Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/YmcjwNy-2Q2cF2RUKbteJIF4zfc.roa
File: YmcjwNy-2Q2cF2RUKbteJIF4zfc.roa (raw, json)
Hash identifier: zD4f/kaHp2DURR07uKQMW1jZdmkie967aQyuFRXFV34=
Subject key identifier: 62:67:23:C0:DC:BE:D9:0D:9C:17:64:54:29:BB:5E:24:81:78:CD:F7
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 019C4418F84F9C396F54BD61432FE0BE2B50
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/YmcjwNy-2Q2cF2RUKbteJIF4zfc.roa
Signing time: Mon 09 Feb 2026 20:30:12 +0000
ROA not before: Mon 09 Feb 2026 20:30:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211486
IP address blocks: 216.162.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:18:f8:4f:9c:39:6f:54:bd:61:43:2f:e0:be:2b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Feb 9 20:30:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=626723c0dcbed90d9c17645429bb5e248178cdf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3e:c5:da:9d:8e:d8:6a:a2:3e:b7:c3:09:06:
56:ab:bd:5e:c5:a5:b8:39:5f:a8:6f:e6:0e:31:ab:
ef:ed:83:31:0e:19:1d:fa:47:33:d9:bd:66:dc:0d:
78:53:3d:60:93:60:b3:f9:0f:90:04:8e:4b:2f:e2:
1e:d4:80:6d:41:dc:c1:63:82:58:d3:d9:b7:1e:eb:
e7:85:97:bb:0b:7e:2f:74:13:f7:dc:a4:28:f1:d8:
fd:f1:96:d4:1a:94:f3:04:da:c8:13:94:d0:fd:ab:
73:12:4d:d7:65:98:09:fa:5e:f4:22:34:f8:2a:68:
9c:39:59:04:2b:22:36:89:f3:b1:55:4d:b6:40:23:
e1:ef:cf:2a:05:e6:1f:92:7a:de:fd:e5:62:de:b5:
a4:db:6e:1f:b5:66:d9:e3:49:df:b8:d2:74:4a:b4:
ed:c8:45:9a:ee:3c:e7:47:b3:18:75:c5:ae:2b:19:
e4:d6:6c:6c:88:09:9f:95:29:66:67:9e:06:39:aa:
4b:25:71:06:70:5d:7e:48:25:32:bd:ad:3b:f2:2a:
6b:18:71:d9:5e:5d:13:49:9b:02:be:d4:75:3c:aa:
5f:e9:d7:a5:33:d0:78:33:2a:7b:06:0b:b3:a2:3d:
40:40:5f:3b:0c:21:b3:3a:26:67:32:c7:8b:6a:bf:
72:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:67:23:C0:DC:BE:D9:0D:9C:17:64:54:29:BB:5E:24:81:78:CD:F7
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/YmcjwNy-2Q2cF2RUKbteJIF4zfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.162.44.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:96:3e:23:4f:80:ae:88:b3:c7:06:36:5e:d6:dd:48:99:42:
5d:7a:0e:3e:05:03:77:9e:d8:93:d2:57:6b:78:74:fe:b5:b9:
ca:b6:e7:92:0a:38:42:0e:60:35:29:ec:c2:ff:75:b3:1f:b3:
13:c8:b3:d8:db:3b:19:ea:fa:c3:9d:6c:1b:d0:2f:0b:5b:72:
9a:cc:ab:fb:22:5f:02:1d:ae:15:d4:5a:62:2e:cd:8e:86:38:
7f:d7:0a:ba:56:9b:a0:b4:c8:e5:1f:41:db:aa:59:2c:4e:d0:
93:05:ce:81:45:60:75:e4:d3:a8:53:64:77:45:10:a8:a7:c4:
e5:d1:dd:39:d6:20:f0:cc:24:62:45:f8:eb:f7:97:94:07:0b:
22:b5:14:44:63:18:da:02:df:26:84:69:b9:41:6f:10:fe:5a:
01:db:9a:23:b7:41:1e:aa:fe:99:4d:78:db:4a:0d:f7:40:49:
3f:e5:14:31:7e:14:c5:a9:7a:e8:9e:7e:e0:2f:0e:42:ca:4a:
11:67:03:6e:98:0d:34:b7:1d:e2:f2:60:ee:ca:17:ec:d4:58:
96:13:9b:a2:fe:a8:41:1e:ba:3e:d9:7d:54:8c:44:16:3f:d5:
bd:7b:a6:78:f1:bb:a7:9a:71:c8:b1:45:9d:99:5c:d8:f8:bc:
d2:30:a1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:09:58 2026 by rpki-client