Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/YnRIz2LAVm6T1ngHwYknchOMZ5g.roa
File: YnRIz2LAVm6T1ngHwYknchOMZ5g.roa (raw, json)
Hash identifier: O08Dnht2tycilQ0sCxxQOH4+isy3TkZ0CpI/HxIUNRM=
Subject key identifier: 62:74:48:CF:62:C0:56:6E:93:D6:78:07:C1:89:27:72:13:8C:67:98
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 019CB3846FDF752381E9C07893B1AF776236
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/YnRIz2LAVm6T1ngHwYknchOMZ5g.roa
Signing time: Tue 03 Mar 2026 11:45:26 +0000
ROA not before: Tue 03 Mar 2026 11:45:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35473
IP address blocks: 195.200.216.0/24 maxlen: 24
213.87.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b3:84:6f:df:75:23:81:e9:c0:78:93:b1:af:77:62:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Mar 3 11:45:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=627448cf62c0566e93d67807c1892772138c6798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:48:79:2e:44:79:82:77:c0:60:b0:65:59:ea:
cb:a9:b7:50:30:57:e1:77:63:74:6e:d6:24:95:b5:
45:90:c7:01:03:e5:39:2e:75:c8:4b:05:7b:26:89:
ef:3d:65:d4:ef:02:3b:d8:48:f4:32:08:65:4e:f1:
c5:27:6d:43:c7:4f:f4:6e:0e:7b:de:a2:19:a9:a4:
ab:5f:88:60:56:69:f9:83:d1:15:f5:09:63:2e:9c:
ae:e8:94:df:65:ea:b6:f3:9c:58:32:0d:27:ed:71:
d7:a6:2f:bb:d0:3a:20:c1:9f:23:2d:9b:fe:5a:68:
82:4d:70:13:93:8e:e2:6f:97:d6:df:f9:27:90:c2:
f9:8b:57:d7:fa:fe:d3:61:d5:bf:4a:a1:9b:46:19:
bd:e4:0f:c6:ba:4a:de:3b:7f:81:6e:b7:eb:43:96:
af:61:e4:86:02:51:91:62:80:87:c1:38:68:9a:34:
3c:9c:58:f0:b4:e3:bf:bc:10:18:7c:64:b1:06:54:
ba:82:47:3d:d0:0f:a1:a5:f6:16:3b:6e:92:9b:67:
8d:8b:cf:4e:88:b1:90:e7:a3:1d:7a:25:72:9c:3d:
18:18:f8:b4:1b:df:ee:a9:11:4c:96:d0:ac:d6:b9:
a3:88:92:81:28:75:9c:d5:76:43:5b:aa:b7:48:17:
b8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:74:48:CF:62:C0:56:6E:93:D6:78:07:C1:89:27:72:13:8C:67:98
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/YnRIz2LAVm6T1ngHwYknchOMZ5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.200.216.0/24
213.87.72.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:5c:f2:2e:aa:10:ea:7a:c4:3d:76:e5:67:aa:47:f4:03:47:
5b:8a:f0:95:6b:02:00:0e:70:35:b2:2a:e5:2c:3b:61:47:4a:
d5:59:6e:7a:50:f4:c5:68:ff:46:57:80:be:38:b1:1d:86:82:
fe:d9:1a:f9:09:2d:c5:5e:0f:a5:25:76:13:69:73:80:ff:02:
58:e7:06:61:06:bb:b8:e3:e4:1d:f8:49:7a:16:32:2c:dc:1e:
35:d0:33:7a:17:24:5d:7b:b3:d8:0a:45:cd:55:c4:06:49:5b:
92:f0:3a:3c:b5:a8:59:b7:dd:90:f0:72:f5:52:f5:3b:40:da:
24:d2:66:d9:91:3f:f7:7d:39:d4:f9:2d:83:8c:5c:56:74:83:
a9:da:25:06:24:2d:4f:54:b9:92:7a:e1:ee:07:26:f4:fe:ef:
61:f6:f3:8b:b3:e3:31:6b:da:31:a5:66:ef:f4:a4:14:58:9c:
6a:f6:8e:38:94:1d:ce:39:06:0e:cb:94:8d:85:a9:98:ea:b0:
ae:50:a2:f1:b2:32:2f:78:c4:92:42:44:c7:dd:fd:5e:98:03:
97:79:ef:84:c5:0c:f7:0d:1e:31:f9:a2:bc:14:bb:b9:99:d9:
27:35:e9:3e:b3:cf:37:37:92:40:bd:76:21:93:a2:33:37:a2:
25:5a:39:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:09:34 2026 by rpki-client