Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yItIEeyZ7VyBK-umKvHdPz4xbGs.roa
File: yItIEeyZ7VyBK-umKvHdPz4xbGs.roa (raw, json)
Hash identifier: tDTay33B+d327wrzhHKeLYK6KpSnsdzm0k8UPRHBaUU=
Subject key identifier: C8:8B:48:11:EC:99:ED:5C:81:2B:EB:A6:2A:F1:DD:3F:3E:31:6C:6B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019F1265A774D05F2ABB88660385F75D6EA8
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yItIEeyZ7VyBK-umKvHdPz4xbGs.roa
Signing time: Mon 29 Jun 2026 08:01:19 +0000
ROA not before: Mon 29 Jun 2026 08:01:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219429
IP address blocks: 85.202.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 08:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:a7:74:d0:5f:2a:bb:88:66:03:85:f7:5d:6e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 29 08:01:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c88b4811ec99ed5c812beba62af1dd3f3e316c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a4:41:c9:74:27:34:d8:5d:72:01:d1:11:1b:
52:d2:00:32:e0:ec:82:72:30:7a:d8:9f:15:00:a2:
47:c8:a7:d2:02:05:4c:de:ec:41:ed:9c:f6:33:eb:
29:fd:c7:f7:0e:42:d7:b0:3a:75:a0:32:ca:45:92:
0c:22:eb:f7:e7:bd:0e:f5:ab:73:93:f0:51:ff:a1:
e9:88:3a:c3:46:39:d6:75:c7:84:84:5e:25:6c:7c:
63:fe:65:0b:ed:0d:b1:a8:c6:d9:69:06:93:dd:13:
2a:41:31:e6:a1:7c:67:e6:57:d9:10:a2:e1:6a:a9:
5b:09:19:fb:56:cc:9e:41:7d:26:64:54:1a:4e:a3:
c6:93:ed:a1:d3:a9:1f:77:a7:6b:a1:79:c7:11:cf:
68:1b:aa:2d:cd:9a:f3:6c:f0:41:08:7e:61:06:21:
a5:7a:c2:f7:25:4b:d1:57:fc:f3:71:43:ad:7c:f8:
4b:32:63:94:8f:9a:0c:ea:55:87:e8:31:df:66:34:
f5:fd:30:bf:bd:e0:77:16:07:06:c8:86:69:61:63:
0c:98:22:43:55:1d:40:c9:5c:9f:eb:fc:12:9c:1c:
f8:9c:53:e1:b9:7d:cd:5f:ed:ed:90:d2:d5:87:7f:
b5:85:93:72:de:f6:03:0a:21:85:67:86:1e:bb:b6:
f7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8B:48:11:EC:99:ED:5C:81:2B:EB:A6:2A:F1:DD:3F:3E:31:6C:6B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yItIEeyZ7VyBK-umKvHdPz4xbGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.203.0/24
Signature Algorithm: sha256WithRSAEncryption
98:1b:80:cb:6f:95:fa:e4:4d:b6:06:01:d8:63:c3:51:ed:97:
24:a6:96:c7:a0:44:47:82:b4:db:0c:dd:51:bd:d0:35:a1:0e:
96:02:db:e8:8c:c3:06:a7:23:45:a4:cd:fe:d4:3a:6d:53:8c:
f7:82:5f:ca:05:2c:9a:2f:2f:61:be:a0:9f:21:ba:b5:da:39:
e8:f2:5a:31:16:57:8f:9a:0e:18:40:68:6e:a7:0c:90:5d:44:
54:f4:6e:74:2f:d0:9b:ee:02:bd:11:e3:e3:d9:8b:be:83:0f:
a7:91:41:fb:0c:72:b4:d6:8d:ba:ed:af:f9:19:fa:2e:76:ab:
ff:88:ba:bc:26:06:2b:dd:62:22:e5:7b:d2:0a:72:57:0c:18:
5b:bc:df:17:1c:74:49:f5:fe:e7:4b:c9:c9:6b:d7:89:b8:4f:
e1:3d:cb:78:bf:53:31:14:fd:c9:19:12:c0:66:df:e9:80:b6:
44:08:50:c7:71:3c:60:6e:bd:d5:b4:db:11:b9:fb:4c:66:28:
97:c1:dd:03:9c:66:5e:9b:7e:85:d5:ce:3f:bd:a0:47:f8:b2:
ab:39:08:1c:ff:4f:6d:51:22:d0:69:96:f1:ad:f5:9a:00:57:
95:8a:82:88:39:11:d7:d2:db:31:81:2e:b3:a9:2f:88:aa:fb:
76:8c:03:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:38:44 2026 by rpki-client