Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/YpiXTmU0pXZfE6XFdCEOF_JC0Pg.roa
File: YpiXTmU0pXZfE6XFdCEOF_JC0Pg.roa (raw, json)
Hash identifier: 3R9hmcxKFSIMJgpn6D1U4ZfPMtk8M6phbPsoB4uXA5c=
Subject key identifier: 62:98:97:4E:65:34:A5:76:5F:13:A5:C5:74:21:0E:17:F2:42:D0:F8
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019CB957D555804C216405022877FD8C8D93
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/YpiXTmU0pXZfE6XFdCEOF_JC0Pg.roa
Signing time: Wed 04 Mar 2026 14:54:27 +0000
ROA not before: Wed 04 Mar 2026 14:54:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214833
IP address blocks: 91.192.93.0/24 maxlen: 24
170.168.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:57:d5:55:80:4c:21:64:05:02:28:77:fd:8c:8d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Mar 4 14:54:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6298974e6534a5765f13a5c574210e17f242d0f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:33:df:46:fa:c2:9e:f8:b4:78:47:cc:1c:97:
91:36:76:33:9d:51:e7:b0:9c:b1:7c:92:85:6a:f1:
77:6c:60:81:d9:b3:0d:be:ec:ff:ba:5c:1d:f6:cc:
d4:8c:8a:17:fa:19:b8:2a:d0:77:92:eb:20:fb:7f:
0d:c0:cb:3f:a4:ba:94:fc:86:b6:ff:ea:2c:d8:52:
28:8c:ef:68:68:af:7c:3b:88:71:4d:a0:c3:c2:d7:
4d:78:eb:80:09:17:23:3b:d2:b0:f2:8f:9c:15:f5:
7e:b3:a2:ad:58:79:4c:b6:7e:45:86:eb:64:97:ad:
fa:32:7e:7f:c7:96:d8:d4:1f:52:43:d6:d3:51:2c:
16:fe:bd:6d:86:48:56:aa:39:dd:88:ac:b5:19:3f:
90:96:69:75:13:1b:61:11:43:e5:ad:3c:7a:1d:e4:
09:d6:3b:3b:e0:5d:02:0f:b7:bc:c3:fb:81:17:5f:
fd:c9:ac:7e:c3:f1:6a:2e:88:ad:58:85:42:78:4e:
d2:f4:49:4d:87:c3:1f:58:7e:6f:10:9c:49:b5:42:
5a:d5:a5:6c:44:1f:a3:cf:b2:c6:65:2e:85:f0:c5:
e0:e3:b1:33:d4:ef:49:da:dc:d8:97:c6:1d:f7:bc:
e0:c0:59:f5:79:c9:93:43:75:ea:ec:d3:30:68:46:
74:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:98:97:4E:65:34:A5:76:5F:13:A5:C5:74:21:0E:17:F2:42:D0:F8
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/YpiXTmU0pXZfE6XFdCEOF_JC0Pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.93.0/24
170.168.20.0/24
Signature Algorithm: sha256WithRSAEncryption
49:57:d0:ca:8f:4b:d4:91:c9:f6:72:4a:46:01:f1:e3:64:fb:
3d:9f:1d:c4:ff:0d:d4:ec:81:2d:f6:cc:ca:14:e9:ec:89:82:
ba:ea:1d:b3:ac:d7:29:9e:fb:8f:33:f0:fb:c4:1b:98:ad:3f:
90:0f:52:e9:0e:da:cf:6f:60:29:4b:b1:7e:86:71:00:5e:11:
01:c1:17:3b:21:0a:70:78:a6:11:b1:f2:61:76:bb:99:08:24:
48:2f:0c:a9:a3:bd:aa:68:91:db:97:72:13:96:59:68:4e:9d:
c0:15:d1:38:37:f6:5d:1a:4b:74:bd:69:ac:9a:3a:98:ce:a6:
5c:87:c2:aa:3f:da:f4:53:65:81:b9:ec:b0:1c:0d:48:69:1b:
00:cb:c2:e9:49:07:65:e0:c8:53:50:23:3f:03:07:cb:6a:78:
98:1e:c0:cd:1c:61:b3:4d:90:18:ab:e0:85:c6:89:f5:0f:c1:
42:2a:4e:13:59:51:57:55:6a:18:b6:c6:40:76:c8:e0:34:95:
b8:95:c5:2f:ec:ea:12:75:cc:60:34:4a:ee:ee:c2:b7:1a:62:
6c:80:63:e2:41:9a:b6:65:4b:bc:b7:14:f4:dc:13:ca:23:d0:
32:76:83:00:e8:e6:8f:2d:30:a6:03:ec:08:cd:2a:0d:d1:82:
53:10:2c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 21:45:25 2026 by rpki-client