Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/YvphSw6Q5ROQdGYZyenb2UxCFSQ.roa
File: YvphSw6Q5ROQdGYZyenb2UxCFSQ.roa (raw, json)
Hash identifier: s8dXY92grmgWzELQOASUyA27NMogKDUTt2bAfw/QLNA=
Subject key identifier: 62:FA:61:4B:0E:90:E5:13:90:74:66:19:C9:E9:DB:D9:4C:42:15:24
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A116A57D1F509E239B467C1CE75244EB50
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/YvphSw6Q5ROQdGYZyenb2UxCFSQ.roa
Signing time: Wed 07 Oct 2026 13:55:06 +0000
ROA not before: Wed 07 Oct 2026 13:55:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 87.76.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:a5:7d:1f:50:9e:23:9b:46:7c:1c:e7:52:44:eb:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Oct 7 13:55:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62fa614b0e90e51390746619c9e9dbd94c421524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fe:a5:0d:8f:c9:bc:b9:b4:e8:58:be:a2:db:
18:8d:4e:f4:11:0e:39:06:76:71:80:47:e0:8c:8a:
68:55:e4:9d:40:a7:9e:d5:c3:cf:fc:51:be:a7:43:
b9:fa:09:83:1f:78:3e:4f:33:55:b5:b2:0b:ab:5a:
a6:23:7c:e0:db:3b:72:f7:de:90:ed:51:23:cb:50:
bd:55:3a:38:88:c1:0f:76:bb:6f:c6:92:c6:b2:14:
df:6f:01:db:bb:4a:5b:85:26:92:eb:9b:68:ab:38:
1c:7d:f6:d1:1b:9c:94:a9:33:49:7d:4d:8b:2b:66:
7c:2c:da:93:1b:9e:ed:99:a3:3e:1a:68:b5:04:dd:
a1:89:52:5f:2d:b0:e8:91:e8:6f:4f:51:51:d2:0b:
c8:f2:50:3f:f6:8e:a0:a4:5b:e2:ce:d0:e2:7e:51:
a7:19:e1:b8:f6:95:83:9e:fd:5b:7b:0d:ac:40:a0:
56:38:c2:3f:1b:a4:31:74:bb:99:b4:be:c2:90:32:
ce:21:85:3d:e0:13:cd:c1:c7:48:c8:b1:da:82:bd:
42:24:9d:e9:ed:d0:b6:53:b4:23:a5:7e:20:61:ce:
86:c5:ef:20:70:8c:22:a4:78:5f:c9:42:c4:c6:b9:
d5:ed:63:cd:07:4d:5a:88:59:5e:ef:13:df:33:a2:
3e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FA:61:4B:0E:90:E5:13:90:74:66:19:C9:E9:DB:D9:4C:42:15:24
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/YvphSw6Q5ROQdGYZyenb2UxCFSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.150.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:39:9c:35:a1:52:52:6b:ac:a2:23:e9:ec:50:8c:87:fc:21:
ee:e1:dd:1f:0a:32:7d:69:86:9d:91:c8:8d:8a:88:09:78:9f:
47:0e:67:8c:45:71:7a:5d:a3:b9:d8:c7:e0:93:e6:c7:23:dc:
6b:41:88:94:94:82:2e:a2:f4:7d:13:fe:91:70:ad:fd:72:4b:
5c:a7:40:94:ef:bf:1d:6c:5d:02:ff:7d:63:5a:d3:12:2e:d3:
b2:7f:9b:34:4a:9a:f1:4d:a3:20:ac:b8:50:7e:9f:91:fe:ed:
60:28:b5:d9:6d:18:c4:7b:36:83:b3:50:68:93:e5:26:f3:e8:
2c:2c:15:81:bd:e0:cb:32:8e:85:c5:89:7e:3d:43:d9:2f:4d:
5a:ee:9b:1e:ac:2d:73:7a:b0:c1:9e:6a:6e:70:0a:d4:2f:18:
91:90:dc:7d:8e:16:c0:af:93:e0:69:55:e6:ed:db:78:88:f4:
41:98:49:82:a8:58:35:62:72:d9:87:9d:3a:44:d9:df:76:5a:
62:7c:7f:cf:ad:4a:22:72:6e:21:82:f4:20:de:a7:f4:65:64:
be:b1:f7:77:80:11:65:75:7d:7b:79:2c:a7:19:7e:91:a6:05:
b3:6e:9c:58:bd:d3:59:f6:e2:83:47:e1:a0:c7:d0:02:81:3b:
75:dd:08:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:47:36 2026 by rpki-client