Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/Ybqwvgb7jCczdCb2Qu8qDoLA0po.roa
File: Ybqwvgb7jCczdCb2Qu8qDoLA0po.roa (raw, json)
Hash identifier: 93kNfuvYg28fBjqCkSjdY9sAKzd0yWZzLdceU613wsQ=
Subject key identifier: 61:BA:B0:BE:06:FB:8C:27:33:74:26:F6:42:EF:2A:0E:82:C0:D2:9A
Certificate issuer: /CN=9fb1f50fbf839488292b96fd93216f2001197546
Certificate serial: 019F2368BE7A1AD215E640154C91A1B57DAE
Authority key identifier: 9F:B1:F5:0F:BF:83:94:88:29:2B:96:FD:93:21:6F:20:01:19:75:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7H1D7-DlIgpK5b9kyFvIAEZdUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/Ybqwvgb7jCczdCb2Qu8qDoLA0po.roa
Signing time: Thu 02 Jul 2026 15:18:14 +0000
ROA not before: Thu 02 Jul 2026 15:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212754
IP address blocks: 193.19.248.0/22 maxlen: 24
2a0a:2300::/31 maxlen: 32
2a0a:2302::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/n7H1D7-DlIgpK5b9kyFvIAEZdUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/n7H1D7-DlIgpK5b9kyFvIAEZdUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/n7H1D7-DlIgpK5b9kyFvIAEZdUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:be:7a:1a:d2:15:e6:40:15:4c:91:a1:b5:7d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fb1f50fbf839488292b96fd93216f2001197546
Validity
Not Before: Jul 2 15:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61bab0be06fb8c27337426f642ef2a0e82c0d29a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7a:6c:93:e3:0e:1d:c3:83:b6:ce:ec:1d:c7:
92:eb:58:b8:bb:17:5c:23:86:af:39:cb:db:8f:f1:
cc:7e:e9:fa:0c:0a:57:e0:4e:f7:b0:4e:fa:cc:43:
47:99:bc:7d:29:55:21:89:76:32:36:f2:ed:11:d9:
69:56:ef:d1:61:36:86:da:62:1c:02:fc:3d:48:a7:
41:87:f8:65:5d:92:38:be:19:7f:4d:0c:fe:f1:8f:
ff:22:78:db:48:0c:07:76:f8:ed:c4:a2:85:0e:5e:
ec:58:d3:15:1c:73:f0:10:20:7e:49:50:ea:c2:ca:
af:1e:cb:1f:33:cd:de:ae:15:9d:0b:85:bc:32:4c:
5f:04:d8:bc:fd:4a:22:a4:cc:42:c5:ad:05:a8:2e:
f6:55:08:b3:8e:ee:24:df:d0:a3:4a:c5:01:5c:34:
37:15:3d:0b:4a:df:45:01:dd:1c:85:94:bb:5e:c8:
bd:a4:77:27:0f:0c:6d:3c:fd:68:6b:16:95:3d:f3:
a7:16:20:78:23:0b:3b:c2:a6:03:97:ea:96:78:8e:
9c:70:82:02:27:f3:6f:55:42:4f:57:2f:88:41:b3:
b7:74:3f:67:97:83:52:f1:b9:12:52:5d:7b:41:48:
5c:d7:c9:68:de:53:51:b2:0e:e7:9d:8a:a8:d8:a2:
5c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BA:B0:BE:06:FB:8C:27:33:74:26:F6:42:EF:2A:0E:82:C0:D2:9A
X509v3 Authority Key Identifier:
keyid:9F:B1:F5:0F:BF:83:94:88:29:2B:96:FD:93:21:6F:20:01:19:75:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7H1D7-DlIgpK5b9kyFvIAEZdUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/Ybqwvgb7jCczdCb2Qu8qDoLA0po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/n7H1D7-DlIgpK5b9kyFvIAEZdUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.248.0/22
IPv6:
2a0a:2300::-2a0a:2302:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
26:a9:45:8c:fc:c8:c3:f4:1e:1e:b1:48:58:12:6b:e7:09:0d:
3e:a9:49:cc:27:59:cb:48:92:c0:7d:07:e7:3b:53:5f:98:2f:
ec:67:83:e2:8e:19:55:7e:54:8d:e0:b2:a6:c9:1c:3c:1a:7e:
63:21:06:09:d0:e7:09:77:58:67:8c:4c:99:91:d2:9a:12:0a:
40:34:16:1d:f6:5d:9f:1d:6f:7a:a4:a5:12:63:b4:c7:a1:30:
4b:c7:60:54:27:a6:b9:b2:aa:f3:fe:46:52:8f:09:1a:f8:43:
1f:19:f6:6c:0e:0c:28:22:b6:0f:c1:a6:3d:ef:9e:dd:fd:1e:
49:c6:51:4b:82:47:d9:74:e4:3e:cf:47:cd:41:58:81:14:79:
4b:47:27:46:f7:e0:a8:47:62:71:f7:1c:86:34:5a:9d:d6:4c:
4f:7c:20:82:3b:02:43:bb:bf:d4:39:db:ab:14:e7:ea:7c:78:
39:4e:2d:3a:ed:81:5f:65:20:bf:4c:eb:45:99:90:cb:bf:07:
db:50:3c:79:51:83:05:d5:eb:3f:b6:95:82:f7:9f:90:a0:b8:
25:47:37:0b:ae:5c:c1:cd:db:19:fe:7b:f3:c4:f7:78:50:07:
22:11:ac:fb:88:09:eb:7a:61:64:fa:b8:4e:44:37:e9:38:d9:
d6:15:02:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 20:52:39 2026 by rpki-client