Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/YF43X1-q2B-Uj0oUuLYoZXyjNc4.roa
File: YF43X1-q2B-Uj0oUuLYoZXyjNc4.roa (raw, json)
Hash identifier: n2I5ucmpF7lWc83VwA13sO4NXWBvGl+URpKpUJ+cEw0=
Subject key identifier: 60:5E:37:5F:5F:AA:D8:1F:94:8F:4A:14:B8:B6:28:65:7C:A3:35:CE
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019EE9132C851D8EEC03E258850A9B4D2493
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/YF43X1-q2B-Uj0oUuLYoZXyjNc4.roa
Signing time: Sun 21 Jun 2026 07:26:48 +0000
ROA not before: Sun 21 Jun 2026 07:26:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23061
IP address blocks: 109.66.40.0/22 maxlen: 24
109.66.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e9:13:2c:85:1d:8e:ec:03:e2:58:85:0a:9b:4d:24:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jun 21 07:26:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=605e375f5faad81f948f4a14b8b628657ca335ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e0:eb:1c:49:36:a3:3f:ad:2d:ad:18:48:ba:
60:1d:c7:47:01:7d:6a:b5:f4:73:0a:0d:b1:d2:a9:
f3:f2:ad:ac:28:11:e1:87:4b:1e:72:ef:d7:24:df:
46:be:ab:b6:84:08:ed:57:ed:ee:f6:e3:6c:16:6d:
a9:56:aa:21:12:07:23:35:bf:06:cf:21:76:3f:49:
c5:68:d8:e6:79:40:09:b7:3c:57:19:8e:20:a8:36:
7d:39:d2:d6:0d:f8:6c:3b:0d:45:ba:2b:25:b1:1d:
f5:be:00:c0:44:1f:a3:63:7b:e0:90:d1:71:9f:26:
d6:02:b3:94:51:c2:d3:5c:6a:97:77:c1:d0:61:ec:
eb:3b:1f:98:0c:f8:4b:56:d5:1a:fc:a7:92:26:d6:
14:1a:7c:e1:62:b2:94:51:6b:60:ed:27:ba:23:c1:
c8:fa:13:84:e8:a8:ef:64:38:9b:48:a4:6d:79:17:
02:74:f3:66:c1:ed:f8:01:10:d3:c2:b3:ca:cc:f7:
1e:0a:2b:a0:16:a1:d0:a5:e9:38:6f:5e:77:b6:e9:
8d:9e:b1:10:d8:11:28:14:b6:f8:e4:20:c3:9d:44:
08:9f:cb:92:8b:a0:25:0c:ed:7b:4a:4a:ec:1b:34:
b6:6c:fb:22:f7:4b:86:de:5c:62:2e:ec:7a:d3:11:
d1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5E:37:5F:5F:AA:D8:1F:94:8F:4A:14:B8:B6:28:65:7C:A3:35:CE
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/YF43X1-q2B-Uj0oUuLYoZXyjNc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.40.0/22
109.66.200.0/22
Signature Algorithm: sha256WithRSAEncryption
38:2d:94:dd:87:2e:98:63:96:bb:b6:94:4a:02:d7:e6:0d:3f:
92:9d:6f:53:48:fa:19:8d:a8:66:7a:9b:12:fe:1f:fb:c8:ea:
d9:21:80:da:2c:9b:07:4d:51:1c:84:d6:e6:3f:32:a0:7b:6b:
61:ce:58:c0:28:29:19:19:f6:c0:ba:64:47:8c:d2:f9:b2:1e:
c5:a0:c4:5a:e8:9e:38:53:eb:c7:2e:e3:87:5b:86:31:96:c4:
1c:ef:2e:13:d8:68:ee:52:a3:7f:f5:13:1e:82:6f:4d:9b:58:
25:53:3b:3c:df:1f:28:39:94:a0:78:47:07:1e:e1:96:47:38:
3d:73:2d:a6:4d:07:47:f6:43:78:74:7c:84:d4:a9:a6:32:e5:
3d:cf:f9:c1:69:46:67:31:c7:21:6b:17:8d:ef:be:73:ef:dc:
5b:74:df:10:ad:63:e5:fa:72:20:0b:4e:70:19:ed:38:cc:61:
ab:8a:66:7a:ec:ae:e6:20:15:9e:b9:2e:e7:32:ca:0b:99:09:
cd:83:dd:f3:20:00:c0:d1:cf:d5:04:fa:c3:e3:22:c0:3b:f2:
4f:40:99:42:8b:41:28:d0:1b:e5:a6:1e:38:b7:d3:21:f8:e2:
3c:a5:21:33:d5:12:4c:a4:11:20:62:6e:b6:ef:d3:02:d9:d1:
8b:26:76:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:47 2026 by rpki-client