Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/YGJAP06JIIR61u3t1HafmErTesA.roa
File: YGJAP06JIIR61u3t1HafmErTesA.roa (raw, json)
Hash identifier: qF+DwrgG2U99cwKMCWmWt3NuqqOCTTeU/xoNUQDlOnk=
Subject key identifier: 60:62:40:3F:4E:89:20:84:7A:D6:ED:ED:D4:76:9F:98:4A:D3:7A:C0
Certificate issuer: /CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Certificate serial: 019DD083BA987A55B5364BFDEE4EF51D4845
Authority key identifier: FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/YGJAP06JIIR61u3t1HafmErTesA.roa
Signing time: Mon 27 Apr 2026 19:56:27 +0000
ROA not before: Mon 27 Apr 2026 19:56:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 92.53.180.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.mft
rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 May 2026 01:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:83:ba:98:7a:55:b5:36:4b:fd:ee:4e:f5:1d:48:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe779e56238b6f2ea068ede4e20aef00c904132b
Validity
Not Before: Apr 27 19:56:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6062403f4e8920847ad6ededd4769f984ad37ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2a:fd:17:e2:13:98:29:0d:1e:55:b5:0e:4f:
85:5f:33:60:58:f3:eb:21:f2:ee:10:3d:6a:49:40:
42:84:45:23:16:b3:b8:a2:a2:d5:0e:96:26:f5:ee:
bf:2c:d9:3f:68:cf:e9:6e:1e:a3:1b:a5:78:be:4b:
c8:15:0e:5b:95:39:f0:6b:18:fc:b4:b4:b3:55:43:
1a:ce:0e:44:15:b5:af:c0:34:ef:8d:2b:8d:e9:03:
f5:6a:97:74:9a:8e:47:ae:ce:2a:2c:51:ad:b5:b6:
98:cb:c9:d2:ec:d8:2c:b0:6a:60:09:59:ac:7a:00:
21:50:29:d7:7e:32:56:03:f4:b4:e8:c4:6c:a9:a2:
26:3b:71:3e:35:cc:22:d1:98:eb:9c:36:4d:4c:c1:
9c:5c:4f:42:c4:7d:6a:c8:53:82:2a:7b:13:9e:43:
bd:94:b7:8c:b0:1d:3e:8a:76:9b:75:30:9b:6e:b2:
45:32:c5:e1:fa:80:a9:31:12:23:07:ad:2b:0e:d2:
ac:34:11:7b:6c:77:b2:ab:05:61:ed:a1:f2:e2:3c:
90:26:8a:c8:87:f0:56:a0:3e:ce:3f:57:74:8f:37:
fa:d7:83:af:42:40:e6:10:37:97:2c:b4:86:81:43:
b3:56:1b:c6:c7:ba:1c:ba:c1:56:79:3a:d0:bd:45:
aa:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:62:40:3F:4E:89:20:84:7A:D6:ED:ED:D4:76:9F:98:4A:D3:7A:C0
X509v3 Authority Key Identifier:
keyid:FE:77:9E:56:23:8B:6F:2E:A0:68:ED:E4:E2:0A:EF:00:C9:04:13:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_neeViOLby6gaO3k4grvAMkEEys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/YGJAP06JIIR61u3t1HafmErTesA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4de598-6b03-4bef-ab14-33894913dcb7/1/_neeViOLby6gaO3k4grvAMkEEys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.180.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:e2:62:06:43:b0:57:bc:79:6c:8d:73:be:74:96:16:50:8a:
26:35:8d:e9:6f:5b:70:3c:d3:53:e5:98:63:71:03:ce:8a:d0:
51:12:4c:9f:dd:78:aa:3d:6e:d9:c9:02:a2:f8:f5:9e:7b:b4:
89:bf:6b:92:85:0e:e2:13:b0:31:d4:73:80:b8:8e:08:ea:11:
b7:68:a8:3e:45:7c:fd:d6:d9:70:6b:35:db:cd:1f:c4:77:b6:
bc:e6:bd:a4:67:88:37:e2:f2:7c:97:3d:5c:81:b0:52:2f:02:
42:05:a3:1e:75:a3:2b:58:d2:46:c2:d6:cf:ca:d5:7e:4a:18:
d2:89:81:b4:7c:20:18:83:5f:b3:3f:9d:f5:cd:73:72:b7:cc:
92:7e:f5:f9:72:9e:04:54:2b:ba:2b:c8:3a:04:42:09:aa:99:
56:ae:1f:5a:00:38:88:3e:03:f0:c5:9f:25:69:da:27:0e:21:
f8:3d:d1:36:31:e2:58:fa:4a:fe:8b:36:f4:be:2a:91:49:66:
49:40:60:12:78:a0:4d:7e:df:c7:9c:39:02:84:d0:cd:7c:a3:
15:7f:54:9c:20:0a:9d:7c:27:d5:83:aa:67:9f:85:2b:f1:89:
8a:ce:78:5d:31:47:52:4e:ff:7f:cb:b1:d4:c1:0d:9e:db:72:
84:2c:54:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 08:51:05 2026 by rpki-client