Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/Yp-18CobC4EQ7wxusXUDa74ZdM4.roa
File: Yp-18CobC4EQ7wxusXUDa74ZdM4.roa (raw, json)
Hash identifier: +JrJazP+gKPDTmGyuhKEcGZ9PzJC1/h44jVEMbrPd08=
Subject key identifier: 62:9F:B5:F0:2A:1B:0B:81:10:EF:0C:6E:B1:75:03:6B:BE:19:74:CE
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A06BC9C6BF341A07064A86919057C4535B
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/Yp-18CobC4EQ7wxusXUDa74ZdM4.roa
Signing time: Fri 04 Sep 2026 09:39:40 +0000
ROA not before: Fri 04 Sep 2026 09:39:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51722
IP address blocks: 31.40.196.0/24 maxlen: 24
31.40.204.0/24 maxlen: 24
92.249.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:54:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6b:c9:c6:bf:34:1a:07:06:4a:86:91:90:57:c4:53:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Sep 4 09:39:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=629fb5f02a1b0b8110ef0c6eb175036bbe1974ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a6:ff:c4:cf:a8:e5:da:6c:ce:f0:55:d6:22:
59:da:c8:df:36:2c:fe:69:d8:6e:ae:54:85:a7:87:
d6:7c:3b:7f:de:fb:b4:82:eb:0f:3b:01:ec:4f:7c:
76:0e:af:cb:b2:5f:49:c9:f4:6d:d3:3c:02:b8:89:
a7:e4:e1:6c:6d:ca:e1:96:3e:02:29:15:92:6e:df:
93:a7:9f:57:87:80:56:01:be:e7:a2:39:2a:84:18:
40:d9:56:d5:a4:bf:9f:30:7a:92:2a:8b:19:53:df:
15:fc:6b:04:a2:a8:0c:27:90:76:4e:78:c6:0f:d6:
b7:b1:27:c9:4d:76:97:b5:8f:2f:cd:e8:e8:2e:53:
4e:cf:22:a9:30:5c:61:10:eb:7b:f3:b5:47:9c:6d:
db:ea:e6:dd:a1:f3:c7:4c:1d:db:e2:80:e7:d7:4a:
c1:26:07:d4:a3:7b:eb:b3:b6:c8:73:fc:a8:51:3e:
55:33:ac:2b:55:e3:9c:a7:9d:1b:2a:21:da:ec:b5:
9e:89:0a:c7:89:3f:12:02:23:a8:6a:3d:ac:e2:57:
65:09:9e:a9:fa:ea:58:38:70:7b:46:b2:8a:f7:dc:
3e:55:ef:50:e6:37:ad:00:62:2b:6b:5a:61:a6:a1:
f9:73:5a:88:dd:68:ba:14:b1:b3:37:8a:ab:6c:d4:
d0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9F:B5:F0:2A:1B:0B:81:10:EF:0C:6E:B1:75:03:6B:BE:19:74:CE
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/Yp-18CobC4EQ7wxusXUDa74ZdM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.196.0/24
31.40.204.0/24
92.249.62.0/24
Signature Algorithm: sha256WithRSAEncryption
70:56:c7:89:d9:0c:d2:c0:ad:df:3e:1c:d9:5d:44:2f:d6:18:
82:96:bb:bd:db:69:c7:3a:b6:46:fe:4b:37:3f:22:96:cf:50:
3d:c9:62:76:fb:be:92:29:85:71:65:02:09:e6:ff:0c:ac:0f:
07:9b:2c:f7:3d:50:e9:29:6c:26:27:a9:48:6b:75:06:7f:3e:
fa:14:82:a7:5d:59:b7:d3:6d:f0:52:d0:26:e2:43:df:f1:4c:
bb:02:24:15:73:6f:02:7e:f7:c7:59:e3:98:2c:4b:b0:a1:34:
33:87:f1:b6:94:b3:0b:15:13:11:f9:05:24:8b:8a:a1:ae:51:
31:03:3a:e2:ab:11:4b:aa:b4:01:0c:0f:c8:d2:31:a1:62:85:
ad:56:36:3c:8b:61:fc:c6:36:c7:cc:33:e8:a7:1e:a6:30:fb:
f8:94:e7:31:a2:20:35:eb:96:43:f7:96:20:f4:c0:a3:30:56:
db:4b:2d:e0:e6:e4:60:26:ea:06:46:28:94:bd:cd:7c:e1:d6:
75:69:91:a5:a7:95:ed:cb:7c:f4:a4:6b:72:6d:4e:be:2e:a5:
34:52:70:42:dc:ab:23:11:18:dc:d7:ca:4d:78:2f:70:03:73:
1a:3a:db:95:5b:d5:65:45:57:f4:74:ae:ff:66:e4:4b:5d:d6:
18:16:77:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:43:57 2026 by rpki-client