Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGKbCQ7OMTSRBvaLphqyn3y3BOQ.roa
File: YGKbCQ7OMTSRBvaLphqyn3y3BOQ.roa (raw, json)
Hash identifier: 5GPa7qg57xrN+sAHjpfAIA0arwN/6XheuBvztQZZCOc=
Subject key identifier: 60:62:9B:09:0E:CE:31:34:91:06:F6:8B:A6:1A:B2:9F:7C:B7:04:E4
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019FDB516DF07DD7CFE2BE348DBB5B7E14A9
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGKbCQ7OMTSRBvaLphqyn3y3BOQ.roa
Signing time: Fri 07 Aug 2026 08:22:54 +0000
ROA not before: Fri 07 Aug 2026 08:22:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 194.5.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Aug 2026 09:52:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:db:51:6d:f0:7d:d7:cf:e2:be:34:8d:bb:5b:7e:14:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 7 08:22:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=60629b090ece31349106f68ba61ab29f7cb704e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:11:66:86:19:00:2f:72:31:d1:39:31:fa:cc:
94:b4:b3:fa:a1:ad:e4:4b:ea:12:90:9a:d6:29:97:
7b:45:3e:3c:ca:ad:2c:45:af:be:fe:a9:4c:95:90:
17:a7:68:31:ab:9c:43:c8:c0:cc:eb:1c:8c:32:ba:
22:ac:a2:87:5c:f1:76:5e:7c:ff:a7:2f:73:18:e8:
af:30:86:c9:7f:23:43:d6:05:88:10:c9:39:ab:c1:
5c:65:19:54:1f:4f:2c:b7:79:7f:22:7c:c4:06:06:
02:ed:90:8e:65:a6:60:cb:e6:4e:1f:ab:da:3d:7c:
4b:80:8f:eb:03:6f:cc:85:47:4b:e8:bb:93:d6:8b:
27:e2:5b:60:7c:cc:9d:a7:1d:01:e9:a3:7f:29:d1:
e6:e7:c3:c0:e6:38:d9:18:0a:59:0c:a6:23:2f:35:
4f:0b:87:17:b8:9d:9f:41:ca:00:bc:0a:ae:70:36:
34:6e:87:ea:a1:d3:db:b3:c6:02:b3:e4:22:a0:a9:
46:13:ed:98:c9:73:24:96:d6:fd:69:2a:52:57:d6:
d2:bb:9f:a6:81:c7:1d:d8:17:5a:fd:69:df:df:63:
27:0f:ee:dd:f6:e6:9f:a3:68:da:5e:1c:29:fb:11:
4c:ab:42:19:5f:fa:db:72:37:70:f8:63:af:8b:b3:
70:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:62:9B:09:0E:CE:31:34:91:06:F6:8B:A6:1A:B2:9F:7C:B7:04:E4
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGKbCQ7OMTSRBvaLphqyn3y3BOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.64.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:df:d3:69:8a:81:3f:50:2e:88:73:a9:85:c0:96:fa:51:4f:
28:1d:d9:a9:3c:46:6c:af:91:8d:fd:f9:2b:d9:f0:a2:0d:d4:
3e:6a:f9:4f:56:38:b7:d9:b2:6f:4c:32:83:f9:ad:a2:b5:0e:
a8:cc:f7:dc:6f:31:9d:ed:4d:b0:42:cf:e7:96:f7:19:3f:b9:
d9:13:b5:38:fe:e5:e2:7d:1e:c8:e8:bb:65:2b:13:60:d8:da:
d2:75:73:c7:ba:6f:f2:aa:89:ce:92:f5:3c:f3:dd:9e:77:6f:
ce:16:ee:d5:27:0a:83:4f:be:29:1d:a2:ea:c9:5c:e3:af:23:
98:ac:55:f5:e9:a0:c9:f0:c3:7f:f5:f8:22:64:12:27:73:6b:
ba:13:42:15:fc:96:b5:a6:79:69:eb:c2:3e:99:e9:e4:5b:ad:
6e:e8:0f:7c:05:5e:3b:66:55:bf:7a:21:83:22:b5:28:5b:5f:
df:9b:4d:ca:aa:81:cf:57:ef:7b:53:be:96:23:91:62:7b:4e:
b9:16:29:43:c5:3c:69:60:cb:d7:33:57:0c:63:0f:58:4a:b1:
72:ae:14:ff:fa:0e:3b:5f:82:f7:0a:59:89:dc:9d:49:7b:84:
5e:4e:2f:4f:0d:f2:3d:95:37:c7:60:2f:dc:ca:78:ba:4c:4e:
56:d3:fa:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 19:03:19 2026 by rpki-client