Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/YAe6av1IQX5FoLA2_JIjBhAIgMk.roa
File: YAe6av1IQX5FoLA2_JIjBhAIgMk.roa (raw, json)
Hash identifier: ThkHx60LVftccna25b9+M7mqoqOKfrX7xC9VLS13eM8=
Subject key identifier: 60:07:BA:6A:FD:48:41:7E:45:A0:B0:36:FC:92:23:06:10:08:80:C9
Certificate issuer: /CN=f057844a97539cf57f83cc974d58eed287efd9ab
Certificate serial: 019F23691DBBE6B0E3E5D7516D7ED79847EF
Authority key identifier: F0:57:84:4A:97:53:9C:F5:7F:83:CC:97:4D:58:EE:D2:87:EF:D9:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FeESpdTnPV_g8yXTVju0ofv2as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/YAe6av1IQX5FoLA2_JIjBhAIgMk.roa
Signing time: Thu 02 Jul 2026 15:18:39 +0000
ROA not before: Thu 02 Jul 2026 15:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35393
IP address blocks: 91.209.245.0/24 maxlen: 24
193.200.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/8FeESpdTnPV_g8yXTVju0ofv2as.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/8FeESpdTnPV_g8yXTVju0ofv2as.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FeESpdTnPV_g8yXTVju0ofv2as.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1d:bb:e6:b0:e3:e5:d7:51:6d:7e:d7:98:47:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f057844a97539cf57f83cc974d58eed287efd9ab
Validity
Not Before: Jul 2 15:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6007ba6afd48417e45a0b036fc922306100880c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d0:a9:2f:6f:94:63:6d:1e:6f:4b:bd:3d:80:
42:f2:8b:92:c9:40:36:10:36:51:94:5a:c5:ab:b7:
58:b7:5d:5b:e7:c8:5a:97:ee:41:fe:22:ee:8a:d5:
f3:d8:b8:2f:ab:b9:aa:88:77:df:87:75:5c:59:fc:
4e:d3:6d:12:2f:76:c6:3f:f9:5d:45:f1:b7:b0:f8:
ea:91:82:43:1e:d3:46:70:d5:af:56:ac:5e:14:f0:
37:ee:24:36:c9:a7:a4:80:b2:e4:f9:e4:96:60:b6:
7f:77:23:68:91:cb:2f:df:4d:10:0f:ab:f6:24:d0:
ca:09:ee:f1:8e:8c:21:99:81:3b:28:38:04:7b:1e:
55:04:81:e2:81:31:44:8e:da:4f:c7:9c:44:54:2f:
f1:65:c9:d1:16:1a:a6:cc:f0:6d:0c:67:99:8b:81:
09:36:e8:79:6c:f2:fd:60:7f:56:e0:e3:11:56:39:
cc:75:97:43:9b:d2:99:9a:13:ff:d5:81:c2:e0:dc:
43:a8:53:f6:a5:0b:6b:26:84:b4:81:f0:19:93:66:
a9:4e:55:26:61:20:4d:1c:c1:ea:c8:ee:40:4b:b7:
ce:5f:2e:09:e4:66:e4:ea:cb:7d:79:50:cd:97:d1:
7d:9c:be:e5:62:54:03:0f:5f:b7:92:8e:91:e6:d4:
56:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:07:BA:6A:FD:48:41:7E:45:A0:B0:36:FC:92:23:06:10:08:80:C9
X509v3 Authority Key Identifier:
keyid:F0:57:84:4A:97:53:9C:F5:7F:83:CC:97:4D:58:EE:D2:87:EF:D9:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FeESpdTnPV_g8yXTVju0ofv2as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/YAe6av1IQX5FoLA2_JIjBhAIgMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/8FeESpdTnPV_g8yXTVju0ofv2as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.245.0/24
193.200.171.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:c3:36:a8:cd:9b:84:56:b7:ff:4b:12:f5:a1:66:c5:8f:05:
e0:61:80:31:04:8b:72:09:43:5c:9b:00:84:41:dc:53:ce:73:
bd:19:02:64:30:ed:75:a5:bd:cb:2a:84:e6:68:f0:b0:ce:69:
2f:8f:83:e3:2a:7b:7a:ca:c2:7c:c8:9c:59:e4:d7:2d:eb:1b:
e2:4c:e6:53:54:6b:f9:16:17:86:15:e8:e3:92:b2:cd:f7:54:
99:6a:c7:0f:26:d2:bd:bf:1c:02:28:88:a9:7a:9b:5c:9a:52:
2d:fd:ff:fc:48:f6:8c:04:16:57:fe:89:8c:22:66:e5:8f:f5:
dd:80:19:ef:82:97:bd:2f:fd:43:0e:33:43:3f:59:18:ea:3a:
4d:ad:be:0a:00:38:9f:69:b9:48:65:1b:93:34:ba:0f:6f:94:
06:7d:83:b2:6f:98:10:40:1b:24:b6:05:71:15:aa:0d:a9:62:
65:1c:7c:fe:a1:9a:f9:b3:58:ee:a1:c0:e5:15:87:11:69:ea:
8f:5e:67:45:7f:43:87:7d:7a:cc:47:ce:7c:7d:7f:75:09:3f:
bd:3a:19:fb:bf:a7:62:c7:21:b5:44:3b:a3:db:5d:43:64:c7:
48:5f:42:4e:fa:68:ea:8d:34:23:41:eb:fd:8c:90:c3:e1:61:
32:76:85:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:10 2026 by rpki-client