Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/YdEKnNui8kZkJHSxbtIPmvbJjr8.roa
File: YdEKnNui8kZkJHSxbtIPmvbJjr8.roa (raw, json)
Hash identifier: 0ClyNA/E0qLCFvTgVmstwCaGn8TFoS5MPxpcfIn67MM=
Subject key identifier: 61:D1:0A:9C:DB:A2:F2:46:64:24:74:B1:6E:D2:0F:9A:F6:C9:8E:BF
Certificate issuer: /CN=268f501bbf9e13cdd2eb899d97121f669aa29135
Certificate serial: 019DDC037C6541CBD74EAAE1FE32B94930CF
Authority key identifier: 26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/YdEKnNui8kZkJHSxbtIPmvbJjr8.roa
Signing time: Thu 30 Apr 2026 01:31:49 +0000
ROA not before: Thu 30 Apr 2026 01:31:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36352
IP address blocks: 91.234.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 13:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:03:7c:65:41:cb:d7:4e:aa:e1:fe:32:b9:49:30:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268f501bbf9e13cdd2eb899d97121f669aa29135
Validity
Not Before: Apr 30 01:31:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61d10a9cdba2f246642474b16ed20f9af6c98ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fd:f2:ca:57:d7:1a:40:1f:3d:b3:c2:93:7c:
45:85:aa:e7:6f:d5:3e:5c:4e:12:ca:fb:86:d2:16:
27:01:b5:05:ea:24:2e:6a:96:48:48:1d:05:08:d3:
dd:6f:85:06:4b:d7:7e:b9:f7:a9:fb:73:69:4b:fd:
b1:24:0c:77:b3:c2:a2:e2:25:1b:43:14:9c:4c:50:
9b:fb:04:8b:95:a1:6c:6b:61:09:78:36:69:bf:94:
68:38:89:37:73:85:ce:8d:da:cc:07:c2:1c:22:64:
63:f4:1a:33:1f:31:a9:72:17:83:fd:61:f7:e6:6e:
c1:91:ed:23:1b:67:30:95:2e:03:a8:2b:0d:3e:66:
8a:26:4f:6e:bc:0c:06:a6:93:c4:4b:cb:17:1b:c1:
a2:47:11:c7:e7:5d:7b:61:68:ab:4c:9a:aa:9b:10:
5c:1a:33:c0:e2:54:d0:27:3f:c6:48:27:d6:ba:79:
6b:dc:5b:ad:30:91:a1:8b:ab:ee:3f:d1:ee:f6:2e:
28:a7:7a:b1:4a:a3:67:e5:86:1a:c5:fc:c9:96:f7:
2e:11:73:00:aa:8a:21:32:73:84:ee:4c:69:41:06:
f7:61:0d:50:62:56:dc:19:13:00:2a:dc:b3:88:63:
80:3f:96:51:e3:a8:df:60:74:e0:e5:66:8d:4d:7c:
69:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D1:0A:9C:DB:A2:F2:46:64:24:74:B1:6E:D2:0F:9A:F6:C9:8E:BF
X509v3 Authority Key Identifier:
keyid:26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/YdEKnNui8kZkJHSxbtIPmvbJjr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.36.0/24
Signature Algorithm: sha256WithRSAEncryption
96:6e:71:7a:e5:ba:a0:73:df:6c:d1:12:ca:19:9c:fb:dc:86:
fd:a1:ac:0b:8e:51:de:b1:c3:06:fd:56:e4:4b:15:96:86:ef:
a2:05:cb:87:f5:22:26:ed:3d:4d:19:47:23:63:9d:ca:8a:ed:
62:c1:4c:eb:96:05:39:95:6b:f1:2d:73:99:33:cf:36:e5:23:
b1:c5:2a:3f:6c:77:5e:99:ee:a8:b1:7f:4c:13:ea:d3:ca:18:
fd:2c:a3:9e:e0:de:bb:c3:3d:f6:db:89:ee:8a:59:6e:81:68:
d6:e3:7a:4e:fb:cc:84:8c:f7:31:35:fe:12:55:d1:5c:12:42:
83:9a:1d:2c:e6:9b:cd:cf:fd:04:2f:7e:b1:11:c3:a5:fd:4a:
cc:54:d4:05:71:cd:e8:45:1e:40:fb:17:95:5d:49:59:56:4a:
ac:68:07:08:fd:9f:a8:8a:22:2d:0b:6e:f7:b4:9e:34:0d:ad:
ec:75:78:f2:a1:9b:c8:83:51:35:a7:bd:90:37:7f:b0:f2:a7:
1d:19:7d:95:e3:79:6b:71:76:13:8a:4f:a3:fc:c8:93:f7:1e:
83:13:1d:61:d3:5b:3a:b0:62:64:f1:0e:69:64:19:db:7a:68:
bb:ae:d7:ca:e0:03:01:87:ee:97:dc:71:f4:7c:f5:fd:47:ff:
fc:f9:7b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 19:06:10 2026 by rpki-client