Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ynDO7cDOaqn8fuyJOzU1A7fYJCY.roa
File: ynDO7cDOaqn8fuyJOzU1A7fYJCY.roa (raw, json)
Hash identifier: zJR3ZRhX1STy9c3rsN5ATaQqWq5ZRBrYEPK9D5JxmGY=
Subject key identifier: CA:70:CE:ED:C0:CE:6A:A9:FC:7E:EC:89:3B:35:35:03:B7:D8:24:26
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2369115EA1AD538E34724CB5FA11B46F
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ynDO7cDOaqn8fuyJOzU1A7fYJCY.roa
Signing time: Thu 02 Jul 2026 15:18:35 +0000
ROA not before: Thu 02 Jul 2026 15:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215710
IP address blocks: 81.168.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:11:5e:a1:ad:53:8e:34:72:4c:b5:fa:11:b4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca70ceedc0ce6aa9fc7eec893b353503b7d82426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4a:11:c4:7c:e1:39:89:0f:b0:a3:df:ce:ed:
2e:f4:c9:a1:fc:13:4c:e8:c7:7f:ec:5d:e4:2f:3a:
70:f4:81:eb:3e:97:70:8b:60:b7:2b:75:f0:a4:b0:
74:bd:83:e2:cf:a4:1a:58:b5:2a:3e:60:23:01:62:
a8:57:36:d2:c6:c8:ea:1b:29:27:90:44:45:c1:ad:
81:09:3e:e6:46:d6:a1:df:c6:4c:d3:67:05:90:3a:
43:65:d3:0e:7a:db:11:21:36:99:98:95:a5:c4:33:
46:5d:ff:9e:67:b8:1a:2d:6c:83:8f:15:5a:b0:f8:
af:c0:41:85:11:37:ec:20:e5:02:90:af:9b:3f:c2:
1a:9b:2e:ef:da:ad:ad:03:52:b4:51:5c:63:2a:e3:
fd:d5:4a:cc:5f:c4:22:f1:d8:49:9d:72:53:37:dc:
50:14:7c:2a:a2:e4:49:49:cb:f6:b8:46:c4:7d:53:
19:d4:b3:dd:81:14:b2:91:77:58:68:df:2a:fc:bf:
ad:2d:12:e4:d7:fb:db:e1:97:cc:95:1f:75:05:88:
68:4b:0c:a9:fb:fb:e9:c2:0c:e9:f6:38:28:3b:e5:
54:0c:ec:56:fd:20:5c:92:de:e0:1c:3f:62:d8:09:
29:32:ab:5b:07:de:a3:1a:e5:66:80:46:00:4e:60:
21:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:70:CE:ED:C0:CE:6A:A9:FC:7E:EC:89:3B:35:35:03:B7:D8:24:26
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ynDO7cDOaqn8fuyJOzU1A7fYJCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.119.0/24
Signature Algorithm: sha256WithRSAEncryption
43:40:bd:ff:6e:d1:1c:2a:9b:e8:16:05:0a:d7:f2:d1:18:e3:
ae:3f:87:a7:42:b1:27:f6:a9:2c:15:e7:ec:5b:a1:81:b1:41:
84:55:2c:01:39:1f:cc:47:70:1b:9f:1f:e3:b3:8a:50:6c:df:
ac:93:be:ea:57:dc:2f:2b:53:dc:dc:4d:b6:78:00:a0:f3:d1:
48:ba:54:d0:6e:9b:d0:d7:f8:f8:5e:66:a5:06:da:f3:cd:45:
3a:bb:d9:13:18:23:eb:33:49:b5:cf:c8:75:70:15:40:42:57:
3a:86:30:7f:fe:84:d9:83:0f:72:42:d0:99:e7:3d:d9:d9:92:
9b:27:22:cd:0e:5a:57:48:dd:dd:ea:d8:6d:50:d2:cd:47:c6:
4a:94:a0:eb:63:2c:06:ad:fa:4a:ee:6a:e6:2a:4a:31:4b:93:
b5:49:3d:9b:ab:43:b9:15:06:c8:11:12:07:02:0f:91:b5:b3:
1c:6d:58:89:b1:28:87:22:ab:b1:0f:37:2c:7b:85:1a:13:1d:
17:8b:ae:e9:4f:ff:e9:2a:a8:5c:7d:b8:2e:5e:59:5b:da:4f:
86:d1:a1:6c:60:c3:a5:26:4e:36:2f:2d:59:bb:75:90:b5:78:
82:32:23:e7:72:97:00:57:34:be:c9:ca:ec:c3:73:04:b2:22:
94:e6:bb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:18:12 2026 by rpki-client