Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/YqUy-2uDfgXpnjgU2fM9WjwgKlk.roa
File: YqUy-2uDfgXpnjgU2fM9WjwgKlk.roa (raw, json)
Hash identifier: pQwXSl0mgcHIVKIbRMPhoOPInhtMVGSj+x6QMvyXQK0=
Subject key identifier: 62:A5:32:FB:6B:83:7E:05:E9:9E:38:14:D9:F3:3D:5A:3C:20:2A:59
Certificate issuer: /CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad
Certificate serial: 019FB8663B99C309D76D6970B1686CE5D2EC
Authority key identifier: C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/YqUy-2uDfgXpnjgU2fM9WjwgKlk.roa
Signing time: Fri 31 Jul 2026 13:38:55 +0000
ROA not before: Fri 31 Jul 2026 13:38:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219440
IP address blocks: 65.87.220.0/23 maxlen: 23
96.9.126.0/24 maxlen: 24
2a14:a480:1::/48 maxlen: 48
2a14:a480:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b8:66:3b:99:c3:09:d7:6d:69:70:b1:68:6c:e5:d2:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad
Validity
Not Before: Jul 31 13:38:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62a532fb6b837e05e99e3814d9f33d5a3c202a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6c:f8:82:10:10:d8:8a:76:f2:0a:2e:9c:22:
27:eb:8f:01:66:02:fd:6a:5a:0a:da:e0:42:15:3f:
b3:50:bd:51:75:ab:72:34:0c:81:20:5c:69:b3:33:
14:42:54:59:af:68:11:53:95:53:e0:90:c3:d8:07:
9a:e4:c8:72:30:9c:57:32:06:9f:53:5e:e3:09:0f:
cf:fb:f2:6d:00:b5:03:f8:50:9c:ff:b3:93:b6:29:
7b:1c:5c:0b:6f:d3:75:00:2b:97:bd:08:25:22:5d:
03:18:cc:5c:73:d9:b6:37:68:13:5a:ad:48:13:eb:
8f:31:b4:9d:47:2d:10:c8:c2:c7:f8:1b:1e:b7:b5:
0d:5b:a7:9d:8d:d9:75:7e:1a:f8:04:7a:09:ea:87:
99:2b:85:ac:81:56:d7:45:c2:6d:69:d2:88:fe:f3:
b5:d3:12:36:c2:fc:04:71:d3:3d:2a:9c:82:c1:60:
ca:84:57:5e:ce:56:76:95:9b:23:23:12:d5:3d:61:
22:5a:72:05:15:12:fa:b4:29:3d:b0:d2:96:cf:55:
d9:81:9d:f7:9e:7c:74:63:f8:53:b2:63:6e:da:72:
b6:87:5f:69:1a:7e:ac:6b:21:ee:97:40:05:31:88:
41:0e:eb:1d:d0:79:3d:2a:16:e1:53:47:04:01:93:
d7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A5:32:FB:6B:83:7E:05:E9:9E:38:14:D9:F3:3D:5A:3C:20:2A:59
X509v3 Authority Key Identifier:
keyid:C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/YqUy-2uDfgXpnjgU2fM9WjwgKlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.87.220.0/23
96.9.126.0/24
IPv6:
2a14:a480:1::-2a14:a480:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
99:b1:78:e1:6d:f4:41:b9:ab:df:49:01:10:c2:f7:41:c5:3d:
27:0e:ef:ed:cb:60:36:d7:f7:be:a2:5d:6a:f9:0d:fe:a0:d2:
9a:eb:dc:b5:7d:ec:34:bb:ea:13:6d:bb:90:bd:0c:35:19:04:
bc:51:f2:38:f2:05:03:73:82:88:ba:17:ac:f6:55:33:f6:ab:
59:3c:d2:f9:77:9e:8c:f2:37:bd:2d:cb:2e:70:d4:ba:fb:c4:
3e:37:cf:d0:b2:d2:0f:50:9c:37:b5:99:df:dd:ca:6f:20:a5:
b5:10:19:59:ec:98:1f:9b:bb:ae:c8:4d:ca:76:67:bf:3b:5e:
8e:aa:92:3f:b0:bd:8f:4b:92:89:bd:7b:d2:1e:71:d5:7c:20:
15:5c:c7:fe:74:a0:2b:b6:54:e6:4b:64:98:fc:6a:b7:c6:ea:
37:63:ef:ff:be:05:93:93:cf:29:d7:e7:ed:06:d0:10:66:da:
35:ed:14:b6:a9:aa:6a:0a:02:01:88:6e:9c:b4:da:0d:cb:fb:
4b:c0:1c:e4:23:bc:f4:56:22:71:2f:8d:4c:b4:0c:81:b5:ba:
b4:d3:e4:2b:31:cf:ab:ed:96:6f:fe:c7:ec:36:f1:9e:1e:65:
58:54:e5:b5:fe:72:9c:3c:a0:7f:38:18:b8:7d:e5:e7:4f:86:
83:7d:2c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:42:07 2026 by rpki-client