Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/YrS-zU0gb2gsRDyFXkO54VCWxkM.roa
File: YrS-zU0gb2gsRDyFXkO54VCWxkM.roa (raw, json)
Hash identifier: VPnOry+i0fDjtn98ZDInnQWI3+XyaS04/h6hsFSIigk=
Subject key identifier: 62:B4:BE:CD:4D:20:6F:68:2C:44:3C:85:5E:43:B9:E1:50:96:C6:43
Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7
Certificate serial: 019F36FE9E2A8E8FF4AD8B15D20939F46F50
Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/YrS-zU0gb2gsRDyFXkO54VCWxkM.roa
Signing time: Mon 06 Jul 2026 10:34:44 +0000
ROA not before: Mon 06 Jul 2026 10:34:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209207
IP address blocks: 153.80.249.0/24 maxlen: 24
2a05:541:176::/48 maxlen: 48
2a05:541:177::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:fe:9e:2a:8e:8f:f4:ad:8b:15:d2:09:39:f4:6f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7
Validity
Not Before: Jul 6 10:34:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62b4becd4d206f682c443c855e43b9e15096c643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:63:a6:2e:5a:01:3e:7f:b0:e6:0e:68:6d:92:
57:d4:88:c3:94:00:b5:ea:ce:d5:48:92:86:b8:94:
46:3b:aa:80:50:3d:46:95:c9:1c:33:af:d6:10:81:
3e:5f:af:5c:d3:b6:36:8e:bb:0f:b7:ba:9f:0f:65:
63:14:0c:92:61:71:f5:ca:d0:1e:c6:d9:4a:19:a6:
02:b5:01:3c:8b:f9:a7:3b:16:cd:b3:5a:28:91:ac:
61:b5:af:1c:bc:8d:c7:f5:d2:b1:e5:e2:bc:78:09:
bc:bc:22:c5:3b:ab:3d:5f:c2:07:00:71:24:1e:26:
1d:51:00:e5:ce:52:06:21:c1:d8:a2:33:47:6e:8b:
6a:9c:c2:fa:d7:22:06:a5:a6:e7:e5:ca:11:9a:96:
3b:77:11:a2:4c:47:5b:66:01:eb:f7:a9:5d:fa:b2:
39:da:46:46:92:c3:c2:46:1c:01:7e:84:ae:11:09:
e3:3a:38:cc:a1:29:fc:80:5b:e3:d6:58:82:db:1e:
37:22:bc:f4:97:69:6e:41:cb:e7:f8:ef:05:3a:c5:
c1:48:b3:56:71:d9:72:7d:4c:59:f3:13:6b:b9:ad:
27:f8:e4:aa:51:64:82:b7:0f:48:b7:f4:57:bb:f2:
f1:f7:c2:29:78:0c:9e:3b:c9:2f:75:b3:d5:c9:6f:
2b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B4:BE:CD:4D:20:6F:68:2C:44:3C:85:5E:43:B9:E1:50:96:C6:43
X509v3 Authority Key Identifier:
keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/YrS-zU0gb2gsRDyFXkO54VCWxkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.80.249.0/24
IPv6:
2a05:541:176::/47
Signature Algorithm: sha256WithRSAEncryption
11:3f:2e:b8:22:78:9c:fc:7f:fd:88:8b:53:d2:92:e1:35:73:
2a:3b:5d:6d:8c:f6:16:29:fd:54:8e:18:29:13:fe:39:a9:1f:
55:b9:14:3a:f4:21:73:0a:39:c6:f3:bd:5b:2e:2b:50:22:9e:
03:50:30:fa:39:a6:11:e4:5c:b5:62:c0:a8:6b:4f:f8:08:d7:
07:d9:01:c9:1f:b9:92:5c:a2:f9:db:7d:93:59:bc:7d:48:a1:
2f:9f:63:13:b8:c1:19:8f:e1:67:c2:ed:1d:df:f6:2c:1d:2e:
90:95:94:d3:aa:2f:9d:3e:90:2e:a5:c8:9c:22:80:20:7b:4a:
be:58:a6:7f:de:b2:f9:1c:ab:46:46:34:d8:fb:d0:42:f9:64:
12:99:eb:c4:3e:68:65:bd:2f:09:53:b6:2f:18:d6:7e:07:53:
52:84:35:ce:79:32:75:a4:5b:81:3f:1b:ba:0c:c5:72:c0:64:
05:ec:a1:aa:12:01:52:0d:a6:23:44:11:fd:08:40:2d:40:9c:
f2:a0:26:6d:55:38:5b:8c:97:9a:93:2a:1e:70:86:e7:43:da:
05:9e:23:b3:d1:2e:3d:e2:23:98:35:d3:9a:90:ae:55:5b:88:
af:41:4e:08:ed:b4:9c:03:67:17:71:e9:bc:65:0c:b4:da:b9:
69:53:68:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:22:42 2026 by rpki-client