Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/JyFyNCgLuuRbmdy2MoxJ32q2Dm4.roa
File: JyFyNCgLuuRbmdy2MoxJ32q2Dm4.roa (raw, json)
Hash identifier: xKrhZG6dEb9gwOC97bnM+tOVC4a5Bosj0L6EThWxP94=
Subject key identifier: 27:21:72:34:28:0B:BA:E4:5B:99:DC:B6:32:8C:49:DF:6A:B6:0E:6E
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 019F3C0896E594C41BDDC48C84609E6BDFB3
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/JyFyNCgLuuRbmdy2MoxJ32q2Dm4.roa
Signing time: Tue 07 Jul 2026 10:03:43 +0000
ROA not before: Tue 07 Jul 2026 10:03:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402236
IP address blocks: 84.55.16.0/24 maxlen: 24
84.55.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3c:08:96:e5:94:c4:1b:dd:c4:8c:84:60:9e:6b:df:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Jul 7 10:03:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27217234280bbae45b99dcb6328c49df6ab60e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:75:01:b2:c3:a1:09:e8:9b:0c:9f:db:e9:41:
6f:2c:2c:05:d5:93:b9:a4:ee:b8:89:f5:0f:f2:36:
56:3d:8e:6a:0c:47:f5:02:ec:99:a8:df:59:99:76:
58:cc:9d:1c:7b:17:10:66:c1:95:5c:cc:be:c7:97:
2d:61:3c:27:54:9f:30:9a:d2:69:d8:cb:d8:a7:ca:
34:d7:59:a5:ac:d4:3e:16:b1:69:47:51:e7:29:5e:
ad:23:a3:86:4b:90:b3:44:e0:49:9d:90:5e:7c:2c:
c0:fc:78:f2:86:2d:da:fc:cf:87:c4:89:67:d2:00:
be:26:38:ab:f6:8e:16:3d:00:89:7f:4d:86:d2:1c:
28:d6:52:9f:29:54:2f:ca:02:10:f5:55:1b:29:34:
04:95:78:87:23:db:46:47:c9:a8:f0:fa:f9:63:9f:
00:1f:57:62:7c:33:f8:5e:4d:86:98:a1:66:b8:09:
7e:bb:22:dd:7b:97:ed:a9:29:6b:f0:47:84:06:0e:
21:9c:af:ab:05:45:51:a0:11:36:1d:10:30:05:d2:
30:1e:c5:4b:a5:58:72:6c:6b:7e:24:7b:3f:2e:29:
bf:4e:d1:e5:59:eb:39:73:cd:f8:8a:b1:87:49:a7:
2b:e3:7d:0d:0a:b9:69:45:b1:f1:f4:fa:3e:08:1d:
e5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:21:72:34:28:0B:BA:E4:5B:99:DC:B6:32:8C:49:DF:6A:B6:0E:6E
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/JyFyNCgLuuRbmdy2MoxJ32q2Dm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.16.0/24
84.55.21.0/24
Signature Algorithm: sha256WithRSAEncryption
22:8c:55:13:7a:a1:ef:2a:4c:72:0a:9b:2e:48:c2:f2:4f:bc:
c8:c4:ab:b4:b2:43:7d:7b:0c:30:af:2e:d9:b4:16:97:e9:ce:
b3:93:2f:9b:18:ff:f0:e4:ab:bb:4f:d1:31:8c:57:41:cf:13:
22:bc:d0:ab:3a:32:43:2e:23:0b:b6:35:b3:04:66:4a:ce:f7:
62:5a:66:0b:3b:20:a1:36:1a:00:cd:4d:12:d6:cb:1e:8d:d1:
67:1f:08:05:87:e8:08:b2:63:fb:a6:d7:87:54:cb:3f:3b:21:
fb:a7:91:cd:39:8c:ac:8c:da:f9:6b:7d:19:c5:5e:50:31:7e:
59:1d:5a:2e:aa:50:1a:e3:70:e0:d1:cd:d0:20:20:fb:ba:37:
08:0b:64:f1:47:ae:06:94:f2:a0:dc:05:fa:29:58:54:43:45:
17:03:b0:94:37:12:cd:0d:9e:4c:57:16:17:f2:b5:d5:0e:d9:
4e:67:58:bc:39:7f:0b:6d:5a:b0:09:78:62:e2:51:a0:0f:e2:
2b:8a:bb:e8:dc:06:a1:07:b9:4f:98:b2:49:d9:b3:3d:3a:06:
36:87:dc:08:b8:af:fc:2b:d4:be:de:9c:a4:74:d3:3e:a2:b4:
1c:29:42:e6:4c:e4:5a:a2:51:48:92:92:8c:e4:f4:4f:fd:a3:
3d:24:55:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:21:46 2026 by rpki-client