001:678:3b0::/48
Signature Algorithm: sha256WithRSAEncryption
68:a5:d5:53:32:45:67:76:86:22:48:2b:f7:94:03:44:fc:01:
63:81:cd:af:f3:96:63:23:bf:b8:5a:e5:ab:2c:7c:4f:7e:63:
e0:d2:1b:dc:38:87:be:f4:f8:40:b7:f2:de:5f:f0:6c:b4:c6:
31:28:c5:6e:9a:7b:68:2c:47:f9:d8:aa:ad:c7:bc:b5:1f:3d:
3e:ee:d5:da:f5:0b:9b:4f:b7:37:8c:4e:a7:fa:34:9f:4b:87:
8d:a0:93:4a:1b:21:56:4f:30:40:cc:e1:2b:11:b7:25:6d:1c:
be:c2:7b:a0:0a:a6:31:18:7e:32:c8:72:96:c3:f2:9f:34:8c:
5e:40:66:38:c4:56:1e:4d:24:0b:6f:03:9f:8c:49:99:ee:e7:
7a:cc:a5:fa:8f:ba:d5:57:2a:1f:a6:55:e5:8f:54:b6:32:84:
64:4c:81:8b:4a:93:77:e5:49:5b:88:33:ec:17:ee:59:13:fb:
c1:d5:ed:5e:f3:9a:1b:13:80:d0:7a:88:d2:b5:43:42:33:3c:
8b:c5:da:1e:49:55:1b:12:25:99:b6:0c:25:f2:47:a4:89:db:
0d:08:f5:d0:1f:4b:d2:77:09:40:d7:ec:21:24:21:cf:e1:6c:
64:bf:98:bc:f0:e2:90:ce:35:28:8a:f3:f9:35:c4:39:bf:2b:
5d:d2:de:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:57:11 2026 by rpki-client