Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/YgyUJHK9iG80S19b3-aPbAg_Y4I.roa
File: YgyUJHK9iG80S19b3-aPbAg_Y4I.roa (raw, json)
Hash identifier: 5j8ExZEKwAWpJ40268XmF8LTOQczBpJF+gV2klaio/s=
Subject key identifier: 62:0C:94:24:72:BD:88:6F:34:4B:5F:5B:DF:E6:8F:6C:08:3F:63:82
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 019F3C34892AEB0489A3C237DCF65D30C362
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/YgyUJHK9iG80S19b3-aPbAg_Y4I.roa
Signing time: Tue 07 Jul 2026 10:51:43 +0000
ROA not before: Tue 07 Jul 2026 10:51:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198889
IP address blocks: 2a05:1083::/32 maxlen: 56
2a0d:2584::/32 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3c:34:89:2a:eb:04:89:a3:c2:37:dc:f6:5d:30:c3:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jul 7 10:51:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=620c942472bd886f344b5f5bdfe68f6c083f6382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c5:38:e2:9a:56:2f:de:f2:ce:b7:c9:d0:cb:
0e:52:fb:9e:dc:3c:ff:ab:67:cd:04:86:af:0b:73:
d0:84:b6:49:c2:01:5d:35:bc:89:b0:07:d6:c7:11:
7c:d7:e7:4c:15:41:53:6a:16:7c:57:5c:93:57:0d:
f9:0d:6e:52:5f:40:6f:54:0f:24:c3:1d:c0:00:a5:
a3:74:16:a3:94:3e:dc:e9:89:11:f3:da:07:fd:ce:
7c:46:55:45:3f:c7:6a:13:b8:87:a8:f1:ea:a5:e3:
c7:3f:d5:60:89:70:59:d5:1c:ea:7f:94:2c:8a:d0:
87:44:b0:c1:83:ae:94:f4:aa:c7:8f:d5:ef:04:df:
98:86:6e:f3:0d:56:99:e5:87:26:fb:c0:7e:ee:f1:
a9:5c:d7:76:3d:99:77:a6:6f:7a:ee:ad:40:e1:a8:
cf:ff:04:34:ea:18:0c:78:45:bd:9c:18:cf:52:e6:
38:9d:6e:30:fd:55:a9:78:36:90:ae:8e:18:d5:89:
92:92:60:a8:97:c1:70:c5:c2:66:85:21:cd:f3:06:
4e:0c:15:96:b6:c8:06:73:db:21:2b:ba:8a:07:0c:
19:4a:a4:6c:ad:1a:49:4f:5c:0c:88:3a:5e:90:fe:
6c:f6:36:c2:1f:e1:0c:82:f8:2b:ac:94:1d:4f:b2:
36:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0C:94:24:72:BD:88:6F:34:4B:5F:5B:DF:E6:8F:6C:08:3F:63:82
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/YgyUJHK9iG80S19b3-aPbAg_Y4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:1083::/32
2a0d:2584::/32
Signature Algorithm: sha256WithRSAEncryption
13:d3:82:d4:0f:d6:96:eb:09:54:1c:7e:0f:fa:58:f3:28:d8:
b9:99:fd:c6:2f:9b:e6:b0:d5:9f:d0:0c:26:02:17:4b:d6:54:
ec:96:56:46:a1:04:cc:8c:95:58:e4:c7:71:f2:b2:ef:19:e7:
e3:05:ee:cc:08:6a:5a:99:d8:78:a4:f9:4b:39:fc:d9:b8:3e:
33:f3:f3:74:65:45:be:a5:22:65:94:e0:60:fe:52:34:0f:1f:
1d:0c:bb:14:81:1f:c9:18:ad:a1:a5:d5:a5:23:72:0d:d3:36:
d0:9d:28:fa:90:f4:69:e8:dc:9b:0a:44:6b:c8:36:46:a3:c0:
fe:9a:a5:a3:eb:72:e1:44:ca:1b:29:d8:23:0c:ff:ad:be:f5:
42:e9:f3:31:58:7e:a8:5c:f0:80:ac:c3:d6:c1:75:c2:e1:50:
0d:b7:39:62:8b:37:b2:df:3c:bd:21:8e:7f:39:0e:29:9a:b2:
e1:49:e3:17:e7:fa:9b:07:35:cd:96:9f:19:e8:a2:99:1a:95:
43:8f:b6:a1:f3:0a:73:63:dc:b6:36:e8:5c:f9:4c:72:9d:bb:
d6:ec:80:72:f7:df:ba:12:e3:c7:ed:f4:e1:4e:36:55:cb:a7:
0f:0b:a4:21:ca:a3:90:24:ed:0e:61:51:53:c9:c5:cc:e1:59:
83:8f:b2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 07:35:49 2026 by rpki-client