Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/yvqKASYvxT3MxhtOS5-emaUxBc8.roa
File: yvqKASYvxT3MxhtOS5-emaUxBc8.roa (raw, json)
Hash identifier: tVq+tnubXS3rvDyuKQj8/nMobzt5kNaE/XUuamGgdBQ=
Subject key identifier: CA:FA:8A:01:26:2F:C5:3D:CC:C6:1B:4E:4B:9F:9E:99:A5:31:05:CF
Certificate issuer: /CN=602ccc74b4fd14da17bd6b69ba9e19c24897f33d
Certificate serial: 019F23691DDBDFEDF55A384973301C8A9D2E
Authority key identifier: 60:2C:CC:74:B4:FD:14:DA:17:BD:6B:69:BA:9E:19:C2:48:97:F3:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCzMdLT9FNoXvWtpup4ZwkiX8z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/yvqKASYvxT3MxhtOS5-emaUxBc8.roa
Signing time: Thu 02 Jul 2026 15:18:39 +0000
ROA not before: Thu 02 Jul 2026 15:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47866
IP address blocks: 185.85.244.0/22 maxlen: 22
185.85.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/YCzMdLT9FNoXvWtpup4ZwkiX8z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/YCzMdLT9FNoXvWtpup4ZwkiX8z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCzMdLT9FNoXvWtpup4ZwkiX8z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1d:db:df:ed:f5:5a:38:49:73:30:1c:8a:9d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602ccc74b4fd14da17bd6b69ba9e19c24897f33d
Validity
Not Before: Jul 2 15:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cafa8a01262fc53dccc61b4e4b9f9e99a53105cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c5:d7:1c:71:02:5c:4d:c1:79:25:9e:5d:40:
85:bd:82:50:2e:f3:c3:71:ce:61:96:45:f1:9a:da:
a3:c4:30:8c:7a:59:1a:28:de:fa:ac:6d:fa:9a:27:
44:12:e8:19:85:0e:13:14:79:4c:6a:08:d7:79:bc:
43:a3:08:17:50:43:46:a1:5b:0b:ed:90:f2:12:32:
af:25:b3:08:aa:03:2f:e2:79:a0:7b:c8:d9:25:d2:
47:91:c8:4e:5f:96:89:99:83:24:00:39:69:76:89:
ab:0a:b1:3c:ae:a0:52:2c:20:7a:31:80:ca:f6:a7:
e5:37:89:24:19:a5:f4:c2:9b:44:3f:43:d8:70:6e:
bb:15:9f:53:68:a8:08:07:4b:84:e5:77:ce:a1:8d:
bf:15:75:51:b6:de:39:7a:ef:6b:80:af:b1:1e:41:
89:4e:df:b1:67:1d:da:8e:62:3e:b0:39:88:3f:64:
70:8b:93:5b:f1:3d:98:93:3d:e3:d6:c0:40:8c:94:
15:5a:a9:23:ed:d1:2c:2f:79:aa:ee:0f:b9:ab:25:
48:2a:22:95:38:c0:f8:a6:07:ae:70:e9:73:9c:02:
1f:c5:87:94:84:96:d6:1f:c2:c9:06:22:2a:27:ed:
87:86:79:dd:93:79:9d:e6:0f:f2:31:d4:2a:88:e7:
8f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FA:8A:01:26:2F:C5:3D:CC:C6:1B:4E:4B:9F:9E:99:A5:31:05:CF
X509v3 Authority Key Identifier:
keyid:60:2C:CC:74:B4:FD:14:DA:17:BD:6B:69:BA:9E:19:C2:48:97:F3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCzMdLT9FNoXvWtpup4ZwkiX8z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/yvqKASYvxT3MxhtOS5-emaUxBc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/YCzMdLT9FNoXvWtpup4ZwkiX8z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.244.0/22
Signature Algorithm: sha256WithRSAEncryption
77:a0:4f:6a:6a:0f:d2:af:73:04:40:a1:bd:e0:ed:31:31:f5:
3f:ba:ee:52:37:96:29:21:f6:3e:26:c8:8b:5f:15:d5:1a:57:
5a:64:03:72:9a:90:02:e0:ca:95:e9:77:3d:0f:dc:70:8a:9f:
74:b4:26:ad:e1:20:ba:f5:31:70:4c:a4:04:d3:0c:9d:d3:3e:
aa:05:97:cc:90:77:17:31:a6:ff:5a:07:3a:38:20:44:22:51:
f1:41:4d:e0:ae:b4:09:a3:47:37:3e:01:86:fe:db:35:45:26:
5b:69:e5:44:97:3b:c5:b4:41:b6:dd:d4:fa:9c:54:4b:80:dd:
f5:2c:10:eb:ab:3e:7c:e0:8f:08:85:78:24:26:84:3a:0f:e9:
7f:a1:51:66:04:af:44:6e:1a:d1:7f:b4:05:7a:06:9c:d4:e7:
88:7f:5f:40:55:4b:50:44:03:d6:7a:b5:61:5b:8e:0c:e0:3a:
3e:70:50:9a:90:85:9a:10:6a:0c:6d:5f:16:19:51:1e:b5:91:
89:1f:f3:c2:00:c2:2d:0a:5d:40:9a:73:16:c8:a9:b7:88:9b:
a8:7b:6a:18:48:f7:54:20:c0:9a:9a:4a:be:33:6a:b8:91:4e:
21:12:b8:fc:5a:c2:1d:2c:01:de:1f:5e:d8:d7:df:e6:ab:3f:
b0:1a:62:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:58:24 2026 by rpki-client