Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/YZ0HKfGlt6Z4GIogeqTE8MXzBY8.roa
File: YZ0HKfGlt6Z4GIogeqTE8MXzBY8.roa (raw, json)
Hash identifier: QUnPYKTai926Yr9Wx8U9JRg6/J6yDp/HzyhCl+e/QlY=
Subject key identifier: 61:9D:07:29:F1:A5:B7:A6:78:18:8A:20:7A:A4:C4:F0:C5:F3:05:8F
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F89E15A251C0C4DF2C9AF3C716B44179E
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/YZ0HKfGlt6Z4GIogeqTE8MXzBY8.roa
Signing time: Wed 22 Jul 2026 12:51:15 +0000
ROA not before: Wed 22 Jul 2026 12:51:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154132
IP address blocks: 77.67.15.0/24 maxlen: 24
195.162.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:e1:5a:25:1c:0c:4d:f2:c9:af:3c:71:6b:44:17:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 22 12:51:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=619d0729f1a5b7a678188a207aa4c4f0c5f3058f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ff:ce:ce:fb:e7:78:af:e3:5c:f7:a2:10:13:
19:ac:e1:d8:6c:3a:51:bd:4f:1f:6a:7e:34:df:11:
2f:34:41:df:dd:0e:50:bc:9b:77:20:d1:b7:28:c3:
7c:4d:9e:53:fe:47:3c:ef:8b:ce:81:99:68:4a:70:
8b:7c:dc:3d:9a:bb:05:04:36:01:d5:28:7e:76:c2:
4c:2b:fe:24:df:15:6d:b6:af:26:f8:2b:33:28:77:
85:9f:72:79:52:ee:5a:d0:ce:40:f6:e5:51:f1:37:
53:c2:fd:aa:3f:99:f7:98:84:d9:2d:5e:59:1d:da:
41:07:9c:ff:31:7e:03:9f:16:8c:9c:b7:73:9d:43:
c0:b3:56:f0:8a:c0:68:24:f0:83:4c:ac:02:94:17:
3d:0b:d2:8f:da:8e:5d:e6:9d:fd:db:b6:bb:3c:26:
6f:f7:c1:6a:5d:cc:80:20:5e:9c:9f:e1:8b:05:17:
69:aa:51:88:49:8c:e2:21:c2:94:7c:33:11:6f:38:
86:92:c5:3f:b7:36:bb:74:63:b4:03:d6:08:c2:c9:
58:c1:3b:5c:22:11:65:76:f8:f8:a0:cd:e9:52:ab:
47:69:31:a8:e6:7c:cf:6d:b6:7c:ba:67:c1:d3:4d:
1b:c4:37:cd:dd:eb:dc:db:de:4a:94:f8:22:e8:f4:
32:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9D:07:29:F1:A5:B7:A6:78:18:8A:20:7A:A4:C4:F0:C5:F3:05:8F
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/YZ0HKfGlt6Z4GIogeqTE8MXzBY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.15.0/24
195.162.248.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:91:59:43:83:c7:d8:3d:f4:1f:5f:7e:18:5c:2c:50:97:b8:
f2:b0:a4:ee:42:c5:c8:9f:bc:ce:42:23:22:97:bc:fc:af:6d:
c2:17:ff:ff:ca:34:11:17:4b:84:02:a3:3d:67:03:46:5f:fe:
e9:ce:f1:66:88:e3:84:4b:2f:e4:88:a6:a4:56:fa:98:b3:40:
92:f7:f4:4a:25:5f:39:20:e3:ef:56:38:1e:ad:a7:99:b2:e5:
5f:4d:8e:97:19:80:f9:1e:78:3b:00:91:fc:41:d5:cc:0b:96:
3a:03:1c:3b:69:39:29:08:a8:35:87:1b:41:47:27:dd:1a:13:
f1:7f:2b:1e:3c:92:af:7b:5a:31:87:31:8f:4f:6b:c5:4b:87:
86:41:e6:a4:25:c2:b9:2b:96:c5:67:86:f6:af:1f:9f:ff:aa:
8c:12:82:89:20:bd:21:2c:a6:62:1b:e2:6f:d3:2f:2b:44:19:
0d:bc:2b:e7:72:1f:1c:19:86:8d:61:96:d9:44:f4:58:fc:52:
8e:fa:ac:82:33:42:c8:09:25:71:59:fe:5b:48:64:09:03:4e:
b7:d7:cb:72:bb:1f:53:c3:bc:54:68:dd:c9:40:08:cb:73:9a:
5d:27:e3:76:13:1a:68:c5:2d:56:09:e3:13:95:2b:3e:9f:57:
af:be:ce:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:48:31 2026 by rpki-client