Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/yst2ONDag_b_ibKe9wGgyuGAS9Q.roa
File: yst2ONDag_b_ibKe9wGgyuGAS9Q.roa (raw, json)
Hash identifier: bBPvkD1PK6IY+yLnF/1fjVLXlk+SFKiXHO9PhdM/Fgw=
Subject key identifier: CA:CB:76:38:D0:DA:83:F6:FF:89:B2:9E:F7:01:A0:CA:E1:80:4B:D4
Certificate issuer: /CN=485f76274c805d25b115a3adba1d2ea154deead7
Certificate serial: 019EF983A43FFA05F264327AAA91EF9AE9E8
Authority key identifier: 48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/yst2ONDag_b_ibKe9wGgyuGAS9Q.roa
Signing time: Wed 24 Jun 2026 12:03:34 +0000
ROA not before: Wed 24 Jun 2026 12:03:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206728
IP address blocks: 45.141.85.0/24 maxlen: 24
45.141.86.0/24 maxlen: 24
45.141.87.0/24 maxlen: 24
91.220.163.0/24 maxlen: 24
194.26.25.0/24 maxlen: 24
194.26.29.0/24 maxlen: 24
194.26.69.0/24 maxlen: 24
2a0b:7ec0::/29 maxlen: 48
2a0b:7ec0:1320::/48 maxlen: 48
2a0b:7ec0:1321::/48 maxlen: 48
2a0b:7ec0:7701::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 06:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:83:a4:3f:fa:05:f2:64:32:7a:aa:91:ef:9a:e9:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485f76274c805d25b115a3adba1d2ea154deead7
Validity
Not Before: Jun 24 12:03:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cacb7638d0da83f6ff89b29ef701a0cae1804bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f0:74:27:d9:2f:3d:13:c3:f5:22:e1:88:e2:
20:3b:7c:b2:2f:79:f4:84:14:29:da:9d:fe:df:51:
8b:26:68:55:83:5c:2f:ed:ed:12:72:73:ad:c3:ca:
92:21:67:cc:5e:08:d4:f5:c1:62:a8:d7:95:5b:aa:
62:be:b8:43:8e:62:57:6b:e4:bf:26:ab:29:5a:fa:
ee:2e:f2:f1:1f:94:cd:94:be:a4:2e:e0:01:2f:ec:
d7:56:e9:d5:26:82:01:54:d9:00:32:b8:ff:50:1a:
c1:ca:a0:96:d0:4b:68:60:73:82:a6:fc:c8:cd:78:
a5:ce:16:22:1b:34:41:1d:00:e2:c5:f6:c5:87:d7:
e3:6b:98:35:41:63:a7:ad:d1:b7:b9:3e:d7:27:50:
35:e4:a6:12:80:77:5c:6a:75:60:22:b4:27:bb:d3:
1e:69:7f:2e:24:cf:5c:b1:af:c9:05:48:aa:00:a9:
e5:1c:71:92:ea:d7:48:a8:a2:2d:7c:14:f5:16:c2:
cb:cf:c2:83:e8:85:3e:f0:4e:db:1e:28:17:1d:c4:
8c:88:3f:e4:ca:3c:2d:0b:cd:d2:73:f6:af:ef:45:
10:85:d0:9f:a0:87:a4:95:40:51:3e:25:64:d3:4f:
f9:73:ba:70:2e:71:e5:b1:ad:79:f6:8b:88:ff:dc:
fa:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CB:76:38:D0:DA:83:F6:FF:89:B2:9E:F7:01:A0:CA:E1:80:4B:D4
X509v3 Authority Key Identifier:
keyid:48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/yst2ONDag_b_ibKe9wGgyuGAS9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.85.0-45.141.87.255
91.220.163.0/24
194.26.25.0/24
194.26.29.0/24
194.26.69.0/24
IPv6:
2a0b:7ec0::/29
Signature Algorithm: sha256WithRSAEncryption
56:8e:64:5d:88:93:f9:b8:fb:92:1a:af:4d:6e:59:ae:c6:be:
6c:23:8d:b8:46:c9:8f:41:52:7c:ad:7b:01:8d:75:64:ee:6b:
d8:a7:84:d0:f9:1c:fd:ee:a8:a6:ba:8c:3d:1d:78:c8:fa:90:
66:d3:7c:b4:f8:18:ee:fc:97:fa:10:9f:d7:78:f2:55:b5:cd:
b4:2d:6c:94:11:54:83:7c:f9:c4:98:ee:d5:8d:6a:80:4b:b3:
46:5e:7d:df:df:da:e6:ed:46:83:31:35:26:db:3a:c6:42:a1:
4a:01:f7:f7:de:df:12:16:67:a3:b7:26:51:ab:82:d2:63:30:
b4:00:26:1d:3a:61:58:bd:f9:59:11:23:a4:94:f2:6c:bb:b6:
0e:5f:a0:cf:4c:e9:07:f7:02:2e:a2:b2:4f:f4:b1:d9:a4:59:
09:6f:09:a5:3c:0d:e9:4e:a6:76:fa:41:22:0e:81:39:4a:a4:
87:b7:69:fa:8c:c0:80:b2:2b:3a:c2:2b:a4:3d:65:60:ae:45:
04:96:25:5b:04:66:59:14:43:23:de:fe:bf:2a:81:7b:ef:59:
82:fe:13:42:81:c4:6f:81:a8:8e:46:d4:b4:12:b6:0b:35:23:
81:9a:5f:e3:91:9a:ac:b6:01:e4:68:76:ea:92:02:ab:12:ff:
b4:76:9c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 12:48:12 2026 by rpki-client