Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/YoKrQhr_WJVUxQqa5QK_-hodvTI.roa
File: YoKrQhr_WJVUxQqa5QK_-hodvTI.roa (raw, json)
Hash identifier: dp2ugfgyjE9bSwzsnPyntWvIzbXP6tx9zwOlMe/l5nE=
Subject key identifier: 62:82:AB:42:1A:FF:58:95:54:C5:0A:9A:E5:02:BF:FA:1A:1D:BD:32
Certificate issuer: /CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Certificate serial: 019E9AEF3B4BBA8564E1F66711415B96BF6E
Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/YoKrQhr_WJVUxQqa5QK_-hodvTI.roa
Signing time: Sat 06 Jun 2026 03:17:09 +0000
ROA not before: Sat 06 Jun 2026 03:17:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213535
IP address blocks: 185.206.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9a:ef:3b:4b:ba:85:64:e1:f6:67:11:41:5b:96:bf:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Validity
Not Before: Jun 6 03:17:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6282ab421aff589554c50a9ae502bffa1a1dbd32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9e:0c:54:f7:2a:06:18:33:ab:b0:ae:22:2c:
a3:64:14:88:e8:c1:bf:1e:f9:c0:f5:28:50:52:a2:
99:34:06:a7:86:a7:96:ba:9c:a4:32:99:9e:4e:9f:
6c:39:6c:a4:96:88:5b:59:24:51:b0:cb:07:84:3d:
b1:81:79:fb:e7:a4:06:ba:d9:b2:f4:7e:30:83:92:
34:14:e0:00:ec:e3:87:48:ff:83:ce:53:df:4f:55:
70:bb:2b:2d:81:02:5e:7f:a2:ba:25:26:d9:0b:8c:
b9:3b:ae:4a:37:90:33:5d:58:bd:90:62:20:b4:74:
38:98:67:7d:4e:5e:ce:bb:74:ac:6a:9d:96:5e:83:
e2:8b:4f:49:06:a8:af:62:84:86:60:e3:9c:70:7b:
fe:b5:d3:26:3e:77:a0:7f:c1:a0:8e:a6:de:a4:54:
dd:b2:af:98:d6:c7:fe:8c:ba:0b:a4:b7:05:29:43:
03:79:c8:62:b6:c6:bf:94:0b:ca:b6:9b:74:96:e1:
1d:6c:25:37:7b:fb:57:a5:1d:83:a3:8b:6c:d1:28:
bc:cb:fb:a2:96:9e:ac:43:f6:0d:b9:a3:aa:fe:51:
e5:ec:16:dc:cc:48:d4:f2:d9:d8:02:7a:a5:1c:4e:
04:5a:8b:1c:bd:7c:63:f7:29:f4:6c:fb:18:e2:a9:
00:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:82:AB:42:1A:FF:58:95:54:C5:0A:9A:E5:02:BF:FA:1A:1D:BD:32
X509v3 Authority Key Identifier:
keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/YoKrQhr_WJVUxQqa5QK_-hodvTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.168.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:c8:a5:3e:89:ba:00:24:38:93:1b:01:36:1a:31:1c:f5:89:
3e:44:5d:1f:28:82:21:a0:8a:95:fe:e3:08:42:3a:1a:d7:a4:
e4:c6:65:d5:cd:b9:13:6e:4a:2d:6c:30:64:5a:c7:f6:cf:aa:
f7:65:70:0e:c8:49:8a:09:e3:c8:90:e7:e0:12:0d:b9:d9:f2:
31:b7:98:6a:a7:4f:05:07:8a:1f:77:a7:38:5e:59:65:f4:8a:
64:e4:b5:0a:e2:91:b9:1a:e9:03:18:0e:8e:3b:52:4a:d5:39:
92:60:75:11:66:46:5a:28:45:d8:89:39:7f:ba:aa:cf:d2:ad:
67:fd:87:e2:93:3e:42:10:7f:c8:53:9b:7f:28:35:d8:31:c5:
4b:35:7f:49:83:0b:47:0b:e2:12:1e:96:23:8e:08:8b:c4:c9:
d3:ff:df:24:2a:74:9c:1d:a2:e5:b3:9f:93:0f:43:83:75:9a:
72:19:18:2c:61:31:d2:f4:23:4b:19:8d:06:f0:ee:a6:d3:5f:
4d:b4:13:87:04:7e:6c:e7:e4:e8:70:b4:5a:aa:44:67:e1:81:
1d:f1:0c:6d:e6:07:3b:30:ca:7e:94:cc:2d:48:62:52:d6:4e:
72:bb:47:f5:b0:d1:14:76:43:09:1d:ac:fa:ea:ab:8e:d7:a5:
a6:e8:0c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 16:07:06 2026 by rpki-client