Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/Yy5HRD7nJqnZbuOVznrgjZcvCz8.roa
File: Yy5HRD7nJqnZbuOVznrgjZcvCz8.roa (raw, json)
Hash identifier: IxK5X9Ss7ShkMVKfEZu5A5rPZ/yNm8neoiWEbru4efI=
Subject key identifier: 63:2E:47:44:3E:E7:26:A9:D9:6E:E3:95:CE:7A:E0:8D:97:2F:0B:3F
Certificate issuer: /CN=25907f90d9f9d902fcf04bd0b46152c3827a7d50
Certificate serial: 019E3CED2BBE1FFE94730A5606F9ECC0BCD0
Authority key identifier: 25:90:7F:90:D9:F9:D9:02:FC:F0:4B:D0:B4:61:52:C3:82:7A:7D:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZB_kNn52QL88EvQtGFSw4J6fVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/Yy5HRD7nJqnZbuOVznrgjZcvCz8.roa
Signing time: Mon 18 May 2026 21:10:36 +0000
ROA not before: Mon 18 May 2026 21:10:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199393
IP address blocks: 194.169.183.0/24 maxlen: 24
2a13:c480::/48 maxlen: 48
2a13:c480:1::/48 maxlen: 48
2a13:c480:2::/48 maxlen: 48
2a13:c480:3::/48 maxlen: 48
2a13:c480:4::/48 maxlen: 48
2a13:c480:5::/48 maxlen: 48
2a13:c480:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JZB_kNn52QL88EvQtGFSw4J6fVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3c:ed:2b:be:1f:fe:94:73:0a:56:06:f9:ec:c0:bc:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25907f90d9f9d902fcf04bd0b46152c3827a7d50
Validity
Not Before: May 18 21:10:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=632e47443ee726a9d96ee395ce7ae08d972f0b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ab:04:20:39:81:f8:97:9a:d5:ce:35:7d:2e:
c6:ab:01:f1:b4:c2:47:8f:b4:59:eb:04:da:af:0d:
d4:1f:35:30:91:d0:e7:82:5a:88:fb:4e:44:91:fa:
29:ea:f2:92:46:70:7c:f3:bd:14:03:90:d9:9e:e6:
4a:f8:3a:be:a0:fe:12:a8:05:7a:95:41:c3:7d:2b:
60:3b:a1:e5:88:97:be:4b:ef:5c:9a:4e:bf:39:2a:
fa:d2:2c:46:c2:e5:26:d3:78:95:a4:c3:83:66:72:
b5:9f:07:75:19:b0:d9:ad:c0:7b:2c:3c:48:7e:a7:
5f:63:a3:f1:19:13:82:f0:db:2b:7b:9c:a1:af:da:
11:ab:ab:eb:1a:9e:43:37:c1:06:c7:5e:db:34:de:
f9:82:1e:6e:9f:23:c6:d8:5c:68:cd:f6:83:1e:70:
0f:12:a4:4c:7f:1d:4f:c2:b8:79:8e:61:0d:39:4c:
34:a2:4f:0c:69:9f:85:c5:d9:c6:32:4c:b2:d3:91:
af:0d:f2:ed:fd:41:1f:8d:da:d2:85:8d:ca:a7:65:
e5:ce:ac:81:7b:be:73:19:37:d8:32:e0:4d:78:73:
ea:7b:20:ff:03:ad:59:9a:4b:fe:2a:18:d7:77:95:
53:0a:42:85:25:70:09:b8:13:b1:34:da:c9:07:ed:
bf:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2E:47:44:3E:E7:26:A9:D9:6E:E3:95:CE:7A:E0:8D:97:2F:0B:3F
X509v3 Authority Key Identifier:
keyid:25:90:7F:90:D9:F9:D9:02:FC:F0:4B:D0:B4:61:52:C3:82:7A:7D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZB_kNn52QL88EvQtGFSw4J6fVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/Yy5HRD7nJqnZbuOVznrgjZcvCz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.183.0/24
IPv6:
2a13:c480::-2a13:c480:6:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7d:ab:7c:24:d7:4e:7f:db:0d:80:61:db:ec:e8:3b:e9:c3:bd:
df:14:b1:78:07:d5:8c:de:aa:b8:2f:ae:e1:20:29:0a:6c:12:
9b:fc:d8:0a:42:a7:c6:bc:ec:b7:d2:a4:07:70:c1:5a:e7:95:
ba:32:df:9f:96:31:43:d5:ee:f1:35:af:74:a7:33:7a:98:07:
f1:17:e0:68:30:06:b4:3e:3e:fc:03:75:66:88:7b:34:c1:2f:
7e:a5:ad:2d:01:a0:d6:90:9c:a7:53:ae:cb:c3:57:1b:2a:5e:
87:7a:e0:56:e6:45:1f:18:96:0e:02:e2:39:ff:b9:8e:d8:25:
29:a4:55:ac:f6:e2:db:4a:61:06:d3:61:3e:6f:1c:cc:d0:9f:
86:86:a1:8c:51:26:73:77:bb:1c:ae:26:f1:b4:bb:10:2c:43:
4a:fd:6d:2a:5b:a7:f0:bf:61:b0:b1:e6:bb:61:15:f3:e2:55:
ad:65:fe:ab:1d:da:b5:97:ac:f9:21:e8:53:27:d2:ff:7b:68:
55:e7:45:00:f1:f0:89:63:53:db:c4:22:1a:6f:1d:ef:5e:ad:
3e:b7:2d:35:94:aa:c0:61:88:fa:a1:01:d1:72:95:b6:81:fc:
12:55:af:78:dd:61:fe:b5:3f:18:e4:00:27:2c:5a:cb:de:3f:
af:f6:28:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 15:07:25 2026 by rpki-client