Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/YGa_r2r_wryz0f78Q6muEq3Ihr8.roa
File: YGa_r2r_wryz0f78Q6muEq3Ihr8.roa (raw, json)
Hash identifier: pQVv4oYm/4SbHKAIOEWLFIcaJcnYcvehUqLAA1irsTM=
Subject key identifier: 60:66:BF:AF:6A:FF:C2:BC:B3:D1:FE:FC:43:A9:AE:12:AD:C8:86:BF
Certificate issuer: /CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Certificate serial: 019FC8379C0C83C16A5B343E15CE99D22BCE
Authority key identifier: FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/YGa_r2r_wryz0f78Q6muEq3Ihr8.roa
Signing time: Mon 03 Aug 2026 15:21:55 +0000
ROA not before: Mon 03 Aug 2026 15:21:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43180
IP address blocks: 91.239.76.0/24 maxlen: 24
91.239.77.0/24 maxlen: 24
213.111.157.0/24 maxlen: 24
213.111.158.0/23 maxlen: 23
2a11:6101::/32 maxlen: 32
2a11:6102::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 14:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c8:37:9c:0c:83:c1:6a:5b:34:3e:15:ce:99:d2:2b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Validity
Not Before: Aug 3 15:21:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6066bfaf6affc2bcb3d1fefc43a9ae12adc886bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1b:ce:52:a2:e4:69:55:67:4a:72:11:a8:8f:
5f:52:02:64:db:59:00:33:78:90:22:27:77:42:15:
a3:1f:4b:af:c3:8f:68:c0:86:b9:3d:b1:da:b8:55:
ad:09:ab:ad:2f:fc:d7:66:89:3d:a1:b7:0f:7d:30:
95:83:91:30:0e:51:0f:36:44:74:0a:17:7a:09:01:
cb:5a:5b:f1:90:7f:98:07:25:71:7b:02:b6:7b:7e:
97:77:a4:9a:10:cb:dd:e1:bc:c0:c5:99:a8:4d:46:
f6:fe:bb:06:24:92:54:9e:11:7d:ea:29:ab:64:d6:
66:d5:7a:08:fe:00:f2:93:13:2d:39:58:89:f6:5a:
97:03:6c:fb:f1:1f:71:22:d2:55:75:ca:dd:29:ac:
89:97:51:d1:fb:ea:de:ec:f9:a0:f4:90:46:28:0b:
52:19:2e:82:cf:ba:2a:31:72:3e:35:1c:65:70:a7:
28:c0:64:60:b5:c6:a6:6c:57:52:7a:7b:9c:6b:53:
d3:b5:61:58:bb:7a:19:ba:a8:6d:62:3e:f1:a6:a7:
41:c0:f6:5a:42:31:54:73:5d:ef:59:26:b1:e8:10:
c8:b0:aa:90:e4:a3:78:f7:28:58:44:93:b8:65:67:
57:98:1a:14:96:d4:62:e2:43:2a:9f:b2:31:89:0c:
f2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:66:BF:AF:6A:FF:C2:BC:B3:D1:FE:FC:43:A9:AE:12:AD:C8:86:BF
X509v3 Authority Key Identifier:
keyid:FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/YGa_r2r_wryz0f78Q6muEq3Ihr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.76.0/23
213.111.157.0-213.111.159.255
IPv6:
2a11:6101::-2a11:6102:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6d:d4:c5:60:0a:19:95:8f:2b:e5:bb:60:06:74:76:41:4c:9a:
13:52:70:c1:45:9b:34:c7:28:d2:a0:80:a0:46:0f:b5:84:40:
1e:66:11:04:23:22:fb:6c:26:8c:75:06:a8:e3:4a:16:90:51:
f0:72:1d:c0:64:c1:07:3e:9a:27:7f:65:1c:f9:15:c3:93:b1:
59:ca:77:eb:f3:76:43:2f:47:d9:b7:7a:82:30:e6:55:fe:0e:
8b:0d:28:55:3f:83:d7:3e:37:7e:0a:74:73:d4:1c:65:14:04:
ab:cd:c5:90:7b:16:95:72:d0:74:7f:d7:bd:9a:a3:92:2d:be:
ea:fa:5a:57:5b:55:95:5d:83:b6:2d:77:d7:ac:c1:f9:fd:a4:
63:8e:95:2e:28:c3:8f:9d:21:a7:76:23:ee:ba:8d:bf:b6:29:
23:0f:63:2e:d0:e7:80:b0:88:a0:cf:be:70:a2:02:fd:67:1c:
79:8c:b4:5b:c9:e0:97:9c:4f:bd:a3:81:86:2e:1d:82:59:8f:
2f:93:3a:9c:c4:31:86:93:8f:2e:24:f8:1b:fe:8f:53:23:72:
33:5f:14:08:ae:75:23:66:67:a5:ba:b4:c8:cf:c0:55:f6:7c:
58:11:45:4d:00:55:9b:c4:fe:3d:5e:8c:83:8a:17:64:1b:03:
20:c6:dc:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 23:09:39 2026 by rpki-client