Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ya_RGxS9Cp3UduwLA9yI8Hmkb3M.roa
File: ya_RGxS9Cp3UduwLA9yI8Hmkb3M.roa (raw, json)
Hash identifier: FVTKWNTiULTA9qaBxMpPllHqPZrC6si+PixJ+/QYk70=
Subject key identifier: C9:AF:D1:1B:14:BD:0A:9D:D4:76:EC:0B:03:DC:88:F0:79:A4:6F:73
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F92042D13E8C8CEE551F20D355EE5DD5F
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ya_RGxS9Cp3UduwLA9yI8Hmkb3M.roa
Signing time: Fri 24 Jul 2026 02:46:14 +0000
ROA not before: Fri 24 Jul 2026 02:46:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62468
IP address blocks: 212.189.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:04:2d:13:e8:c8:ce:e5:51:f2:0d:35:5e:e5:dd:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 24 02:46:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c9afd11b14bd0a9dd476ec0b03dc88f079a46f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:21:1c:70:a0:e5:78:cc:08:cb:a1:5a:52:50:
fe:aa:93:ff:d5:e1:43:35:8c:35:77:e6:6b:bc:6e:
93:0e:d1:4e:4a:f2:b1:02:19:0a:b7:43:50:f4:c7:
b3:92:e4:49:74:ee:7c:76:d7:33:1e:37:6a:71:9b:
2d:c3:7c:7a:b4:ae:a8:b8:48:97:b7:77:85:37:15:
c3:c9:ef:f7:fe:5b:d9:50:2f:2e:82:8c:0c:47:99:
3e:09:0f:af:c9:47:61:55:65:24:39:d8:6e:3f:c3:
bf:6e:81:43:63:85:57:1f:35:9a:23:60:8f:01:aa:
ba:d2:e8:69:8d:a5:94:40:3a:8c:2b:ed:fa:52:15:
ce:7d:b1:3c:72:a6:49:55:80:03:00:18:36:e6:d9:
1e:d3:e8:fc:d9:43:40:63:48:9d:32:ac:8a:50:a1:
cb:6a:e2:57:b4:96:77:62:f9:66:42:e6:30:d3:dd:
de:16:7a:fd:11:c7:22:b2:50:4c:42:f4:4f:85:80:
ba:57:2f:f9:64:90:ee:87:fc:31:db:9f:30:d3:4e:
0c:e6:be:d3:da:c9:49:03:94:87:6e:19:ec:25:d0:
64:87:ec:64:c6:3a:cb:2e:e4:64:62:56:cb:b9:77:
59:c0:db:c6:89:bd:8b:2e:38:c9:d6:8d:28:5e:e0:
49:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AF:D1:1B:14:BD:0A:9D:D4:76:EC:0B:03:DC:88:F0:79:A4:6F:73
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/ya_RGxS9Cp3UduwLA9yI8Hmkb3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.189.31.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:dd:7c:aa:72:a0:ae:df:3e:66:ae:a7:d3:a8:cc:06:29:7d:
c3:b7:cf:db:d0:c0:66:d2:8a:4a:c2:13:b9:96:a4:6b:2a:7c:
0a:d7:b7:2b:47:72:18:a8:f1:a5:7e:62:c7:33:b7:89:5e:b3:
43:fa:bd:78:55:7f:63:0c:d7:95:44:6c:e9:c2:60:2b:97:41:
79:21:bc:a7:dd:ea:65:15:d3:8a:63:01:94:d3:30:47:26:95:
7d:0d:df:a5:82:e1:48:e6:14:08:1f:51:c9:4d:fa:33:cb:d4:
1e:02:31:06:1f:cb:b8:2f:6c:6c:d6:0a:bd:5c:f7:05:55:1b:
27:e6:2c:78:e9:39:d3:91:38:af:18:61:92:b2:82:e7:2a:ba:
b3:4b:c9:24:b8:28:e1:32:81:4f:53:2f:97:01:2b:2f:aa:76:
50:3a:3b:44:76:9a:30:b1:c6:05:24:c4:57:48:47:49:c7:8b:
0f:6b:3f:76:9b:97:84:cc:94:21:40:98:7e:ae:0e:bc:ae:59:
3e:f7:7e:c0:4b:09:35:19:7b:d6:1e:fb:11:0b:cd:5b:70:44:
52:58:74:c2:0f:9a:a7:71:43:f8:e4:71:d5:03:5a:02:73:80:
38:28:8e:c8:d6:3b:f0:55:ac:82:93:2d:6c:dc:a4:f2:eb:d1:
40:4a:c9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:37:18 2026 by rpki-client