Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/YbsyJSfo2wPXAr9UXNX2u1-ulF4.roa
File: YbsyJSfo2wPXAr9UXNX2u1-ulF4.roa (raw, json)
Hash identifier: U03X4TVCBcK+1cq+DeOSc9Fo02Tkk4kpGrxTUA/4bog=
Subject key identifier: 61:BB:32:25:27:E8:DB:03:D7:02:BF:54:5C:D5:F6:BB:5F:AE:94:5E
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019EA72E01883CCE8605CA028BB35A965587
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/YbsyJSfo2wPXAr9UXNX2u1-ulF4.roa
Signing time: Mon 08 Jun 2026 12:21:10 +0000
ROA not before: Mon 08 Jun 2026 12:21:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39690
IP address blocks: 188.255.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Jun 2026 19:19:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a7:2e:01:88:3c:ce:86:05:ca:02:8b:b3:5a:96:55:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 8 12:21:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61bb322527e8db03d702bf545cd5f6bb5fae945e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:82:47:89:74:69:ed:ac:ee:c3:35:24:c9:32:
ea:19:c3:88:a2:25:cf:25:63:29:06:0a:41:68:1a:
16:c7:2a:32:67:48:2f:37:92:49:dd:65:fc:52:4d:
e0:41:71:4e:7c:98:0d:08:38:5b:ec:66:b0:22:35:
66:50:a5:d6:1e:06:9c:07:cb:c5:9b:6b:d6:78:da:
31:4b:26:8e:87:be:36:d0:6f:d1:32:ca:58:db:c5:
75:a6:11:b2:ba:49:2c:ad:5f:2b:59:09:ab:2d:f0:
a3:25:5e:67:dd:e6:60:47:00:50:54:4a:2a:5a:95:
59:d1:4b:c7:37:09:b7:02:e2:26:9a:d0:0a:dc:f4:
27:29:64:ea:72:08:98:e8:69:73:47:e8:7a:df:5b:
55:27:e4:30:90:7c:9b:6b:c6:3d:95:c2:a4:73:c7:
f2:df:74:89:8e:f5:81:39:3e:61:3a:70:ee:b9:bb:
19:6f:33:2b:d8:1d:10:cf:05:e4:dc:b0:7b:da:d3:
47:91:e4:c4:8b:5b:49:47:e2:16:47:47:f1:68:f3:
04:10:fc:7b:50:26:4e:2c:01:08:d1:48:82:05:81:
f6:79:23:3e:ae:f1:8b:72:e9:7b:f2:67:65:a1:9a:
24:f8:05:3a:1e:e6:ce:86:ff:2e:e7:d3:06:3d:7d:
10:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BB:32:25:27:E8:DB:03:D7:02:BF:54:5C:D5:F6:BB:5F:AE:94:5E
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/YbsyJSfo2wPXAr9UXNX2u1-ulF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.174.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:b6:15:8d:41:26:16:f8:db:63:d3:d1:5d:4a:87:10:d9:a1:
a7:ae:d8:bf:6a:43:cb:33:92:ea:15:6f:e7:b5:43:9b:c5:30:
12:3e:7d:bd:ed:51:df:36:3b:4e:bd:1e:d0:da:f7:5d:7b:fe:
93:08:b2:2f:2c:f3:dc:25:49:71:c3:a3:0b:28:92:f5:1d:b7:
5e:50:cb:ee:91:2c:42:6e:7f:59:52:8d:8f:8e:8a:ed:aa:1d:
4b:53:68:72:fc:1a:ff:30:4f:31:05:f7:40:c3:9e:37:65:8c:
2e:9e:78:95:ff:e7:40:38:e7:15:7f:72:5c:91:66:0b:c9:14:
b9:29:87:73:f4:bf:ec:7c:7f:d9:5a:8d:0a:61:41:62:93:95:
ad:b8:02:0b:18:2f:48:58:bd:e9:b0:f3:22:a7:ce:4c:a2:e7:
77:a6:a4:fd:80:dc:08:37:65:55:77:3e:e5:19:b9:b3:43:54:
8c:44:7c:a3:b5:4f:b6:64:eb:cb:72:86:ec:6e:8a:2c:e3:f4:
bf:38:57:bc:d5:d1:c7:d4:d5:a3:77:66:d0:5a:7a:2c:19:a5:
31:cb:fb:7f:7f:7e:c8:b8:ac:59:a0:a7:bd:a5:b2:d3:a2:aa:
db:41:45:81:33:15:bf:45:45:d6:4c:df:55:9b:da:dc:40:6c:
b1:d8:30:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 01:52:17 2026 by rpki-client