Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/YlfVe0H7sy4fjXrxUUwYgsapanU.roa
File: YlfVe0H7sy4fjXrxUUwYgsapanU.roa (raw, json)
Hash identifier: JF8OnLfLb4NT2zx5kKBR3bL4kEc+jQVUFvoxRvcbz9w=
Subject key identifier: 62:57:D5:7B:41:FB:B3:2E:1F:8D:7A:F1:51:4C:18:82:C6:A9:6A:75
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019D2519C4806BE84CB3E38CEE9570994602
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/YlfVe0H7sy4fjXrxUUwYgsapanU.roa
Signing time: Wed 25 Mar 2026 13:05:38 +0000
ROA not before: Wed 25 Mar 2026 13:05:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212027
IP address blocks: 138.249.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:19:c4:80:6b:e8:4c:b3:e3:8c:ee:95:70:99:46:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Mar 25 13:05:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6257d57b41fbb32e1f8d7af1514c1882c6a96a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:62:ed:47:a8:42:84:dc:57:c7:1e:d0:08:3c:
a2:6c:69:66:8d:14:d1:e7:32:b0:68:4e:2b:49:21:
ce:6b:70:08:4c:90:14:60:88:c5:a1:e7:d2:6f:5f:
d7:b3:1f:b3:c0:02:16:e8:66:35:5e:45:7b:ef:c7:
eb:22:3d:86:60:f3:d7:8a:f7:4b:13:8c:dd:a3:51:
43:cf:da:21:9d:59:0c:43:f3:05:78:69:c7:25:14:
64:60:e2:4b:d9:3f:58:61:44:a7:4c:fd:ad:cd:c3:
72:eb:37:36:93:53:2c:81:a5:c0:c8:bb:47:35:0b:
81:ba:38:72:77:ae:6b:3f:fc:ab:57:d4:35:53:b7:
da:14:06:08:0c:10:7b:a1:0d:7d:a4:64:1d:87:8c:
81:20:46:ef:df:54:66:56:9a:3f:7f:b6:df:2a:47:
2a:61:50:a3:84:03:4d:b9:bb:68:1a:09:6e:4d:46:
f9:6c:2d:c8:c9:1d:63:c0:ec:b5:5c:40:29:88:32:
a2:52:81:53:f3:1c:95:af:1e:a3:00:da:7a:94:12:
70:d3:13:79:3a:f6:85:a1:bb:dd:b0:f6:b9:4a:2b:
0d:90:dc:21:d6:9f:ea:2d:5f:a4:54:50:a9:0e:13:
06:04:10:89:7c:32:0a:ea:08:dc:48:ef:eb:12:3b:
9f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:57:D5:7B:41:FB:B3:2E:1F:8D:7A:F1:51:4C:18:82:C6:A9:6A:75
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/YlfVe0H7sy4fjXrxUUwYgsapanU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.249.135.0/24
Signature Algorithm: sha256WithRSAEncryption
68:a4:0e:d9:54:3a:21:65:02:ca:10:2c:cd:0a:b1:7d:23:f0:
29:9a:c6:9a:ba:c5:b8:95:33:8e:0a:67:80:9e:47:44:84:a9:
ae:b2:ac:a4:b4:6b:4b:ca:1b:a0:35:b4:0a:05:75:5b:e6:0f:
b1:86:c3:08:1d:a0:af:44:4c:1f:e3:1f:93:48:5f:e3:45:4e:
00:10:fa:27:86:f2:87:6c:4a:ff:d3:c6:5e:25:c7:df:dc:d7:
aa:b1:f1:3d:94:a5:51:e8:34:3b:34:9f:5e:c9:62:2f:3f:66:
29:66:22:b4:17:ae:4c:fb:ec:8c:37:f6:e0:1c:49:05:b9:7b:
2b:15:5d:32:ef:1e:6e:c6:7d:05:40:9c:85:76:46:54:0f:f4:
e2:b1:0a:f6:51:ac:8c:c5:9e:b1:24:76:28:1f:00:8e:da:cf:
7e:85:42:0f:6b:4c:1d:cb:3d:1d:27:db:ec:08:da:1e:57:9b:
ca:41:d3:0d:28:f9:50:a8:0b:54:32:52:68:f5:a3:b8:08:87:
6a:9d:9f:28:a5:9b:03:d0:55:96:a7:2c:14:a9:69:80:15:d3:
cb:87:31:20:b1:b4:ea:16:e7:bc:8a:2b:3f:1c:1e:9f:0b:3f:
70:3c:a2:a5:63:06:7d:bb:92:9e:19:ba:60:23:79:17:14:54:
d9:92:5d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:18:46 2026 by rpki-client