Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/YjNeZY8lXjlANuWmMIgxea0mOUk.roa
File: YjNeZY8lXjlANuWmMIgxea0mOUk.roa (raw, json)
Hash identifier: +abHGBZVC+LFIVEyfAR8tGhDPLuDoHIqE+nsTvk2u0w=
Subject key identifier: 62:33:5E:65:8F:25:5E:39:40:36:E5:A6:30:88:31:79:AD:26:39:49
Certificate issuer: /CN=ef48fd847cc7fc8224722112edf8a3e0674d9c59
Certificate serial: 019FA02F7BB62C008E4329EE3B25E10B9E4E
Authority key identifier: EF:48:FD:84:7C:C7:FC:82:24:72:21:12:ED:F8:A3:E0:67:4D:9C:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70j9hHzH_IIkciES7fij4GdNnFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/YjNeZY8lXjlANuWmMIgxea0mOUk.roa
Signing time: Sun 26 Jul 2026 20:48:14 +0000
ROA not before: Sun 26 Jul 2026 20:48:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205679
IP address blocks: 84.234.114.0/23 maxlen: 23
84.234.114.0/24 maxlen: 24
84.234.115.0/24 maxlen: 24
88.218.252.0/22 maxlen: 24
92.118.164.0/22 maxlen: 24
185.210.36.0/22 maxlen: 24
2a0b:51c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/70j9hHzH_IIkciES7fij4GdNnFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/70j9hHzH_IIkciES7fij4GdNnFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/70j9hHzH_IIkciES7fij4GdNnFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:2f:7b:b6:2c:00:8e:43:29:ee:3b:25:e1:0b:9e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef48fd847cc7fc8224722112edf8a3e0674d9c59
Validity
Not Before: Jul 26 20:48:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62335e658f255e394036e5a630883179ad263949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7a:26:48:fe:57:e1:fe:5f:d4:22:36:4a:04:
57:b1:16:8a:2d:f8:47:41:4f:37:33:29:bf:62:42:
8e:79:73:e6:ca:c9:d6:b3:4b:a8:f2:18:cb:f0:9c:
d3:ff:3e:d2:13:95:05:2c:8a:3f:ea:e4:b5:96:c0:
bb:e3:0d:8d:14:fe:7a:9f:f0:40:b7:d3:28:61:5f:
92:b6:18:e9:d2:7a:5c:e7:ef:62:ee:b4:40:e5:11:
13:73:e5:8a:18:c4:fd:2e:79:6e:37:4f:72:cb:c4:
26:b6:a1:a2:2f:eb:36:6d:07:bb:ac:96:f8:29:b0:
66:40:d7:8a:28:da:f3:31:1c:83:1b:b1:4f:8d:34:
61:f6:dc:e6:14:cb:d6:00:12:d5:87:8a:bd:0b:7b:
0b:b1:c7:00:d1:7a:27:ca:66:d3:4a:f1:f1:ed:09:
02:05:04:d1:51:2d:97:10:65:93:e1:95:63:2c:cb:
bb:73:fa:6e:28:52:e2:a3:4a:19:27:ab:96:ce:19:
b4:1d:74:d2:fa:da:ea:05:ab:e3:63:5b:28:b9:35:
d9:9c:12:14:21:76:7f:00:65:9f:86:e9:9d:24:63:
0a:a5:5b:95:05:a8:fb:31:55:69:2d:4e:c0:ff:de:
56:cb:ec:32:73:31:e8:37:31:ad:04:6b:16:11:fb:
29:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:33:5E:65:8F:25:5E:39:40:36:E5:A6:30:88:31:79:AD:26:39:49
X509v3 Authority Key Identifier:
keyid:EF:48:FD:84:7C:C7:FC:82:24:72:21:12:ED:F8:A3:E0:67:4D:9C:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70j9hHzH_IIkciES7fij4GdNnFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/YjNeZY8lXjlANuWmMIgxea0mOUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/70j9hHzH_IIkciES7fij4GdNnFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.234.114.0/23
88.218.252.0/22
92.118.164.0/22
185.210.36.0/22
IPv6:
2a0b:51c0::/29
Signature Algorithm: sha256WithRSAEncryption
ac:e5:4c:a0:33:cc:2a:0d:45:d6:4b:d4:3a:33:34:48:3a:a2:
bb:08:27:c4:4f:ba:51:e8:f7:e7:95:36:51:db:92:15:63:19:
ec:9c:1d:87:a4:6b:d9:ea:e5:a5:fb:15:f7:d7:c9:4d:18:70:
ca:53:14:c9:82:03:55:70:a3:5c:6a:b9:5c:c4:1c:47:33:3b:
a8:9d:6d:dd:9f:58:c9:a5:b0:1b:d1:07:71:1a:d4:e6:b6:ce:
6d:46:ba:e6:e8:d6:82:c9:45:c3:79:a6:e6:31:b7:3c:9e:30:
4c:a9:b7:4a:b9:cc:2a:dd:66:ad:a0:64:3a:b1:17:da:87:7a:
b3:80:31:e7:ce:2f:28:90:59:98:fa:35:f3:26:22:2f:cd:8a:
ca:90:b1:83:c5:51:d9:56:a2:da:51:59:5e:40:26:1a:7b:2a:
70:5f:07:9c:1f:2c:68:d3:f5:63:6c:ca:4e:61:ff:c2:0c:45:
50:73:5a:55:3a:9b:db:30:78:4a:ea:4d:9e:28:77:3c:8d:88:
47:4a:29:72:7b:54:38:4f:21:72:99:5e:e0:d4:7f:db:e1:7a:
8e:17:5c:c3:34:3d:09:e7:69:36:b8:04:43:6a:8a:f9:91:b1:
a3:85:2c:c9:79:dd:da:65:9f:e3:97:e8:f1:7e:4a:8a:b4:75:
14:2f:7d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:47:31 2026 by rpki-client