Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/efaefb-d4f7-48f4-a34d-67f7a2fc406c/1/Yst5Qj-zvcPEq30_qzvGF3COwE0.roa
File: Yst5Qj-zvcPEq30_qzvGF3COwE0.roa (raw, json)
Hash identifier: Sh7bkfErjwAbJ1zwX6e1hPa7oSiv2lwYiU1nZ2j65uM=
Subject key identifier: 62:CB:79:42:3F:B3:BD:C3:C4:AB:7D:3F:AB:3B:C6:17:70:8E:C0:4D
Certificate issuer: /CN=5a50a69ac3b34df5f2d8b88c7b410432ec7773bb
Certificate serial: 019F4666B3E26B7F370A666D04D332F66030
Authority key identifier: 5A:50:A6:9A:C3:B3:4D:F5:F2:D8:B8:8C:7B:41:04:32:EC:77:73:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WlCmmsOzTfXy2LiMe0EEMux3c7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/efaefb-d4f7-48f4-a34d-67f7a2fc406c/1/Yst5Qj-zvcPEq30_qzvGF3COwE0.roa
Signing time: Thu 09 Jul 2026 10:22:43 +0000
ROA not before: Thu 09 Jul 2026 10:22:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219247
IP address blocks: 153.56.190.0/23 maxlen: 23
153.56.190.0/24 maxlen: 24
153.56.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/efaefb-d4f7-48f4-a34d-67f7a2fc406c/1/WlCmmsOzTfXy2LiMe0EEMux3c7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/efaefb-d4f7-48f4-a34d-67f7a2fc406c/1/WlCmmsOzTfXy2LiMe0EEMux3c7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WlCmmsOzTfXy2LiMe0EEMux3c7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:66:b3:e2:6b:7f:37:0a:66:6d:04:d3:32:f6:60:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a50a69ac3b34df5f2d8b88c7b410432ec7773bb
Validity
Not Before: Jul 9 10:22:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62cb79423fb3bdc3c4ab7d3fab3bc617708ec04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2e:08:97:ff:d0:6f:7d:d0:9f:39:5d:1f:c5:
18:07:47:2a:c5:f7:e5:1c:7a:d2:1d:a9:2b:6e:da:
14:3f:43:c7:a1:dc:1e:e5:25:66:96:7c:1d:21:0d:
19:dc:bc:bd:5c:1f:5e:cb:18:be:d2:d6:ad:21:dc:
12:3c:33:0a:11:7f:9b:d2:5f:bd:12:de:c9:61:e0:
e0:1a:71:46:2a:af:de:c2:d5:a6:d2:68:b9:97:cf:
6c:51:f0:60:ea:2b:34:f4:a3:a3:a0:db:93:5a:4d:
e5:93:43:fa:04:e4:26:55:a7:26:4a:2f:44:0f:f2:
03:ea:17:ef:ec:65:3c:53:32:0e:9b:5f:2c:98:6c:
da:f3:40:48:b7:dd:e7:2a:21:d1:f1:cc:99:b0:ef:
0f:42:f7:41:ab:06:8f:68:aa:90:fc:39:97:e1:6d:
68:f1:93:66:b2:5f:30:1f:60:3a:cd:60:56:0f:02:
c2:a2:5b:6b:d6:d6:28:0a:63:48:48:60:4e:a8:d0:
8e:51:81:cd:91:dd:45:ed:de:3c:d8:b7:a7:0d:ab:
4b:5b:94:b2:cc:a7:30:1d:a1:4a:b7:25:71:46:ab:
17:8c:5d:09:87:5f:07:bb:75:94:ad:31:9a:09:d2:
8e:78:76:02:ce:07:fc:f9:a5:1f:3d:9c:ba:e7:a4:
65:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CB:79:42:3F:B3:BD:C3:C4:AB:7D:3F:AB:3B:C6:17:70:8E:C0:4D
X509v3 Authority Key Identifier:
keyid:5A:50:A6:9A:C3:B3:4D:F5:F2:D8:B8:8C:7B:41:04:32:EC:77:73:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WlCmmsOzTfXy2LiMe0EEMux3c7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/efaefb-d4f7-48f4-a34d-67f7a2fc406c/1/Yst5Qj-zvcPEq30_qzvGF3COwE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/efaefb-d4f7-48f4-a34d-67f7a2fc406c/1/WlCmmsOzTfXy2LiMe0EEMux3c7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.56.190.0/23
Signature Algorithm: sha256WithRSAEncryption
93:58:aa:b1:ca:6d:28:24:0a:fb:bc:36:5a:8d:fd:0a:f4:ff:
cd:8b:b4:0e:21:ef:37:b3:4d:a5:84:f1:69:2a:16:52:6b:cd:
6f:11:3b:b4:6f:2e:e5:d5:1c:67:f9:53:5f:f7:ab:a2:fc:92:
4b:ae:96:4c:fe:a5:6b:72:c6:74:c9:8d:ba:f8:7a:a7:69:6e:
bc:4b:48:30:4f:d0:2f:a9:95:9d:c7:0a:b1:93:1e:cc:d0:de:
79:15:e6:ef:91:66:bd:7d:1c:67:dd:56:06:da:73:6d:83:dd:
27:4f:3e:c5:dc:65:76:23:68:e4:d4:50:bd:49:71:3e:4f:56:
a9:2e:2a:2a:51:f2:a2:a9:38:a2:cb:93:e7:e8:b4:5e:0c:34:
81:f7:4b:23:92:76:64:d3:2b:21:4e:51:2f:fe:c8:5b:82:5c:
74:38:3f:84:33:ed:0a:09:ea:80:9e:95:4d:e4:8a:5e:ad:f8:
62:af:0e:70:c8:2c:8c:29:07:b6:17:2b:70:11:75:55:84:ff:
fc:61:13:34:07:95:e6:09:89:2f:ec:08:35:02:10:25:68:57:
1f:03:84:8b:2d:ae:ab:ec:78:50:48:95:52:6a:4b:07:e7:1b:
19:ea:44:69:68:1e:cb:e9:fb:df:b1:71:21:e7:8b:d8:2f:63:
50:88:88:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:56:52 2026 by rpki-client