Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/ypW2jXHds3OQNDOtytakXQfeN3U.roa
File: ypW2jXHds3OQNDOtytakXQfeN3U.roa (raw, json)
Hash identifier: 3y0hmFHNOEBseG0Kj7lMsA2Z/s0AvDW9E8oqh/oHGzM=
Subject key identifier: CA:95:B6:8D:71:DD:B3:73:90:34:33:AD:CA:D6:A4:5D:07:DE:37:75
Certificate issuer: /CN=be7029ce8cc9b787d94323e0ca0d14dd1e0043ec
Certificate serial: 019E92411DD46FDE0F43A9F1844D303D76F0
Authority key identifier: BE:70:29:CE:8C:C9:B7:87:D9:43:23:E0:CA:0D:14:DD:1E:00:43:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnApzozJt4fZQyPgyg0U3R4AQ-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/ypW2jXHds3OQNDOtytakXQfeN3U.roa
Signing time: Thu 04 Jun 2026 10:50:01 +0000
ROA not before: Thu 04 Jun 2026 10:50:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31699
IP address blocks: 217.173.82.0/24 maxlen: 24
217.173.83.0/24 maxlen: 24
217.173.90.0/24 maxlen: 24
217.173.91.0/24 maxlen: 24
217.173.94.0/24 maxlen: 24
217.173.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vnApzozJt4fZQyPgyg0U3R4AQ-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:41:1d:d4:6f:de:0f:43:a9:f1:84:4d:30:3d:76:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be7029ce8cc9b787d94323e0ca0d14dd1e0043ec
Validity
Not Before: Jun 4 10:50:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca95b68d71ddb373903433adcad6a45d07de3775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:75:cf:80:0d:5a:0f:79:9d:47:98:6a:51:0c:
26:4c:d8:c9:13:33:09:00:cf:e7:ae:20:7f:22:a2:
68:80:b8:99:f2:14:f2:a8:8b:f0:b3:80:c1:96:2a:
c9:05:db:f6:55:9d:aa:69:3b:07:fd:08:b8:d0:84:
71:0d:5f:ae:e1:0d:7a:53:ac:f3:c3:46:e2:58:0a:
59:a0:6c:3d:d5:83:88:cb:ff:af:d0:f2:8d:44:e5:
f2:19:5e:03:dc:b1:c6:c2:36:76:ef:36:1a:4a:65:
f3:e1:ba:85:e5:21:ce:b6:79:4d:ea:bc:80:33:23:
cc:62:0e:d2:31:8a:41:e7:10:ba:67:20:2c:f5:4c:
ff:d3:7b:52:33:fd:b8:e8:24:8d:34:ee:21:21:77:
b3:25:19:cf:37:40:ee:bb:51:db:10:50:08:ff:27:
32:ff:71:2a:d7:f8:16:6f:9f:40:5a:31:ac:a8:7c:
22:9f:39:74:80:44:88:ca:63:5b:88:35:9d:e8:07:
d3:40:58:e4:be:f5:88:70:85:6d:6c:6c:53:90:37:
c4:2e:25:4a:e0:1d:9f:0a:2d:e4:6d:95:56:66:dc:
31:62:fd:5b:03:29:31:bb:c0:01:84:01:99:a0:9d:
75:74:24:bf:78:44:ba:06:98:22:99:a2:3f:68:71:
e4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:95:B6:8D:71:DD:B3:73:90:34:33:AD:CA:D6:A4:5D:07:DE:37:75
X509v3 Authority Key Identifier:
keyid:BE:70:29:CE:8C:C9:B7:87:D9:43:23:E0:CA:0D:14:DD:1E:00:43:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnApzozJt4fZQyPgyg0U3R4AQ-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/ypW2jXHds3OQNDOtytakXQfeN3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.173.82.0/23
217.173.90.0/23
217.173.94.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:37:b5:f2:45:75:0b:65:f9:ab:18:57:26:0e:d2:13:1d:15:
ac:f6:f9:54:8e:52:d3:fe:3d:20:3b:17:4c:c6:c4:3f:ac:99:
71:9d:58:89:97:65:e7:25:67:4e:12:4f:a6:37:67:05:a9:29:
1b:52:18:ca:3e:58:87:38:80:5e:1c:ce:61:35:42:9d:bf:ac:
6f:73:b3:f2:a4:93:9b:06:1d:42:0a:ca:c4:88:e0:76:ea:c7:
83:9d:49:b0:c5:68:e1:85:ae:40:97:ab:ff:2c:a5:d5:51:03:
17:cf:dc:4b:13:70:b9:24:6e:fe:c7:1f:57:6a:ba:d5:7e:4e:
ad:de:65:e7:73:10:c0:d1:26:73:53:ba:56:ee:36:1c:86:6c:
87:bc:0a:19:84:19:47:cf:4c:5e:0f:cb:f0:7d:56:08:c5:75:
5f:03:48:32:7d:5b:c3:d0:96:62:c9:be:e9:d3:3c:8e:bc:9c:
1e:ca:31:0d:98:73:d4:06:b4:fe:90:c1:5f:1a:bb:39:94:96:
5e:f2:46:13:3c:42:31:be:61:69:24:9e:74:21:8e:4c:a0:00:
16:32:63:a1:cd:5d:13:b4:49:1a:18:f5:1f:df:39:43:89:ae:
69:1d:7e:a4:90:65:7a:aa:a4:bc:b1:1f:fc:b4:c3:58:c6:77:
cf:d9:14:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:15:23 2026 by rpki-client