Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/ykz6GWQR-SebfwXqj4XsWykjRTk.roa
File: ykz6GWQR-SebfwXqj4XsWykjRTk.roa (raw, json)
Hash identifier: f2lTfpKRoYNl2GrOpgrWATLOADeKFStv3SE/ho/jlag=
Subject key identifier: CA:4C:FA:19:64:11:F9:27:9B:7F:05:EA:8F:85:EC:5B:29:23:45:39
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019DB01FCB8F21F71C839A7130FB6C58027A
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/ykz6GWQR-SebfwXqj4XsWykjRTk.roa
Signing time: Tue 21 Apr 2026 12:59:26 +0000
ROA not before: Tue 21 Apr 2026 12:59:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13537
IP address blocks: 87.232.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 May 2026 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:1f:cb:8f:21:f7:1c:83:9a:71:30:fb:6c:58:02:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Apr 21 12:59:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca4cfa196411f9279b7f05ea8f85ec5b29234539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b9:f6:a6:e1:bf:8e:0d:bf:66:d5:88:16:d0:
6e:f1:aa:2a:ce:3a:14:f3:94:3b:88:55:e4:eb:45:
b5:09:82:f4:31:15:6c:4f:ae:69:e4:67:e1:41:9b:
81:eb:b9:cd:b9:e9:04:18:c0:ae:52:78:7d:63:6d:
25:07:bf:16:68:9b:6c:c8:97:60:88:70:79:0d:83:
1d:22:47:4c:2d:8a:50:e8:78:12:e2:c7:46:bf:ef:
fb:0b:04:4b:f9:fd:3d:93:89:31:a7:1c:32:19:ca:
9a:be:00:ca:cb:e6:1c:73:c9:19:2f:8f:4d:d9:f2:
7f:de:4e:cc:be:64:b3:43:49:ea:72:a4:02:7b:50:
ad:de:f6:8e:83:cb:f4:78:b7:fa:34:c0:b1:04:de:
ba:42:84:aa:06:2a:9e:06:07:67:f0:93:d1:db:8c:
4e:16:b9:8a:75:43:2f:53:fe:3a:b2:5a:57:b9:3f:
df:5c:03:3b:1f:d8:d8:2d:a9:b3:81:a2:bf:0f:97:
58:00:80:50:bc:0d:1e:0c:c6:c2:ea:8c:5b:ea:f3:
2e:88:4d:51:48:8e:12:65:7b:ef:fe:52:b6:a6:ee:
22:06:22:d6:ba:8a:72:ca:00:23:74:6a:e4:73:f9:
77:fc:6f:91:1a:be:b3:93:fe:61:41:81:10:64:ab:
29:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4C:FA:19:64:11:F9:27:9B:7F:05:EA:8F:85:EC:5B:29:23:45:39
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/ykz6GWQR-SebfwXqj4XsWykjRTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.106.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:6f:5d:50:4c:4d:a8:6f:b7:42:75:29:7f:90:d4:6c:77:b3:
a3:6b:ef:2d:b6:d0:e5:55:7e:fe:b7:c7:0a:d2:4d:f2:1a:88:
00:4b:01:dc:cc:59:f5:55:0c:ce:fa:31:e3:c4:08:40:92:42:
87:bf:53:88:28:f6:1f:c6:0a:82:ae:fe:59:e6:da:65:c7:60:
db:ee:1c:36:a0:92:fa:9b:93:a0:97:d5:13:a3:38:2e:48:83:
5c:db:53:95:49:48:6f:b0:32:6f:13:8f:5e:7c:7a:54:f3:0b:
cb:aa:e5:4f:6e:b2:e6:a7:2d:76:a8:85:9e:32:9e:3f:37:30:
56:38:01:92:1c:45:50:d6:85:f9:46:26:7e:5b:da:2f:25:b0:
d3:4b:14:b7:3e:6e:b3:b4:98:4a:5f:80:f4:52:72:16:97:17:
e1:c1:4e:af:3c:70:af:81:a9:e5:a5:4c:33:b8:65:a6:7e:94:
e6:93:8a:67:21:b1:f7:95:8a:81:ee:ab:62:00:cf:01:12:98:
b7:7b:31:ee:10:9f:6c:b9:8c:c4:a6:91:94:e4:c8:ce:c3:3c:
73:59:49:47:82:ae:eb:0f:8d:dc:07:f4:0d:74:1b:1b:e6:f6:
0c:4f:16:c3:14:64:2c:f6:29:f5:1a:c7:a0:49:e0:8a:65:5f:
e6:a0:74:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 15:36:31 2026 by rpki-client