Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/ynbYqYyfZyXeHoyWrTqWExQpgXQ.roa
File: ynbYqYyfZyXeHoyWrTqWExQpgXQ.roa (raw, json)
Hash identifier: yQ1YPBiClS93xPqE7Nhocbohgivg5SS5R1oRoKVhUUA=
Subject key identifier: CA:76:D8:A9:8C:9F:67:25:DE:1E:8C:96:AD:3A:96:13:14:29:81:74
Certificate issuer: /CN=25d93a8100d4b37ed3cd8bbc1a79e9f20d064a99
Certificate serial: 019F2368B58E65FB140D028D62F7344278FA
Authority key identifier: 25:D9:3A:81:00:D4:B3:7E:D3:CD:8B:BC:1A:79:E9:F2:0D:06:4A:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/ynbYqYyfZyXeHoyWrTqWExQpgXQ.roa
Signing time: Thu 02 Jul 2026 15:18:12 +0000
ROA not before: Thu 02 Jul 2026 15:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197000
IP address blocks: 193.0.8.0/23 maxlen: 23
193.0.8.0/24 maxlen: 24
193.0.9.0/24 maxlen: 24
2a13:27c0:30::/44 maxlen: 44
2a13:27c0:30::/48 maxlen: 48
2a13:27c0:3f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b5:8e:65:fb:14:0d:02:8d:62:f7:34:42:78:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d93a8100d4b37ed3cd8bbc1a79e9f20d064a99
Validity
Not Before: Jul 2 15:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca76d8a98c9f6725de1e8c96ad3a961314298174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:83:24:ce:b8:91:26:21:74:61:76:da:e8:2c:
08:8e:2e:a8:ea:f1:dc:b3:01:88:df:8e:33:56:14:
e9:6a:76:da:e4:a4:cc:96:04:81:2e:a7:c1:ae:a5:
3e:f8:14:2e:6d:df:3a:8a:63:93:ad:1d:73:4e:02:
19:46:66:ca:1c:85:e6:81:91:51:32:11:3a:aa:49:
a3:c8:65:03:ed:b2:91:aa:17:5a:6f:e2:75:e5:b2:
9b:57:76:b7:f7:7d:c3:80:85:c7:29:8e:0d:f4:7a:
c1:72:16:8a:fd:74:2e:a4:93:6b:81:a7:44:26:b2:
49:c2:fa:45:62:1c:f0:19:55:f0:9d:1e:f7:d0:4e:
23:93:f7:40:8a:90:e6:9f:ab:92:b2:0c:5b:ca:c1:
a3:f4:62:18:0d:b9:62:d7:59:ee:35:87:da:ab:b0:
f8:f9:a2:2e:35:00:ca:6b:44:9e:8d:e8:00:02:c2:
06:6e:93:70:ec:60:05:51:ef:47:a1:c1:57:6f:f2:
2a:84:98:78:d4:a3:0b:ce:17:4c:c4:3e:7c:2b:cc:
70:dc:d7:d6:a9:92:de:b3:be:56:b3:04:ea:76:8a:
39:1f:e2:0b:46:ef:b9:14:36:98:bb:a3:e6:5d:f6:
37:ce:1b:80:50:81:6c:9c:56:23:0d:43:54:f4:2f:
0a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:76:D8:A9:8C:9F:67:25:DE:1E:8C:96:AD:3A:96:13:14:29:81:74
X509v3 Authority Key Identifier:
keyid:25:D9:3A:81:00:D4:B3:7E:D3:CD:8B:BC:1A:79:E9:F2:0D:06:4A:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/ynbYqYyfZyXeHoyWrTqWExQpgXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.8.0/23
IPv6:
2a13:27c0:30::/44
Signature Algorithm: sha256WithRSAEncryption
a9:5f:89:b0:a8:8b:6f:dc:06:b3:13:40:b3:66:6f:ce:e3:2b:
66:ad:88:c7:18:a6:e9:a4:81:1d:58:dd:cf:8a:cb:3f:72:df:
db:aa:41:7e:7f:30:24:a0:b7:c8:97:d3:ef:ee:69:d7:21:bf:
ac:45:c6:4b:10:c4:4d:28:c7:3e:80:b5:71:2d:dc:4b:4f:1e:
72:b8:5f:eb:a1:fb:17:d3:ec:e1:4a:5d:1d:4e:85:db:95:42:
5c:17:d5:9b:2d:00:de:94:81:83:64:21:5d:f2:1b:59:e6:9c:
92:d4:77:c0:40:9a:5a:45:e2:3d:45:96:37:5b:2c:77:cf:fc:
27:57:f4:78:af:56:53:2d:5e:ea:1f:63:14:3a:95:9e:0c:a6:
a6:b2:7d:96:47:5f:f9:24:0c:fa:b4:a6:24:07:f6:be:05:87:
4d:f5:06:43:82:75:64:84:ed:63:e7:31:7d:dc:5b:db:20:26:
b6:f8:e5:56:7b:e5:1c:93:16:7d:c2:d2:c4:f2:7e:3a:ed:62:
c0:b2:dc:bc:44:21:71:36:d3:77:8d:de:83:d8:14:73:4b:63:
05:2a:c3:40:e3:bd:62:41:bb:69:3e:bf:99:78:09:fa:16:a4:
20:06:19:5f:96:bd:5c:bb:8e:16:d3:bb:2b:55:93:fe:99:8f:
5a:cd:53:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:59:05 2026 by rpki-client