Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/YiN9VhB99q-LJqhdU1EwTPOX7TM.roa
File: YiN9VhB99q-LJqhdU1EwTPOX7TM.roa (raw, json)
Hash identifier: M4EFhp1wSz79XkqjMb0YzYjBjs06feXL4Yp1d0Jbelk=
Subject key identifier: 62:23:7D:56:10:7D:F6:AF:8B:26:A8:5D:53:51:30:4C:F3:97:ED:33
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 019F1D660333BAF06D841754BA2326E1FBFC
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/YiN9VhB99q-LJqhdU1EwTPOX7TM.roa
Signing time: Wed 01 Jul 2026 11:17:32 +0000
ROA not before: Wed 01 Jul 2026 11:17:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9123
IP address blocks: 72.56.0.0/20 maxlen: 32
72.56.32.0/21 maxlen: 32
72.56.232.0/21 maxlen: 32
72.56.240.0/21 maxlen: 32
72.56.248.0/22 maxlen: 32
72.56.252.0/23 maxlen: 32
201.24.112.0/20 maxlen: 32
201.34.128.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:66:03:33:ba:f0:6d:84:17:54:ba:23:26:e1:fb:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: Jul 1 11:17:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62237d56107df6af8b26a85d5351304cf397ed33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ef:26:92:05:f5:13:b8:c5:68:8e:d7:9f:46:
18:7f:32:46:41:39:3b:ea:73:fa:00:96:12:cf:34:
e3:9a:77:1f:0d:c0:f8:28:2f:e3:b1:d5:e6:a2:3b:
c0:be:fb:41:86:86:2b:c4:4f:d1:f7:e8:7a:bf:03:
4f:d0:e1:f6:16:7b:c0:ee:f5:21:98:10:7a:74:84:
bc:8b:d2:e8:6a:67:c8:8e:66:f6:c4:c4:cc:ee:c8:
69:ab:dc:11:d6:98:20:56:3b:e3:fe:5b:c2:80:25:
09:57:8d:d9:f5:db:44:50:8e:68:47:cd:6a:39:d1:
e7:46:95:29:9b:6b:e2:f9:6b:10:e2:71:f2:1f:4f:
8d:a7:df:bc:87:17:76:8e:15:88:c4:b1:57:5b:82:
44:90:79:15:de:6f:a6:b6:37:76:10:59:93:94:6f:
c7:35:d3:e5:c4:37:08:17:2b:9e:f2:ce:e6:ed:f5:
01:fe:c5:84:83:e7:3a:84:48:18:ac:a3:4c:20:d9:
62:a8:69:ea:c8:14:bc:fc:f6:ef:9d:92:7a:b8:f0:
d9:80:85:2d:86:ff:0d:17:06:cf:f5:97:22:fc:98:
b2:50:3f:02:5d:13:d4:4e:3a:d7:2b:3a:2a:61:c7:
0c:50:eb:62:d4:84:7e:54:70:ab:64:33:8b:55:ab:
ea:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:23:7D:56:10:7D:F6:AF:8B:26:A8:5D:53:51:30:4C:F3:97:ED:33
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/YiN9VhB99q-LJqhdU1EwTPOX7TM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.56.0.0/20
72.56.32.0/21
72.56.232.0-72.56.253.255
201.24.112.0/20
201.34.128.0/20
Signature Algorithm: sha256WithRSAEncryption
d6:a3:7c:56:92:59:84:0e:6d:6a:41:30:9f:87:93:b1:53:8a:
a1:39:bb:80:03:1e:e2:78:ee:22:32:6a:c6:f8:96:f3:2c:ae:
3e:39:bf:64:21:d7:1d:41:f3:67:1f:90:7d:d2:b4:a2:a0:93:
ed:04:34:64:53:b9:64:91:c3:67:52:08:54:bf:e3:97:3c:31:
a4:65:0b:a7:d9:a2:bf:84:05:68:2d:f9:1b:54:11:cb:dd:46:
ea:a5:c5:24:08:b7:5e:dd:a0:b2:67:48:f7:f8:5a:a4:fb:1b:
00:2f:49:8d:ca:ab:34:80:ec:a8:91:e6:5d:0c:12:1c:a8:81:
ad:1c:f5:24:5f:50:bc:52:3f:83:eb:1b:eb:01:57:4f:ef:da:
ef:78:e5:ec:87:b5:f5:a5:d9:91:91:de:a2:f8:12:ef:04:cd:
78:9b:98:34:78:ff:f8:6b:22:77:1a:3a:a8:1b:8c:d6:5e:92:
5b:20:fa:44:a8:3b:46:dd:e6:b3:27:45:1a:ce:c6:f1:fb:9e:
9a:26:26:6e:82:d1:4c:40:e7:66:eb:3a:5b:61:ab:5f:3b:a1:
5c:87:01:d5:78:45:44:64:45:33:0d:17:6e:26:85:7f:55:57:
d5:28:c3:a9:52:1e:08:62:0b:de:9d:02:87:19:90:73:16:06:
4f:35:57:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:21 2026 by rpki-client