Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ykfKyRWK4Nt7IcA6CfQGrBnxmKM.roa
File: ykfKyRWK4Nt7IcA6CfQGrBnxmKM.roa (raw, json)
Hash identifier: fHbnOtC4WbqvqsULvp2mzQmtMQ4JYI3nqV/Rvum872Y=
Subject key identifier: CA:47:CA:C9:15:8A:E0:DB:7B:21:C0:3A:09:F4:06:AC:19:F1:98:A3
Certificate issuer: /CN=64d9fb3f2cafed594e068adedc78a97c8829c101
Certificate serial: 019CF56F7A6B045BA30E2E648183F205C0AD
Authority key identifier: 64:D9:FB:3F:2C:AF:ED:59:4E:06:8A:DE:DC:78:A9:7C:88:29:C1:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ykfKyRWK4Nt7IcA6CfQGrBnxmKM.roa
Signing time: Mon 16 Mar 2026 06:57:29 +0000
ROA not before: Mon 16 Mar 2026 06:57:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197704
IP address blocks: 5.63.188.0/23 maxlen: 23
193.200.190.0/24 maxlen: 24
195.242.138.0/24 maxlen: 24
195.242.139.0/24 maxlen: 24
217.114.34.0/24 maxlen: 24
2a0d:a040::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f5:6f:7a:6b:04:5b:a3:0e:2e:64:81:83:f2:05:c0:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d9fb3f2cafed594e068adedc78a97c8829c101
Validity
Not Before: Mar 16 06:57:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca47cac9158ae0db7b21c03a09f406ac19f198a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:11:9a:ea:44:be:9f:64:ee:16:1d:27:48:74:
b5:f6:f3:65:b9:fb:e1:11:ed:ed:71:1b:5f:03:0b:
33:b9:29:51:ea:99:59:c8:8f:b2:11:62:95:7f:f8:
cd:1f:9d:0c:c3:65:2e:a4:18:2b:0b:37:1d:53:3c:
c6:57:7e:1c:52:e5:dc:cc:13:9e:05:c8:0e:90:f8:
dd:3e:02:0d:80:e6:6c:0f:a3:c2:3a:37:22:f0:45:
4d:2f:83:56:2a:11:b9:a8:63:8f:13:22:fd:f4:4f:
bb:b7:b7:9a:b2:d6:aa:ff:55:1a:8d:74:6c:cd:1a:
7f:6f:93:e7:3f:73:65:bd:cd:6e:57:8a:a4:fc:53:
15:20:0f:ac:ff:22:bd:9f:51:6f:9e:c1:db:64:9b:
24:fc:23:03:1f:23:c5:42:9d:85:be:6a:e6:40:0a:
5d:f7:71:f6:3c:7d:0e:ff:d4:57:94:51:07:db:74:
e7:88:ee:47:b1:f5:99:cf:62:4f:cf:fe:0e:31:3d:
3f:68:00:78:4b:eb:f0:88:33:c1:5f:f7:6c:88:ed:
a3:91:fc:e6:a5:fc:23:0b:86:6e:f6:9a:fa:6f:71:
99:aa:35:7b:d1:dc:e3:f6:cf:4c:aa:a2:f3:10:af:
3e:3c:31:7a:02:7f:79:ce:4d:db:ae:88:79:7c:68:
77:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:47:CA:C9:15:8A:E0:DB:7B:21:C0:3A:09:F4:06:AC:19:F1:98:A3
X509v3 Authority Key Identifier:
keyid:64:D9:FB:3F:2C:AF:ED:59:4E:06:8A:DE:DC:78:A9:7C:88:29:C1:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNn7Pyyv7VlOBore3HipfIgpwQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ykfKyRWK4Nt7IcA6CfQGrBnxmKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/99a1da-20da-4a68-b326-2617a0ecbc14/1/ZNn7Pyyv7VlOBore3HipfIgpwQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.188.0/23
193.200.190.0/24
195.242.138.0/23
217.114.34.0/24
IPv6:
2a0d:a040::/29
Signature Algorithm: sha256WithRSAEncryption
b4:13:fd:76:6a:08:98:5c:3c:50:31:05:c0:8c:f5:62:b9:73:
2c:6f:80:77:69:08:00:39:f5:39:a5:2b:be:4c:d6:f3:50:16:
01:43:35:f2:d5:b9:3f:d6:cf:88:37:44:1c:f9:f1:fd:95:8a:
1e:07:b1:15:94:ff:56:9a:25:cb:fd:31:9b:96:0d:9e:84:cc:
a3:3c:e4:7a:c0:4e:51:44:25:c9:c4:65:80:06:2c:08:e8:18:
f7:6f:3a:9b:f0:d5:4b:60:b5:43:4d:8a:91:74:57:4c:0f:cd:
47:be:f3:b3:fa:2c:39:fb:38:ab:0c:fb:f8:b4:f0:c7:ea:62:
66:88:21:97:c3:cb:01:d4:70:c5:63:c7:24:2c:68:62:73:fe:
1d:b2:29:8c:5b:56:99:59:72:d2:f7:ac:c7:f1:87:29:cd:5a:
dd:97:52:8d:b1:84:15:3b:4e:f3:66:9c:bc:80:2b:ce:f2:ae:
30:b0:0d:93:8a:e3:56:4c:2e:78:19:db:4b:72:4b:1d:6e:92:
96:ec:7d:ab:e0:ee:ab:52:e7:17:ad:f7:14:a0:70:03:2f:cc:
3b:4b:55:d3:63:ab:9e:90:1c:d6:c3:bb:5f:ab:8a:83:a1:92:
d8:54:bc:95:9c:27:67:48:b0:6c:a2:a4:12:25:25:38:47:53:
41:63:8a:c7
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZz1b3prBFujDi5kgYPyBcCtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZDlmYjNmMmNhZmVkNTk0ZTA2OGFkZWRjNzhhOTdjODgy
OWMxMDEwHhcNMjYwMzE2MDY1NzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTQ3Y2FjOTE1OGFlMGRiN2IyMWMwM2EwOWY0MDZhYzE5ZjE5OGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hGa6kS+n2TuFh0nSHS19vNlufvh
Ee3tcRtfAwszuSlR6plZyI+yEWKVf/jNH50Mw2UupBgrCzcdUzzGV34cUuXczBOe
BcgOkPjdPgINgOZsD6PCOjci8EVNL4NWKhG5qGOPEyL99E+7t7eastaq/1UajXRs
zRp/b5PnP3Nlvc1uV4qk/FMVIA+s/yK9n1FvnsHbZJsk/CMDHyPFQp2FvmrmQApd
93H2PH0O/9RXlFEH23TniO5HsfWZz2JPz/4OMT0/aAB4S+vwiDPBX/dsiO2jkfzm
pfwjC4Zu9pr6b3GZqjV70dzj9s9MqqLzEK8+PDF6An95zk3broh5fGh3KwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFMpHyskViuDbeyHAOgn0BqwZ8ZijMB8GA1UdIwQY
MBaAFGTZ+z8sr+1ZTgaK3tx4qXyIKcEBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk5uN1B5eXY3VmxPQm9yZTNIaXBmSWdwd1FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy85OWExZGEtMjBkYS00YTY4LWIzMjYt
MjYxN2EwZWNiYzE0LzEveWtmS3lSV0s0TnQ3SWNBNkNmUUdyQm54bUtNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy85OWExZGEtMjBkYS00YTY4LWIzMjYtMjYxN2EwZWNiYzE0
LzEvWk5uN1B5eXY3VmxPQm9yZTNIaXBmSWdwd1FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQBBT+8AwQA
wci+AwQBw/KKAwQA2XIiMA0EAgACMAcDBQMqDaBAMA0GCSqGSIb3DQEBCwUAA4IB
AQC0E/12agiYXDxQMQXAjPViuXMsb4B3aQgAOfU5pSu+TNbzUBYBQzXy1bk/1s+I
N0Qc+fH9lYoeB7EVlP9WmiXL/TGblg2ehMyjPOR6wE5RRCXJxGWABiwI6Bj3bzqb
8NVLYLVDTYqRdFdMD81HvvOz+iw5+zirDPv4tPDH6mJmiCGXw8sB1HDFY8ckLGhi
c/4dsimMW1aZWXLS96zH8YcpzVrdl1KNsYQVO07zZpy8gCvO8q4wsA2TiuNWTC54
GdtLcksdbpKW7H2r4O6rUucXrfcUoHADL8w7S1XTY6uekBzWw7tfq4qDoZLYVLyV
nCdnSLBsoqQSJSU4R1NBY4rH
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:27:02 2026 by rpki-client