Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/Ygzy2MOAa3dhtIXS0IVznh9BCRY.roa
File: Ygzy2MOAa3dhtIXS0IVznh9BCRY.roa (raw, json)
Hash identifier: ZMoxIJcdI7kOjXntSvobViqVU6OETLoYZNju4Am12aA=
Subject key identifier: 62:0C:F2:D8:C3:80:6B:77:61:B4:85:D2:D0:85:73:9E:1F:41:09:16
Certificate issuer: /CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79
Certificate serial: 019CDCE79768787638747C9E4904ECDDBDBB
Authority key identifier: A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/Ygzy2MOAa3dhtIXS0IVznh9BCRY.roa
Signing time: Wed 11 Mar 2026 12:38:10 +0000
ROA not before: Wed 11 Mar 2026 12:38:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 46.19.168.0/24 maxlen: 24
46.19.169.0/24 maxlen: 24
46.19.171.0/24 maxlen: 24
46.19.172.0/24 maxlen: 24
46.19.173.0/24 maxlen: 24
46.19.174.0/24 maxlen: 24
46.19.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:dc:e7:97:68:78:76:38:74:7c:9e:49:04:ec:dd:bd:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79
Validity
Not Before: Mar 11 12:38:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=620cf2d8c3806b7761b485d2d085739e1f410916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:20:36:f9:c5:da:e6:d4:78:65:22:af:c2:9d:
4b:a8:d0:da:ff:ca:d4:e6:6d:82:a8:4c:b1:7c:2e:
a3:e1:ca:45:c1:c7:b0:bf:e6:67:5f:0f:ed:0c:51:
63:d7:50:15:49:0d:34:a3:98:3b:35:5a:91:27:9b:
dc:be:9c:78:81:7b:5b:27:44:90:c6:87:6b:82:51:
53:8c:47:5a:ee:4f:d6:4c:96:79:e4:ec:70:0b:6d:
63:17:42:c3:f1:17:36:d5:e9:3c:18:ca:7d:93:d8:
dc:db:20:66:3c:3b:9c:5c:5e:61:44:b0:8e:97:3b:
31:fc:2b:94:7d:f2:d8:2e:12:b3:b1:90:58:f1:5d:
e5:b3:b7:e3:41:90:12:67:1d:47:a8:04:da:80:de:
ca:2c:50:f6:4d:45:61:a7:cd:16:3b:da:43:39:3c:
7a:66:3f:e1:e0:78:b9:43:5c:be:eb:89:1b:3f:ad:
df:0a:ba:c6:da:4f:40:75:3f:3b:f4:2d:1e:03:81:
e8:a2:09:29:fc:24:93:ff:2f:4d:90:10:f0:9e:93:
76:92:68:43:11:4a:72:f1:92:66:6d:fb:11:90:6e:
36:68:c6:82:64:47:cb:da:9f:78:5d:3d:08:fc:7d:
e7:49:6c:d9:1b:8f:ef:b7:94:d4:d5:de:a6:8f:48:
f8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0C:F2:D8:C3:80:6B:77:61:B4:85:D2:D0:85:73:9E:1F:41:09:16
X509v3 Authority Key Identifier:
keyid:A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/Ygzy2MOAa3dhtIXS0IVznh9BCRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.168.0/23
46.19.171.0-46.19.175.255
Signature Algorithm: sha256WithRSAEncryption
2f:62:a7:f3:0f:11:cf:db:57:9a:30:ae:6d:81:4d:f0:ed:9f:
7a:33:fb:bf:57:33:05:f8:0b:b3:ac:07:f1:49:ad:3e:df:d4:
1b:df:c1:86:e5:75:52:eb:c4:78:28:5b:35:ff:bc:b8:e5:ed:
a6:b5:01:70:e9:6a:df:db:47:94:6f:87:1f:e9:06:3c:b9:0f:
39:24:33:27:eb:2c:2d:c9:89:da:25:95:46:d0:e7:70:0c:9e:
f6:a7:87:cb:02:d2:85:d2:e8:0d:f9:bd:9b:7e:5d:46:b3:36:
87:f3:62:11:0f:75:03:57:cb:cf:b0:04:15:09:5e:90:45:cf:
15:f4:69:c0:b6:18:eb:6f:22:ed:43:b8:cc:57:e7:46:c7:55:
a9:f8:4e:46:6f:dd:d6:d9:bb:eb:e8:03:aa:17:42:dd:70:1d:
a1:b8:48:a9:fa:56:eb:ca:8b:03:3f:49:a6:fa:d2:c5:1b:ae:
c0:b1:b9:6d:bb:c1:55:b8:0e:ae:84:80:f1:6c:23:64:fd:d7:
4c:5a:d6:f1:63:b1:46:eb:a9:ca:c2:49:7f:92:5e:e8:27:41:
d6:ab:d4:19:80:c2:67:53:5b:37:0b:e5:98:4c:52:c6:57:ab:
06:1f:c5:62:d9:11:06:87:9e:36:8f:95:bc:68:49:54:5b:12:
27:b4:8b:c0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 19 12:31:14 2026 by rpki-client