Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YyXgRYelUkqnbHcSDbPfkd-7y90.roa
File: YyXgRYelUkqnbHcSDbPfkd-7y90.roa (raw, json)
Hash identifier: j4N9+xItLptnrKceliWSsdLuIVM/2lJgdvftKn2AJ1I=
Subject key identifier: 63:25:E0:45:87:A5:52:4A:A7:6C:77:12:0D:B3:DF:91:DF:BB:CB:DD
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 019FC107671EAA75146F01E28DDFA28DA085
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YyXgRYelUkqnbHcSDbPfkd-7y90.roa
Signing time: Sun 02 Aug 2026 05:51:55 +0000
ROA not before: Sun 02 Aug 2026 05:51:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 88.223.42.0/24 maxlen: 24
88.223.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 14:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c1:07:67:1e:aa:75:14:6f:01:e2:8d:df:a2:8d:a0:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Aug 2 05:51:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6325e04587a5524aa76c77120db3df91dfbbcbdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ed:cb:aa:11:1c:2b:82:9a:2e:38:29:c9:29:
e5:3b:3f:14:24:28:4c:a6:d7:6b:be:5c:03:39:d1:
69:6c:65:94:ae:7b:3e:54:14:4c:0b:b3:6a:07:08:
92:0a:b1:47:f7:6d:52:ba:49:90:fd:cd:bb:d6:82:
19:ec:bb:45:9f:b6:16:df:10:8a:2a:f6:c1:2c:cb:
e0:60:89:80:9a:f0:31:08:b6:80:9d:03:99:74:c7:
00:8b:4c:4f:a1:a3:01:37:8a:93:41:38:f8:53:6a:
c6:d7:26:84:63:49:3f:53:d4:32:a0:fc:7c:60:43:
a7:9c:6f:5b:d0:48:bb:14:95:39:c0:39:88:2d:ee:
e4:c1:71:ee:f1:3a:5d:ca:54:51:88:03:70:54:0c:
cf:38:cc:04:b7:aa:d5:3f:4c:a8:79:34:9a:d1:90:
b4:83:57:f4:dd:b8:46:89:b3:5e:d6:c1:af:39:ef:
81:93:97:80:08:46:75:4e:f8:65:13:2d:c5:a2:f3:
9f:58:21:c6:86:b2:b4:ed:5d:73:5b:3c:28:41:4a:
fe:56:d0:9c:24:f3:f9:7c:21:7e:80:73:1f:a8:ba:
f3:04:1e:7a:56:56:b3:3a:02:c8:f3:6a:3f:cc:94:
6a:2e:2c:4d:7d:4e:b9:1d:3d:37:43:79:fe:b3:9c:
53:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:25:E0:45:87:A5:52:4A:A7:6C:77:12:0D:B3:DF:91:DF:BB:CB:DD
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YyXgRYelUkqnbHcSDbPfkd-7y90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.223.42.0/24
88.223.45.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:56:74:e6:1c:2f:43:c2:b6:a6:fd:90:fa:b9:94:21:3b:f4:
a9:8c:99:ec:14:5b:38:41:06:78:73:98:ae:0b:2b:4a:1e:33:
d0:06:19:03:54:61:11:eb:0b:67:53:88:6d:dd:08:48:b0:68:
7a:dc:07:50:3b:52:d7:50:09:bc:a4:17:f1:5c:ac:b1:f9:7a:
65:ec:03:d7:1c:a7:3b:44:3c:f4:12:a1:4c:9c:36:8a:35:fd:
9f:e2:2d:97:df:61:80:a8:ab:a4:6d:c5:06:b2:bd:ce:06:af:
f9:bc:ce:ac:9b:2a:00:6e:db:93:21:51:30:62:33:a8:3c:c2:
62:e7:11:13:0d:f3:74:20:cc:fd:64:2b:e9:be:71:45:2a:08:
a5:00:d8:90:f6:90:8c:9c:e0:a7:09:f5:b0:e9:d1:9a:27:10:
13:e2:4b:f0:3c:71:8b:d4:b6:8b:66:5d:f5:9e:3e:b9:ca:da:
42:3d:b5:83:b6:4f:ca:df:70:91:50:48:dd:a2:cf:bf:ec:7d:
33:8c:91:b2:71:11:b1:c9:4b:9e:71:05:60:be:b7:e6:62:1e:
89:bd:62:3a:f7:fd:e1:2b:06:80:22:54:9f:9a:d8:0f:78:f8:
4d:19:e3:3d:a9:37:4d:b0:a7:2d:73:e2:44:e1:de:32:84:5b:
c7:14:34:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 19:47:17 2026 by rpki-client