Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/ybHYCTFAZGo2EGZdpzqLsJYnc28.roa
File: ybHYCTFAZGo2EGZdpzqLsJYnc28.roa (raw, json)
Hash identifier: i9a09U1iLvHOe8aAJIU4uXSPvi4bHAbRHHJxb9p2XKE=
Subject key identifier: C9:B1:D8:09:31:40:64:6A:36:10:66:5D:A7:3A:8B:B0:96:27:73:6F
Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Certificate serial: 019FBADC1DF249A65DEBA86170EE85DF7F58
Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/ybHYCTFAZGo2EGZdpzqLsJYnc28.roa
Signing time: Sat 01 Aug 2026 01:06:55 +0000
ROA not before: Sat 01 Aug 2026 01:06:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 194.53.202.0/24 maxlen: 24
194.53.203.0/24 maxlen: 24
194.61.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Aug 2026 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ba:dc:1d:f2:49:a6:5d:eb:a8:61:70:ee:85:df:7f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Validity
Not Before: Aug 1 01:06:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c9b1d8093140646a3610665da73a8bb09627736f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6c:98:78:d9:fa:6f:3e:49:87:89:44:d3:9b:
33:8b:89:15:f5:00:f8:48:dd:03:f7:42:41:38:3e:
57:03:64:96:05:35:88:6f:05:ba:c5:55:51:f7:21:
41:37:0d:b8:87:77:05:20:75:32:cd:27:13:97:cf:
8b:39:5c:41:bd:00:c5:52:cd:16:67:dc:90:6a:c2:
65:75:10:ed:bb:cd:eb:64:ce:ab:11:d1:bc:02:b3:
8c:d5:2b:da:0a:61:2f:1e:d9:b0:2b:36:c9:48:e0:
da:50:99:20:03:98:30:06:d1:9d:36:cf:73:09:0c:
40:20:b6:92:6b:19:1f:4c:6d:b1:db:47:a9:b8:55:
d2:81:d6:e0:2a:14:9e:9e:d8:0d:15:7a:96:c7:16:
ad:e0:44:7b:b0:0c:cb:2b:b6:0c:dc:41:5d:3c:11:
e5:71:8b:bc:95:cd:e0:27:6c:d7:97:a6:61:7b:99:
09:66:36:34:11:62:77:e6:8f:3a:ff:9f:f0:37:79:
4e:83:2f:bd:ef:16:e3:79:f0:81:f1:9f:2e:f6:1b:
06:bb:0c:d8:c0:11:cb:9f:6b:fc:0b:d8:4f:50:25:
18:34:ce:c5:f8:87:da:f2:f6:8b:87:c3:c5:9d:00:
d2:83:88:02:69:23:58:8f:40:d6:62:6d:33:e4:f4:
fc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B1:D8:09:31:40:64:6A:36:10:66:5D:A7:3A:8B:B0:96:27:73:6F
X509v3 Authority Key Identifier:
keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/ybHYCTFAZGo2EGZdpzqLsJYnc28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.202.0/23
194.61.239.0/24
Signature Algorithm: sha256WithRSAEncryption
62:c7:18:88:9a:cd:31:1a:89:c0:0c:e3:da:de:64:8f:a6:12:
7b:1e:c3:34:1a:b9:02:57:4f:20:06:30:41:09:39:e8:6a:17:
9b:0b:fd:dc:a5:93:20:fe:e9:a9:ce:52:50:d1:d9:9f:b2:80:
1b:4b:fb:66:a6:09:5a:f9:17:fc:c1:23:19:fd:f5:36:8a:ab:
75:8b:3c:38:c2:aa:bc:00:65:7d:e3:00:72:d4:54:44:ed:6a:
24:23:58:52:7e:0b:6c:fe:ec:69:0c:9f:6b:5d:2f:98:cd:42:
59:7d:04:b1:e8:68:81:45:f2:af:0d:61:98:bf:21:49:fa:47:
9a:66:b6:38:01:43:45:f5:5d:35:27:57:1c:0e:33:23:69:d2:
bc:48:f1:e5:80:bd:1d:1e:8d:e1:94:31:a1:37:69:e9:08:35:
9c:60:6c:38:96:d8:c6:4f:ba:19:bd:80:27:9e:15:2b:60:28:
43:03:52:18:56:c2:16:5b:11:92:1f:16:0c:8f:f2:56:4b:66:
f0:dc:02:80:38:7a:ac:09:7e:af:5a:80:c4:01:de:b3:84:6d:
62:9c:8a:1b:eb:f1:b1:a6:80:7f:77:7d:47:c2:b7:29:82:56:
26:fc:5b:17:81:67:bd:32:45:f5:39:28:66:50:d5:f4:57:85:
b7:c6:66:65
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ+63B3ySaZd66hhcO6F339YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5
MjU4ZjEwHhcNMjYwODAxMDEwNjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWIxZDgwOTMxNDA2NDZhMzYxMDY2NWRhNzNhOGJiMDk2Mjc3MzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2yYeNn6bz5Jh4lE05szi4kV9QD4
SN0D90JBOD5XA2SWBTWIbwW6xVVR9yFBNw24h3cFIHUyzScTl8+LOVxBvQDFUs0W
Z9yQasJldRDtu83rZM6rEdG8ArOM1SvaCmEvHtmwKzbJSODaUJkgA5gwBtGdNs9z
CQxAILaSaxkfTG2x20epuFXSgdbgKhSentgNFXqWxxat4ER7sAzLK7YM3EFdPBHl
cYu8lc3gJ2zXl6Zhe5kJZjY0EWJ35o86/5/wN3lOgy+97xbjefCB8Z8u9hsGuwzY
wBHLn2v8C9hPUCUYNM7F+Ifa8vaLh8PFnQDSg4gCaSNYj0DWYm0z5PT8/wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMmx2AkxQGRqNhBmXac6i7CWJ3NvMB8GA1UdIwQY
MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt
Njk3OTQ4ZWE3MWY1LzEveWJIWUNURkFaR28yRUdaZHB6cUxzSlluYzI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1
LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwjXKAwQA
wj3vMA0GCSqGSIb3DQEBCwUAA4IBAQBixxiIms0xGonADOPa3mSPphJ7HsM0GrkC
V08gBjBBCTnoahebC/3cpZMg/umpzlJQ0dmfsoAbS/tmpgla+Rf8wSMZ/fU2iqt1
izw4wqq8AGV94wBy1FRE7WokI1hSfgts/uxpDJ9rXS+YzUJZfQSx6GiBRfKvDWGY
vyFJ+keaZrY4AUNF9V01J1ccDjMjadK8SPHlgL0dHo3hlDGhN2npCDWcYGw4ltjG
T7oZvYAnnhUrYChDA1IYVsIWWxGSHxYMj/JWS2bw3AKAOHqsCX6vWoDEAd6zhG1i
nIob6/GxpoB/d31HwrcpglYm/FsXgWe9MkX1OShmUNX0V4W3xmZl
-----END CERTIFICATE-----
Generated at Mon Aug 24 13:16:31 2026 by rpki-client