Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/yTTayTL41qHWL6gWmBRi6muRZKQ.roa
File: yTTayTL41qHWL6gWmBRi6muRZKQ.roa (raw, json)
Hash identifier: KuHMdy+xEGLUNp8u6CFDJT5C7IHBOhf7emLTFyrBpUM=
Subject key identifier: C9:34:DA:C9:32:F8:D6:A1:D6:2F:A8:16:98:14:62:EA:6B:91:64:A4
Certificate issuer: /CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
Certificate serial: 019DB06CB31075F9A6AF0602E5388FBBE7D8
Authority key identifier: 60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/yTTayTL41qHWL6gWmBRi6muRZKQ.roa
Signing time: Tue 21 Apr 2026 14:23:26 +0000
ROA not before: Tue 21 Apr 2026 14:23:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215930
IP address blocks: 81.30.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:6c:b3:10:75:f9:a6:af:06:02:e5:38:8f:bb:e7:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
Validity
Not Before: Apr 21 14:23:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c934dac932f8d6a1d62fa816981462ea6b9164a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:51:9c:6d:9c:3e:43:32:81:38:19:70:d0:48:
aa:bd:74:ed:02:7b:f8:48:ac:af:a6:54:d5:36:28:
86:cf:0d:24:c4:ae:e9:47:52:e6:ad:17:51:1e:23:
3d:30:ec:ac:5a:63:7f:5a:bd:2c:8e:5a:a6:04:33:
f6:e6:8f:65:e6:90:9e:e5:fc:6d:c0:b7:39:43:db:
e4:81:d7:2e:6e:ee:fe:1e:84:be:d5:c8:44:db:9d:
47:9d:65:c1:ff:64:c8:1e:4a:ae:97:79:1e:a5:17:
8b:c3:84:1d:5f:56:83:ad:74:8b:3f:0f:9e:c6:f7:
d3:b5:5b:56:11:f9:d4:d2:69:04:d5:0f:80:04:80:
87:71:d0:98:7a:3f:87:07:c0:21:e4:57:71:7d:66:
28:ed:95:ef:c6:ce:c4:34:2f:50:7f:d7:42:bb:cc:
d0:ca:f3:30:2c:2c:13:95:92:8a:84:87:bc:f4:5d:
8d:47:79:ae:91:04:c2:ec:e9:93:18:48:e7:74:09:
4f:00:d8:8b:70:c0:aa:51:99:2b:c6:d2:96:b1:ad:
9d:ac:6f:d7:d0:bc:87:b8:e0:ce:f6:e9:12:4f:74:
d7:73:cf:86:a4:4f:0f:e3:3c:55:0d:dd:39:ac:b9:
8c:f7:87:26:2c:a4:e0:0d:28:fc:5b:d8:de:7e:3f:
d0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:34:DA:C9:32:F8:D6:A1:D6:2F:A8:16:98:14:62:EA:6B:91:64:A4
X509v3 Authority Key Identifier:
keyid:60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/yTTayTL41qHWL6gWmBRi6muRZKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.98.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:1a:7f:99:b9:0f:67:a6:01:24:be:27:38:24:90:2f:36:80:
bc:8d:bb:c4:0b:fb:38:6f:54:2b:fc:49:19:45:f8:b5:77:99:
c3:c3:04:d1:ef:24:75:20:46:1d:45:01:60:45:f8:d4:ec:7d:
43:91:75:4f:1f:2c:cd:61:95:f5:83:87:7f:ce:ac:21:d0:f9:
f8:bb:b5:5c:6f:4a:c5:99:9e:1f:b9:59:9c:a6:c8:82:48:01:
73:c0:d8:0d:b8:0d:28:56:9b:d0:47:e0:7e:50:14:76:30:48:
3b:cf:3c:21:86:1c:87:57:9c:53:c3:4d:37:ee:af:aa:3e:2a:
01:46:33:ef:53:3c:43:30:11:da:05:93:1d:c8:37:62:9f:f8:
7f:6f:a3:06:f3:bc:99:bd:25:cd:54:1e:15:d4:60:b4:ab:23:
b5:1c:fe:56:32:7e:c3:3d:cd:39:fe:e8:9a:a9:5a:4e:87:75:
ea:2d:16:11:75:fb:c3:00:b7:ce:35:9c:76:21:f2:6d:40:d3:
fe:46:d6:af:65:16:11:54:74:ea:db:89:7c:a2:fe:a9:34:78:
d3:2a:b5:e2:f8:39:9a:39:87:f0:da:ea:26:69:0f:04:d5:f3:
2c:55:16:55:fb:b3:60:4a:fe:9c:68:f9:09:7a:50:b0:14:a4:
d8:80:25:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 05:07:45 2026 by rpki-client