Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/YaXl0EyGIRJtUwVXEpmTyj4RbIM.roa
File: YaXl0EyGIRJtUwVXEpmTyj4RbIM.roa (raw, json)
Hash identifier: UARP9ccmGAz/IxujWESaJ+gM6YXvbQBi7CqndR5OWns=
Subject key identifier: 61:A5:E5:D0:4C:86:21:12:6D:53:05:57:12:99:93:CA:3E:11:6C:83
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 019EDD758B468A8BC3FD2755D8A14537DFB8
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/YaXl0EyGIRJtUwVXEpmTyj4RbIM.roa
Signing time: Fri 19 Jun 2026 01:18:48 +0000
ROA not before: Fri 19 Jun 2026 01:18:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41457
IP address blocks: 89.36.33.0/24 maxlen: 24
194.46.60.0/24 maxlen: 24
2a0c:2505:1000::/48 maxlen: 48
2a14:6780::/32 maxlen: 32
2a14:6780:2::/48 maxlen: 48
2a14:6780:3::/48 maxlen: 48
2a14:6780:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:dd:75:8b:46:8a:8b:c3:fd:27:55:d8:a1:45:37:df:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Jun 19 01:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61a5e5d04c8621126d530557129993ca3e116c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e1:f3:40:04:24:45:49:46:ff:ec:77:c8:19:
63:f4:92:21:db:04:52:20:d4:9f:60:44:cf:10:e6:
56:d8:45:d9:d8:f5:4a:75:83:aa:58:a2:8d:64:78:
f4:1d:74:df:f3:7f:02:c3:c8:c1:ee:8d:31:73:c7:
30:5e:ee:0e:75:8b:78:85:9b:cd:ed:6a:d6:88:5e:
d2:50:46:c5:d7:29:b2:f1:95:e4:74:bb:4b:9a:38:
19:da:ab:0c:51:43:b2:24:77:17:41:e5:25:4b:11:
61:ef:fc:78:3c:0b:6a:6c:c9:5f:83:99:b8:92:37:
d3:56:de:d6:b7:20:4c:b7:35:e1:e7:a0:14:f4:2e:
cb:2d:3f:69:5f:81:3f:5d:10:fe:d0:6e:98:c8:e6:
60:48:98:f1:8f:aa:00:dc:69:ab:e4:02:06:f7:ac:
5f:a7:38:b1:0c:ea:8f:f1:27:d4:11:14:8e:3e:36:
94:ad:a2:24:ae:1b:99:6f:1a:b2:7c:cf:96:a2:7b:
fc:cf:1d:62:f3:45:bd:85:a1:fc:38:21:a2:3e:10:
b8:42:8e:08:62:a7:97:a2:78:28:6b:d5:43:0e:1c:
99:d4:c5:e3:24:0a:c2:47:00:f9:22:3c:f5:44:e9:
ef:04:74:45:07:44:0a:b1:55:1f:35:36:15:12:56:
d7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A5:E5:D0:4C:86:21:12:6D:53:05:57:12:99:93:CA:3E:11:6C:83
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/YaXl0EyGIRJtUwVXEpmTyj4RbIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.33.0/24
194.46.60.0/24
IPv6:
2a0c:2505:1000::/48
2a14:6780::/32
Signature Algorithm: sha256WithRSAEncryption
51:8e:80:bc:b1:3d:56:56:23:24:7e:e8:34:07:02:c4:e4:61:
7c:0e:1e:bc:da:e7:eb:0f:d2:db:67:96:dd:90:95:64:03:60:
d5:5a:32:a9:8b:e6:02:7b:91:4e:20:f7:bf:69:d9:00:d8:ec:
95:74:45:f9:ca:d8:d2:d8:f0:82:b3:66:69:51:f5:2e:4c:8f:
c1:03:73:d2:d8:bb:b8:9a:f5:7b:30:4d:67:a1:f4:4f:c6:99:
ab:e3:b1:52:1e:24:b1:ca:e3:6c:90:9f:7a:56:b1:24:2a:01:
cb:15:1d:41:84:17:c1:30:1a:d1:4f:3a:bf:f1:90:a3:e6:f8:
b9:eb:a0:0e:73:0f:5d:de:6f:24:a7:d4:03:57:ba:29:c9:2a:
61:ad:37:d9:40:89:59:1c:fa:32:b9:35:12:34:32:10:4a:04:
2b:df:6f:f3:dd:e2:fa:fc:33:c3:95:b4:58:dc:b6:7d:82:76:
b6:2a:6b:cb:36:a4:4c:21:70:79:5d:a2:33:6a:09:68:d6:9e:
7d:6e:cc:43:af:4c:5b:93:73:6d:d2:72:7a:12:d6:27:b0:51:
78:b6:49:05:3f:19:a4:46:b4:21:7c:75:7e:bf:f5:d4:46:5f:
76:3b:3d:13:2e:9b:3c:ea:be:77:f1:85:6b:68:3d:d4:cb:d3:
1d:32:58:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:35:33 2026 by rpki-client