Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/YghezCUU2vOijUnVGZAb_mUnkhs.roa
File: YghezCUU2vOijUnVGZAb_mUnkhs.roa (raw, json)
Hash identifier: L2GRUM87dM4BK/Wvu0iTVTzKViHXhACc4SUvy5eRPBs=
Subject key identifier: 62:08:5E:CC:25:14:DA:F3:A2:8D:49:D5:19:90:1B:FE:65:27:92:1B
Certificate issuer: /CN=794838864d6805162693bdf249f3b8ac31f680bd
Certificate serial: 019E2557450652F24608DEBF9F6C8A2F034B
Authority key identifier: 79:48:38:86:4D:68:05:16:26:93:BD:F2:49:F3:B8:AC:31:F6:80:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eUg4hk1oBRYmk73ySfO4rDH2gL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/YghezCUU2vOijUnVGZAb_mUnkhs.roa
Signing time: Thu 14 May 2026 07:15:36 +0000
ROA not before: Thu 14 May 2026 07:15:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35487
IP address blocks: 201.78.140.0/22 maxlen: 32
201.78.144.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/eUg4hk1oBRYmk73ySfO4rDH2gL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/eUg4hk1oBRYmk73ySfO4rDH2gL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eUg4hk1oBRYmk73ySfO4rDH2gL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:25:57:45:06:52:f2:46:08:de:bf:9f:6c:8a:2f:03:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=794838864d6805162693bdf249f3b8ac31f680bd
Validity
Not Before: May 14 07:15:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62085ecc2514daf3a28d49d519901bfe6527921b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f3:29:51:2c:4c:bf:39:da:0d:53:1a:04:4a:
07:a4:81:92:e8:35:5e:ea:36:7d:47:7f:4c:22:a1:
c1:82:81:fc:e7:b0:15:25:e1:17:ca:26:d2:0e:df:
7b:dc:1f:37:4a:41:32:ea:48:71:43:e4:2e:df:60:
8d:7d:20:ee:a5:73:27:fd:dd:0b:5d:00:2e:5b:30:
65:9d:02:0e:de:62:67:4b:90:c4:28:59:59:96:55:
d3:ee:d5:93:e2:41:03:ec:9b:d4:68:0f:41:53:54:
04:6a:e2:4f:5f:03:45:2d:e6:21:b7:88:37:fc:bf:
5c:0e:1a:1f:57:42:96:80:29:46:1d:41:90:ad:fc:
1c:6b:d3:cf:d1:bf:d7:b9:0f:b1:30:33:1c:1d:83:
57:23:92:6a:4f:05:f2:b3:b5:54:9b:36:e8:6b:cf:
dc:ef:4e:f1:79:d7:af:6f:4e:8e:6b:9a:10:b1:aa:
bc:11:43:27:39:09:62:90:5f:24:64:95:8f:fd:3b:
c5:74:c2:48:09:76:06:73:8f:1d:69:d2:73:8b:46:
e7:59:4a:f0:a7:23:93:45:43:ad:22:85:97:ef:38:
57:51:15:1c:bd:62:8c:73:fc:4f:cf:82:26:a1:8a:
1c:d5:b2:af:9b:df:94:5b:71:94:87:43:6a:f6:df:
a6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:08:5E:CC:25:14:DA:F3:A2:8D:49:D5:19:90:1B:FE:65:27:92:1B
X509v3 Authority Key Identifier:
keyid:79:48:38:86:4D:68:05:16:26:93:BD:F2:49:F3:B8:AC:31:F6:80:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eUg4hk1oBRYmk73ySfO4rDH2gL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/YghezCUU2vOijUnVGZAb_mUnkhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/eUg4hk1oBRYmk73ySfO4rDH2gL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.78.140.0-201.78.159.255
Signature Algorithm: sha256WithRSAEncryption
03:be:69:83:78:6f:b8:76:b6:9c:5a:a4:fc:cf:51:26:cd:d3:
14:c9:30:7e:85:63:15:7f:a9:31:7c:e4:a2:65:84:78:20:b4:
d5:c5:fe:10:6c:16:2c:91:2e:26:3d:fe:71:c7:ee:70:c8:d3:
b3:ad:3b:8d:7d:a2:be:9f:d7:10:83:c9:d9:00:43:79:d4:19:
82:93:f5:ca:53:41:2c:a1:86:15:8c:db:09:13:dd:dc:4b:e2:
4d:57:c8:56:cc:9e:8e:ea:0f:2b:84:11:eb:7a:13:42:1b:a3:
54:45:5f:8b:e1:85:93:54:18:3c:cc:04:0c:e8:f5:d0:3b:6f:
d8:42:44:82:31:7d:9c:f4:4f:7f:fc:9a:e6:cd:f2:ac:9d:7d:
ed:16:36:3f:27:99:a0:52:cf:d8:dd:ce:cb:64:65:5e:7c:62:
f0:41:91:09:e0:a6:2c:95:a9:a5:2e:21:c2:e0:13:62:77:0a:
e7:75:e6:5a:4e:d0:45:b4:b0:84:f2:3e:f0:b7:4d:6e:e5:03:
d7:36:a9:64:43:20:e1:a2:1d:b9:9e:56:41:59:09:46:36:c7:
23:cb:a6:c7:84:94:86:b6:92:64:55:1e:6a:c9:90:3d:06:d5:
9a:35:23:2f:ff:9a:30:76:96:71:f6:99:4d:f0:ad:45:7b:f0:
e6:75:52:f9
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZ4lV0UGUvJGCN6/n2yKLwNLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NDgzODg2NGQ2ODA1MTYyNjkzYmRmMjQ5ZjNiOGFjMzFm
NjgwYmQwHhcNMjYwNTE0MDcxNTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjA4NWVjYzI1MTRkYWYzYTI4ZDQ5ZDUxOTkwMWJmZTY1Mjc5MjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fMpUSxMvznaDVMaBEoHpIGS6DVe
6jZ9R39MIqHBgoH857AVJeEXyibSDt973B83SkEy6khxQ+Qu32CNfSDupXMn/d0L
XQAuWzBlnQIO3mJnS5DEKFlZllXT7tWT4kED7JvUaA9BU1QEauJPXwNFLeYht4g3
/L9cDhofV0KWgClGHUGQrfwca9PP0b/XuQ+xMDMcHYNXI5JqTwXys7VUmzboa8/c
707xedevb06Oa5oQsaq8EUMnOQlikF8kZJWP/TvFdMJICXYGc48dadJzi0bnWUrw
pyOTRUOtIoWX7zhXURUcvWKMc/xPz4ImoYoc1bKvm9+UW3GUh0Nq9t+mLQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFGIIXswlFNrzoo1J1RmQG/5lJ5IbMB8GA1UdIwQY
MBaAFHlIOIZNaAUWJpO98knzuKwx9oC9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVVnNGhrMW9CUlltazczeVNmTzRyREgyZ0wwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8xZDVhZDAtNDc4NS00MDQ2LWI4ZTYt
YTBlNzBlNTA1NmVmLzEvWWdoZXpDVVUydk9palVuVkdaQWJfbVVua2hzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8xZDVhZDAtNDc4NS00MDQ2LWI4ZTYtYTBlNzBlNTA1NmVm
LzEvZVVnNGhrMW9CUlltazczeVNmTzRyREgyZ0wwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALJTowD
BAXJToAwDQYJKoZIhvcNAQELBQADggEBAAO+aYN4b7h2tpxapPzPUSbN0xTJMH6F
YxV/qTF85KJlhHggtNXF/hBsFiyRLiY9/nHH7nDI07OtO419or6f1xCDydkAQ3nU
GYKT9cpTQSyhhhWM2wkT3dxL4k1XyFbMno7qDyuEEet6E0Ibo1RFX4vhhZNUGDzM
BAzo9dA7b9hCRIIxfZz0T3/8mubN8qydfe0WNj8nmaBSz9jdzstkZV58YvBBkQng
piyVqaUuIcLgE2J3Cud15lpO0EW0sITyPvC3TW7lA9c2qWRDIOGiHbmeVkFZCUY2
xyPLpseElIa2kmRVHmrJkD0G1Zo1Iy//mjB2lnH2mU3wrUV78OZ1Uvk=
-----END CERTIFICATE-----
Generated at Thu Jun 4 05:05:19 2026 by rpki-client