Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/YutEoBfWs_d_Vmzt8KskeBK3m2Q.roa
File: YutEoBfWs_d_Vmzt8KskeBK3m2Q.roa (raw, json)
Hash identifier: 5HxZOkVIf5/XRZEx3N/8+AKWfxloPR9Zbm8zk29zlr8=
Subject key identifier: 62:EB:44:A0:17:D6:B3:F7:7F:56:6C:ED:F0:AB:24:78:12:B7:9B:64
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A179155D006625064E6E6FA4B0E0306E42
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/YutEoBfWs_d_Vmzt8KskeBK3m2Q.roa
Signing time: Mon 26 Oct 2026 16:40:05 +0000
ROA not before: Mon 26 Oct 2026 16:40:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207700
IP address blocks: 13.143.237.0/24 maxlen: 24
201.8.66.0/23 maxlen: 24
201.8.84.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:15:5d:00:66:25:06:4e:6e:6f:a4:b0:e0:30:6e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 26 16:40:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62eb44a017d6b3f77f566cedf0ab247812b79b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:60:65:16:4b:cb:e4:2f:ce:76:61:b1:63:d1:
6d:09:54:56:ed:42:6b:9a:3e:1b:c5:dc:e5:7c:ab:
6b:67:82:fc:ce:8f:09:34:6e:1d:a3:b1:4a:f9:7d:
48:e2:e9:77:cd:1b:79:c1:40:bf:ea:41:aa:6c:83:
15:e1:30:06:d1:d0:64:a0:9a:2f:a4:60:3f:a8:af:
22:8d:42:aa:98:73:2b:6f:dd:cc:ef:ac:89:67:b4:
08:03:0d:f6:e5:87:38:72:32:1b:30:71:a9:f1:c6:
6d:9d:e1:47:30:dd:62:92:34:dd:5f:2f:ec:87:f6:
24:51:f6:9d:c2:72:5a:09:33:9d:48:bc:1c:5d:42:
25:a8:14:7c:e6:62:02:fc:45:99:2c:d2:97:71:98:
e8:81:9b:ea:f1:61:49:f5:ff:7d:37:bf:35:c7:39:
4b:3f:00:4a:3a:d4:b3:51:29:1d:c4:33:99:90:06:
6c:fc:3d:24:f3:06:8d:3f:c3:60:70:34:da:ad:6d:
c6:60:02:ee:57:8c:54:ca:13:60:cc:07:1c:7d:96:
d3:18:0b:8e:25:0b:34:39:12:5e:a6:1f:3d:80:61:
2c:49:6a:b1:69:b0:7a:e4:b1:ec:40:de:ea:d9:b5:
f2:52:fb:e0:6e:8b:1c:66:dc:73:73:92:05:81:8e:
be:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:EB:44:A0:17:D6:B3:F7:7F:56:6C:ED:F0:AB:24:78:12:B7:9B:64
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/YutEoBfWs_d_Vmzt8KskeBK3m2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.237.0/24
201.8.66.0/23
201.8.84.0/23
Signature Algorithm: sha256WithRSAEncryption
52:55:45:0c:91:d0:57:c9:f0:6e:5f:3f:93:d0:6d:b9:5a:61:
f0:73:9f:f5:5b:7c:7d:b8:27:48:fb:6f:33:0c:8c:74:d3:18:
37:97:75:5e:71:bd:bb:f7:3a:63:65:01:a6:ff:45:dc:4a:e8:
59:b3:18:58:c3:3d:19:d6:f0:d5:a9:1d:0b:10:f0:aa:82:6e:
d6:10:ff:c9:40:5e:a9:a2:37:f2:fa:c9:84:3a:a3:d6:32:17:
57:7c:62:cf:13:1b:a6:34:13:46:d6:78:44:00:66:5d:47:be:
57:e2:a5:27:c2:e7:9b:6e:b3:c6:50:41:3d:81:6d:e1:2e:20:
0f:3a:67:54:18:b2:42:45:c1:4c:8a:a2:7b:fa:fc:51:da:b3:
3f:13:9a:71:2b:ff:cf:f4:1c:37:fa:61:dd:75:49:1e:c1:82:
30:16:1a:90:f2:41:6e:c3:3e:0e:51:67:72:14:46:dc:98:ec:
3a:8d:1a:7c:67:0a:4a:b6:39:09:44:3d:ab:53:b6:22:39:7c:
37:ad:35:9a:0e:a1:12:94:e0:e8:18:12:b7:6b:a3:5f:21:08:
ae:41:83:74:c7:6c:4b:7d:34:21:cc:07:e2:d3:41:90:d5:d4:
dd:8d:98:c3:58:f2:a5:10:67:e6:76:05:2e:3c:e3:27:47:3b:
90:1e:66:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:28:54 2026 by rpki-client