Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/yfVg2Ri9wmXpQQ7e1BfSstwdYmE.roa
File: yfVg2Ri9wmXpQQ7e1BfSstwdYmE.roa (raw, json)
Hash identifier: /lE1a4wM5yqGo+jmdWNHczzQGadra5za5I7+44kOkNU=
Subject key identifier: C9:F5:60:D9:18:BD:C2:65:E9:41:0E:DE:D4:17:D2:B2:DC:1D:62:61
Certificate issuer: /CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Certificate serial: 019F2368F02B2F5A7AFFEB9AE8706B84F0FE
Authority key identifier: F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/yfVg2Ri9wmXpQQ7e1BfSstwdYmE.roa
Signing time: Thu 02 Jul 2026 15:18:27 +0000
ROA not before: Thu 02 Jul 2026 15:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48179
IP address blocks: 62.85.128.0/19 maxlen: 19
2a00:ec80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f0:2b:2f:5a:7a:ff:eb:9a:e8:70:6b:84:f0:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Validity
Not Before: Jul 2 15:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c9f560d918bdc265e9410eded417d2b2dc1d6261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3f:31:61:33:48:9f:aa:dc:67:f1:11:f3:c1:
9f:78:c0:33:73:82:91:b3:9f:cc:34:6b:b0:57:13:
61:50:12:03:27:dd:60:0e:24:2f:c2:46:41:e5:24:
2a:a8:7f:a4:04:5e:9a:ec:56:47:31:72:de:68:db:
f0:5a:ce:d0:35:23:95:b5:8b:48:e9:ab:a4:b7:4c:
f0:b3:56:19:fb:46:6c:2f:47:03:49:13:81:53:96:
d1:22:16:4d:2e:d0:27:bc:13:56:ea:aa:4a:90:06:
41:68:45:5e:c8:fb:78:4d:0b:53:05:37:f8:99:b4:
9b:9f:91:96:c8:33:c6:31:34:2e:47:0d:a9:3d:a4:
59:06:a8:ff:bf:b1:de:3b:70:b1:3f:d3:31:ec:2e:
3f:6e:f9:e2:ef:e6:bb:ad:03:8a:5c:5d:2c:e4:a1:
1b:21:c4:5f:df:70:e0:e3:bd:b7:14:79:ee:91:7e:
77:dd:b3:35:01:37:c6:a7:44:8e:1c:75:69:3b:49:
ad:ee:f2:fb:bb:3f:90:78:f8:1e:d9:55:4d:57:28:
78:2f:91:f6:84:3e:7e:c0:ab:a0:82:8d:0c:21:f2:
dc:5e:53:f6:79:a0:d1:f6:59:da:19:59:36:e1:61:
45:c7:3c:b2:8e:f9:7c:23:49:cc:08:36:90:1b:51:
f2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F5:60:D9:18:BD:C2:65:E9:41:0E:DE:D4:17:D2:B2:DC:1D:62:61
X509v3 Authority Key Identifier:
keyid:F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/yfVg2Ri9wmXpQQ7e1BfSstwdYmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.85.128.0/19
IPv6:
2a00:ec80::/32
Signature Algorithm: sha256WithRSAEncryption
3f:f4:1a:07:ec:fd:5c:9d:e8:0d:05:ff:a8:88:94:29:74:e1:
4d:35:e0:8c:b0:4e:3e:27:2b:da:cf:88:99:fd:40:c8:9f:8f:
0b:d1:94:21:03:a3:ff:62:c4:20:17:79:8e:16:d8:e9:5f:0a:
01:22:2a:c8:65:8a:96:78:84:3d:76:73:49:8a:24:3e:4d:de:
ed:26:b1:0f:4d:7d:17:16:1f:0a:23:47:fe:19:8f:9b:b9:90:
54:2e:8c:85:40:5f:4d:a2:ab:28:73:43:c8:37:11:20:95:d1:
64:46:0b:4b:7b:b8:99:75:fc:78:1d:40:7f:9e:66:75:e5:45:
fb:03:24:8b:6f:de:7d:88:24:3b:4d:54:20:0b:d4:d4:6d:f4:
db:26:27:cc:88:41:3d:d7:78:51:60:14:f3:68:24:10:b8:71:
46:35:95:23:48:7a:52:cc:93:57:bb:70:2d:8b:72:e0:8e:2b:
be:9d:77:2d:51:e0:8d:8a:7f:2c:8a:a4:84:8a:05:c6:7d:83:
41:8c:0e:11:f2:4f:81:75:7b:fa:d7:65:39:e8:77:44:3d:27:
58:65:19:04:4f:90:9c:1f:e3:12:21:6e:be:4b:cf:60:a2:29:
56:96:c2:80:76:53:ef:5f:f2:50:19:71:fb:b9:ca:68:e4:68:
e6:23:8f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:57:01 2026 by rpki-client