Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/YpzfhBRjlhlygyZbhfS_gEZ78u8.roa
File: YpzfhBRjlhlygyZbhfS_gEZ78u8.roa (raw, json)
Hash identifier: 4VOe3+Zz4d8DVsxBDVMiQp9XKsvhya9ruQE7ssmcGZ0=
Subject key identifier: 62:9C:DF:84:14:63:96:19:72:83:26:5B:85:F4:BF:80:46:7B:F2:EF
Certificate issuer: /CN=4ba7b24f87ea51446d519afd4fe60419198ec012
Certificate serial: 019ED510E2833562FEB164451BC6984F97E5
Authority key identifier: 4B:A7:B2:4F:87:EA:51:44:6D:51:9A:FD:4F:E6:04:19:19:8E:C0:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/YpzfhBRjlhlygyZbhfS_gEZ78u8.roa
Signing time: Wed 17 Jun 2026 10:11:54 +0000
ROA not before: Wed 17 Jun 2026 10:11:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49010
IP address blocks: 84.252.76.0/22 maxlen: 22
86.62.24.0/22 maxlen: 22
91.207.2.0/23 maxlen: 23
109.232.72.0/21 maxlen: 21
193.187.164.0/22 maxlen: 22
2a00:19f8::/32 maxlen: 32
2a09:5500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:10:e2:83:35:62:fe:b1:64:45:1b:c6:98:4f:97:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba7b24f87ea51446d519afd4fe60419198ec012
Validity
Not Before: Jun 17 10:11:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=629cdf84146396197283265b85f4bf80467bf2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:49:d3:f0:b0:3a:8b:2b:e0:87:79:74:84:65:
8c:74:2f:1f:77:2f:61:19:cb:10:99:24:75:88:23:
37:18:60:64:34:bb:21:e8:c3:41:f6:8e:15:1c:f7:
1b:46:30:7b:a8:c3:34:d7:23:6e:35:77:45:06:a7:
27:16:97:73:3f:11:9d:ca:48:82:b8:64:9a:58:2c:
a9:41:0d:d5:19:27:4e:2e:35:19:2b:d7:41:0a:e3:
3f:cf:ff:70:6b:e1:7b:67:ce:a5:45:52:8a:f5:a4:
6b:67:25:f1:dd:e7:27:bc:27:e2:34:7a:c9:a3:e9:
47:6c:dd:dd:1b:e5:5a:cc:3f:25:dd:81:3a:bd:cc:
70:b9:47:d0:e2:5a:38:80:17:ff:a2:cb:c0:37:62:
2f:da:12:92:fe:ee:79:9c:b2:dd:70:0b:3e:16:84:
d1:79:89:c8:b1:ac:f0:93:12:b9:66:75:d0:7d:fd:
c1:ea:19:a4:1f:7f:b5:40:4e:99:39:11:23:3e:f7:
ba:45:ed:2a:17:49:26:ef:de:97:85:ff:ad:28:9e:
fb:98:79:8a:88:7f:dc:6a:8f:bf:a7:3e:b7:f3:4c:
c7:9b:e9:b2:8d:e2:ce:69:0f:7d:62:36:f2:aa:bd:
4b:df:62:88:04:03:20:0d:60:e1:36:18:ca:3b:23:
8e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9C:DF:84:14:63:96:19:72:83:26:5B:85:F4:BF:80:46:7B:F2:EF
X509v3 Authority Key Identifier:
keyid:4B:A7:B2:4F:87:EA:51:44:6D:51:9A:FD:4F:E6:04:19:19:8E:C0:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/YpzfhBRjlhlygyZbhfS_gEZ78u8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.76.0/22
86.62.24.0/22
91.207.2.0/23
109.232.72.0/21
193.187.164.0/22
IPv6:
2a00:19f8::/32
2a09:5500::/29
Signature Algorithm: sha256WithRSAEncryption
19:2a:34:d2:cd:b0:df:f8:7f:de:7d:bb:0a:2a:8f:43:de:29:
39:36:5a:df:a2:df:2c:3a:11:df:f7:b4:0b:e0:2e:4c:a7:38:
82:ad:1c:ce:1b:f7:94:5a:b9:d0:cb:b9:4b:83:e4:65:6e:a0:
83:ad:0f:29:e2:c2:18:17:c1:36:ef:7f:60:d0:fc:25:20:57:
02:b8:10:13:ea:1d:31:95:96:7a:e3:09:b6:b7:67:95:56:83:
20:e8:c3:14:1d:27:c1:87:92:4e:5d:ee:15:2d:68:87:d4:99:
68:7e:f8:52:15:4d:60:ca:b4:c6:fd:7c:f9:be:58:57:18:27:
62:8f:eb:dd:2b:42:9a:b2:e8:8d:2b:ea:d1:d6:d2:ec:bc:c1:
a6:58:35:1e:cb:c5:f4:56:37:60:e4:b4:5f:fb:a0:36:3e:da:
46:4c:6d:4d:72:79:c5:2d:27:a9:48:9b:e3:e6:f6:ec:59:3a:
a2:a4:31:9a:90:5a:82:09:21:6b:17:58:05:eb:4d:82:a4:c1:
70:21:d1:33:6f:76:84:1b:98:85:f3:35:bb:16:73:0d:7c:66:
74:b9:f8:a8:40:8c:32:76:e3:a2:b1:d0:6e:1c:2d:75:57:7f:
ea:97:9b:b5:aa:2d:a4:ba:ab:fd:56:7a:33:71:22:e1:b0:33:
62:cc:22:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:35:51 2026 by rpki-client