Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/YDVKQbfRYIpm7hR70cFm_r3Bozk.roa
File: YDVKQbfRYIpm7hR70cFm_r3Bozk.roa (raw, json)
Hash identifier: aF7PQA8hwmlUZMld6dK9hesrrO56Rkyyowsvq4iO504=
Subject key identifier: 60:35:4A:41:B7:D1:60:8A:66:EE:14:7B:D1:C1:66:FE:BD:C1:A3:39
Certificate issuer: /CN=fd7e4801b012f1b199b2fd11aaac52d775634739
Certificate serial: 019F23683AFDB1C1957D39DCE7F437E20044
Authority key identifier: FD:7E:48:01:B0:12:F1:B1:99:B2:FD:11:AA:AC:52:D7:75:63:47:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_X5IAbAS8bGZsv0RqqxS13VjRzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/YDVKQbfRYIpm7hR70cFm_r3Bozk.roa
Signing time: Thu 02 Jul 2026 15:17:41 +0000
ROA not before: Thu 02 Jul 2026 15:17:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51861
IP address blocks: 2001:67c:374::/48 maxlen: 48
2001:67c:374:4000::/50 maxlen: 50
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_X5IAbAS8bGZsv0RqqxS13VjRzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:3a:fd:b1:c1:95:7d:39:dc:e7:f4:37:e2:00:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd7e4801b012f1b199b2fd11aaac52d775634739
Validity
Not Before: Jul 2 15:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=60354a41b7d1608a66ee147bd1c166febdc1a339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a7:21:04:52:d2:e8:d3:8a:53:2c:2d:6d:71:
e7:1e:67:7e:56:db:6c:94:f0:c0:1a:8c:90:02:c5:
64:bb:f1:6e:fd:ee:2c:85:60:93:01:38:cd:41:73:
6c:0b:af:9a:91:60:ee:14:55:66:dd:71:cb:06:8d:
8a:91:a7:f0:49:08:e1:bd:3d:bd:4a:05:14:3c:a1:
fc:f3:4c:d7:b8:c1:0c:a0:ae:cf:fd:34:27:05:01:
46:0a:7c:72:4b:e4:ce:93:7e:58:cc:6e:43:bf:cb:
35:f5:ca:0d:58:f6:d6:85:33:07:2e:63:67:75:df:
45:ae:d3:39:66:ae:5a:f3:18:fa:05:3d:f6:c4:3d:
f8:d4:87:62:41:2b:9a:14:90:c8:7a:51:e1:d4:bd:
d2:9c:ec:f2:7c:a4:e0:9f:39:34:a1:e9:5a:60:2e:
31:fa:24:13:30:0f:d9:d8:b2:1d:ef:f7:29:2c:7c:
da:a3:4e:f8:fe:04:4b:56:9f:b9:a3:c2:77:c5:e8:
95:ba:32:f4:8c:6c:2d:28:22:ad:49:da:27:87:37:
0c:1b:3c:ed:a8:38:5f:d8:87:cf:e4:4d:94:1e:fd:
1e:0d:f5:72:12:d3:53:7f:7c:d3:50:8d:5d:98:85:
3b:e9:1d:21:29:dd:91:67:72:84:99:42:6d:6b:de:
ae:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:35:4A:41:B7:D1:60:8A:66:EE:14:7B:D1:C1:66:FE:BD:C1:A3:39
X509v3 Authority Key Identifier:
keyid:FD:7E:48:01:B0:12:F1:B1:99:B2:FD:11:AA:AC:52:D7:75:63:47:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_X5IAbAS8bGZsv0RqqxS13VjRzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/YDVKQbfRYIpm7hR70cFm_r3Bozk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/_X5IAbAS8bGZsv0RqqxS13VjRzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:374::/48
Signature Algorithm: sha256WithRSAEncryption
7d:0a:09:ba:31:31:bd:97:f1:d7:2e:ed:e9:fc:8e:55:54:30:
23:75:2b:4d:b5:54:60:99:3a:4f:bd:92:dd:ac:3f:22:e4:e8:
29:29:57:d9:17:10:c0:d7:f5:d2:7e:6b:7e:54:7f:4d:52:ec:
89:c5:8e:52:9a:24:c0:21:8b:20:3a:22:30:fe:02:2d:dd:43:
0a:44:75:56:5b:dd:84:c7:c1:a1:30:4f:de:3d:55:11:5f:5e:
b3:f3:18:ba:b5:ed:1e:b6:28:e9:de:11:a6:67:16:55:c0:0d:
b7:39:e7:ea:c1:49:f5:39:3a:2d:65:73:7b:38:d4:c6:4f:71:
12:66:7b:ad:cf:86:1e:b4:60:84:c0:8e:e7:bd:de:a9:9a:ae:
70:b2:fb:7c:59:ee:05:b6:04:12:d5:3d:a3:6b:9d:68:9a:84:
3f:ce:79:4d:49:b7:24:c0:aa:1e:57:bf:ed:50:1c:8a:4f:07:
53:b0:e5:65:0e:8e:ce:e0:f5:ae:ac:97:25:0d:1e:aa:b7:ea:
c3:6f:a5:58:8d:28:c7:ea:8d:d6:5f:20:a1:89:64:70:65:5b:
1f:cf:54:14:43:54:db:4f:d0:1a:68:88:75:be:c3:bc:db:cc:
b9:2a:99:21:49:39:27:8f:8a:2b:ee:51:f5:8c:fe:7e:7e:68:
ca:15:ac:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:55:32 2026 by rpki-client