Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/yj_CcFDjRS6kxurlMCMLc70m99M.roa
File: yj_CcFDjRS6kxurlMCMLc70m99M.roa (raw, json)
Hash identifier: UmvE8kk0YgpEOqNwu4S2xYjNUXx4ucexqwqQxmv5H8w=
Subject key identifier: CA:3F:C2:70:50:E3:45:2E:A4:C6:EA:E5:30:23:0B:73:BD:26:F7:D3
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 019F13FA9201A0595E8C6D2D9456C1FEDC19
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/yj_CcFDjRS6kxurlMCMLc70m99M.roa
Signing time: Mon 29 Jun 2026 15:23:36 +0000
ROA not before: Mon 29 Jun 2026 15:23:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15083
IP address blocks: 132.243.76.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 18:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:fa:92:01:a0:59:5e:8c:6d:2d:94:56:c1:fe:dc:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Jun 29 15:23:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca3fc27050e3452ea4c6eae530230b73bd26f7d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:68:d0:ff:3e:b3:5f:8f:ea:6e:d0:99:aa:94:
81:22:75:72:48:d7:4c:1f:81:25:32:49:00:0f:0d:
fd:75:e7:7a:f5:c6:82:85:31:9a:69:1e:e6:cb:df:
fd:07:3b:e4:c4:02:f4:36:9e:aa:61:82:88:59:00:
7b:2a:57:a3:72:03:26:39:ef:3a:d7:6f:10:2f:e7:
c2:fb:6f:a9:f7:ec:cc:e8:b7:b5:11:65:15:be:c0:
80:5b:a8:fa:fe:e0:d8:b1:33:2c:e4:b3:4b:5c:5a:
99:31:58:33:f0:ca:6a:99:4a:f5:02:da:ef:3e:a6:
4d:a8:29:1b:26:da:5f:d1:a1:8d:7f:3c:a8:9e:1b:
38:6e:b5:20:ca:8f:42:1c:ad:5a:6d:76:ff:e4:74:
42:1f:3f:67:c6:9f:5a:02:b6:e1:2f:1b:67:ee:27:
75:c3:05:2a:70:55:da:25:cb:35:2f:63:6b:7f:a9:
9e:21:50:1a:08:05:db:21:dd:41:95:2a:75:7d:01:
4a:a8:c3:5a:86:55:f7:f1:0a:cc:2f:a9:04:11:71:
fa:07:59:af:2e:91:e7:4a:70:e4:22:76:9b:bc:bd:
cf:17:06:30:21:90:93:30:ff:5f:2d:67:e4:5c:71:
4e:80:a2:36:e4:6e:af:54:f9:35:30:26:27:f6:c7:
b1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3F:C2:70:50:E3:45:2E:A4:C6:EA:E5:30:23:0B:73:BD:26:F7:D3
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/yj_CcFDjRS6kxurlMCMLc70m99M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.243.76.0/22
Signature Algorithm: sha256WithRSAEncryption
99:1a:58:b6:45:60:6a:c6:85:9f:b3:e4:f4:48:1a:ec:89:c2:
20:c1:93:d6:58:65:a7:af:bb:4e:47:6a:c2:39:38:69:75:0e:
d3:0d:82:b5:c7:58:ee:5b:08:38:39:48:19:74:2f:d0:6d:50:
c4:6c:f5:6f:fc:24:2a:f5:89:af:a7:1d:54:cd:75:0f:27:99:
5e:a8:cf:d8:34:c8:a9:7d:d7:43:e4:43:be:32:74:39:48:fc:
3f:77:ab:94:4b:08:1a:06:77:39:61:03:1b:dc:83:c4:9d:ad:
8c:df:c8:6c:d9:51:a3:58:e3:ce:69:82:e3:b6:53:25:65:4b:
55:1f:b4:6e:85:ac:92:33:fa:5e:e4:72:3f:b7:88:d0:a3:74:
5f:59:42:e9:ab:19:ba:3c:4a:65:b1:f4:93:cc:a4:1f:dd:d9:
11:90:8a:0b:32:4c:34:bc:99:bc:71:70:8c:ce:d7:bc:5c:e6:
e0:47:e0:7c:a9:9e:c9:c7:6e:e1:88:4e:bc:e4:5b:7a:8f:12:
18:48:47:15:87:9c:79:0a:f0:36:16:bb:10:ac:7e:9b:e5:56:
7e:52:78:9b:b8:b2:a6:85:95:f5:7c:87:65:4b:f5:cc:fa:87:
61:2c:31:bc:95:a7:85:d5:64:77:df:2a:d5:40:c7:b0:6d:50:
0c:f6:fe:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 02:42:46 2026 by rpki-client