Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/YbDK1kvvrk8Ho1IdJerxyMGANJQ.roa
File: YbDK1kvvrk8Ho1IdJerxyMGANJQ.roa (raw, json)
Hash identifier: m/hv4iobL1Tq4Hnl7IKJyfEevy78U6kNT70maANZhgM=
Subject key identifier: 61:B0:CA:D6:4B:EF:AE:4F:07:A3:52:1D:25:EA:F1:C8:C1:80:34:94
Certificate issuer: /CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
Certificate serial: 019DB9AC3FC6A72D0DD76AB356ED8EC1576F
Authority key identifier: F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/YbDK1kvvrk8Ho1IdJerxyMGANJQ.roa
Signing time: Thu 23 Apr 2026 09:29:26 +0000
ROA not before: Thu 23 Apr 2026 09:29:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198739
IP address blocks: 94.142.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b9:ac:3f:c6:a7:2d:0d:d7:6a:b3:56:ed:8e:c1:57:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
Validity
Not Before: Apr 23 09:29:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61b0cad64befae4f07a3521d25eaf1c8c1803494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:36:0f:a7:88:38:5f:f8:3e:83:82:92:70:79:
ad:b2:70:81:75:69:18:6b:a0:af:5c:28:dc:f3:ef:
86:5a:ab:d4:14:e2:1a:7e:21:0e:0d:c0:b6:61:bb:
a7:cb:e5:40:a7:6b:e7:f8:5a:bc:b3:6e:30:db:e3:
62:39:d4:5d:02:17:36:e2:55:d6:d4:4b:0a:5f:fa:
df:f4:1d:b5:1d:7b:0f:bd:14:3e:65:77:d6:57:96:
6a:f0:14:ff:56:e8:65:17:ba:05:e3:a7:f7:e9:56:
b2:91:ce:b8:71:13:b8:cb:89:a4:82:9e:4e:99:b8:
f5:9a:bf:5c:f4:81:a8:03:d5:0a:7a:a7:31:79:09:
1f:fb:14:2c:67:86:2e:03:4b:d8:59:44:1e:ea:e9:
73:ce:32:aa:d8:c3:bb:ba:bd:d2:3e:12:d7:3c:a3:
df:35:9f:4a:05:6a:ba:54:69:d4:00:40:d1:88:07:
2b:0b:ae:00:b9:4b:1c:2e:5d:e8:b8:0f:24:44:76:
64:56:3c:33:dc:82:2f:cd:c9:10:7f:ee:95:c8:e5:
17:e9:27:7f:6d:29:1e:f9:27:06:54:fa:73:fe:30:
50:49:51:84:a9:a6:e6:86:51:0f:09:ea:59:b7:71:
22:e6:fa:a0:2e:3f:6a:17:99:53:c6:c2:4d:10:09:
7b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B0:CA:D6:4B:EF:AE:4F:07:A3:52:1D:25:EA:F1:C8:C1:80:34:94
X509v3 Authority Key Identifier:
keyid:F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/YbDK1kvvrk8Ho1IdJerxyMGANJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.142.229.0/24
Signature Algorithm: sha256WithRSAEncryption
08:b0:0d:7b:55:36:2b:31:75:80:56:f3:11:88:84:ba:a3:06:
ae:5e:dc:64:f7:14:49:b1:53:2f:e1:a4:96:f4:67:a0:c0:fe:
ab:a1:b6:75:e9:49:9d:93:a5:70:51:2a:12:48:40:01:35:6e:
55:84:7a:15:26:60:15:78:39:34:f2:08:98:77:83:77:28:23:
48:67:86:02:06:88:4d:83:2e:62:b8:7c:9d:1e:a7:a3:0c:d0:
98:cb:66:0e:12:16:2f:d5:52:f0:64:a8:e6:fd:0c:30:96:da:
25:e0:61:36:af:3a:4e:8e:76:eb:d4:fa:21:71:13:ff:af:73:
4b:4d:a6:a5:9d:16:8f:f3:1c:81:f5:b2:c8:48:b6:e9:c5:8f:
a8:70:19:5c:6f:4d:16:89:bb:02:ce:0f:e8:4d:af:34:b6:f2:
5c:37:01:48:6c:68:4b:c4:4d:8c:7f:94:8f:7e:f9:58:d3:f7:
11:09:eb:7b:2d:e4:44:e3:61:cc:a4:73:b3:d3:03:49:e2:f8:
fb:5d:31:4a:29:76:26:5a:94:22:61:2e:6b:6b:8c:ab:b8:6e:
c2:73:d4:d5:b9:58:c4:74:5b:86:f0:ec:4e:bc:3f:bb:68:96:
f9:c3:93:81:10:72:12:95:fa:19:28:1e:76:9b:63:18:49:ad:
0a:da:d7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:13 2026 by rpki-client