Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/yTGI4erf7Dl7EbK7oGEb17Y5-GY.roa
File: yTGI4erf7Dl7EbK7oGEb17Y5-GY.roa (raw, json)
Hash identifier: /iQgxkIl0AqC8dxXMjkghZQPdu0f7ys0BKAO40PE57w=
Subject key identifier: C9:31:88:E1:EA:DF:EC:39:7B:11:B2:BB:A0:61:1B:D7:B6:39:F8:66
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F89110080325ECF77A7297EDDDE3047DB
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/yTGI4erf7Dl7EbK7oGEb17Y5-GY.roa
Signing time: Wed 22 Jul 2026 09:03:40 +0000
ROA not before: Wed 22 Jul 2026 09:03:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 10753
IP address blocks: 62.192.120.0/23 maxlen: 23
62.192.122.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:11:00:80:32:5e:cf:77:a7:29:7e:dd:de:30:47:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 22 09:03:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c93188e1eadfec397b11b2bba0611bd7b639f866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0e:be:6b:f4:13:93:43:40:75:3c:16:43:c7:
76:e6:69:69:a7:d9:ce:69:09:1d:b4:37:b4:7d:74:
8b:20:57:85:96:02:83:36:f4:7f:b2:cf:35:4f:bd:
aa:1a:e9:68:15:de:b2:8f:59:6b:cd:5c:ad:0d:d5:
09:1c:d1:ee:cf:06:b4:7d:ff:0d:9f:69:9a:33:ed:
c4:63:07:a9:6a:ef:ee:8d:ee:9d:84:95:b6:1e:30:
2d:40:88:d9:fb:57:b3:9d:c4:da:7c:cb:3b:23:e3:
32:51:b1:a4:55:39:ea:b8:dd:b4:94:5e:54:56:2a:
e9:85:61:3b:51:b5:8c:60:a6:da:40:f8:40:97:5f:
78:0b:05:de:9b:fb:01:4d:21:22:08:16:12:14:f0:
ca:f7:f4:dd:7a:06:a0:3a:8b:15:c8:44:5e:b1:88:
70:1a:14:c0:40:2b:7e:3c:4e:34:60:d9:92:3b:9c:
f1:ed:fa:7f:27:6c:59:bb:1b:2e:9c:21:40:66:3c:
b9:8b:a1:f2:1b:d9:c0:86:bc:92:9c:fc:21:04:d5:
f2:0c:c3:e3:cb:9f:1b:7e:c3:a2:f4:59:3b:42:01:
bf:ac:1a:9c:c7:ff:49:7d:c3:b6:0f:c5:f7:68:11:
9f:ec:9a:03:e8:01:f8:30:ce:51:47:85:86:aa:0a:
db:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:31:88:E1:EA:DF:EC:39:7B:11:B2:BB:A0:61:1B:D7:B6:39:F8:66
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/yTGI4erf7Dl7EbK7oGEb17Y5-GY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.120.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:64:1d:5a:d1:cb:20:95:6e:5d:d6:14:e9:ba:10:0a:b5:14:
75:e4:44:c9:44:a2:34:7f:41:ec:91:10:cc:5e:c0:dc:9d:b0:
31:3f:3e:3e:50:71:fe:51:66:8c:ef:79:f7:ae:d3:a4:71:9a:
1d:ab:f8:b1:d0:5f:3a:f4:78:1f:86:c4:84:46:69:dc:40:d9:
df:bd:e7:b7:23:7d:96:3e:5e:38:98:93:70:0b:b7:dc:ad:56:
65:9f:24:e8:e3:0e:08:2d:e9:8a:64:2a:57:3b:75:aa:ea:bf:
2a:a8:9b:36:8d:99:9c:69:0a:a3:32:fa:ee:96:d0:7e:7d:8b:
c4:a9:05:80:aa:a9:a5:10:dd:2f:84:6f:4c:19:71:7a:ed:d7:
d2:99:a0:70:10:b3:1a:ad:3b:f3:a7:47:99:9d:5f:27:4c:9a:
1e:2b:51:f0:e6:31:e4:6c:fb:7d:41:7d:f5:33:d6:50:bf:19:
51:e6:89:25:3a:3c:0b:f3:70:5d:47:82:38:04:ff:6d:ba:cc:
f0:7b:ea:36:c8:05:34:44:4d:ce:02:ed:ed:f2:33:0e:25:6a:
b1:2f:1c:fa:77:3f:42:0f:ab:8f:42:97:c8:c5:17:fb:b8:98:
ff:e4:eb:ca:d4:1b:da:10:b7:9d:32:e8:ed:f7:ca:28:38:e1:
2e:65:9c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:48:27 2026 by rpki-client