Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/YGS2D62PzdF83yx0v0xKht_vbpk.roa
File: YGS2D62PzdF83yx0v0xKht_vbpk.roa (raw, json)
Hash identifier: t4/sq7CYnmYcb+1JP6t5JuRUHBT4HULdgiXWODB95qM=
Subject key identifier: 60:64:B6:0F:AD:8F:CD:D1:7C:DF:2C:74:BF:4C:4A:86:DF:EF:6E:99
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019D0608E1D5F2A4CBE87B26427FEF60A865
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/YGS2D62PzdF83yx0v0xKht_vbpk.roa
Signing time: Thu 19 Mar 2026 12:18:58 +0000
ROA not before: Thu 19 Mar 2026 12:18:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58232
IP address blocks: 188.253.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:08:e1:d5:f2:a4:cb:e8:7b:26:42:7f:ef:60:a8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Mar 19 12:18:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6064b60fad8fcdd17cdf2c74bf4c4a86dfef6e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:96:b3:c6:ea:4b:d4:92:0f:da:e5:b8:5e:92:
65:5a:22:eb:29:d0:8f:9e:03:af:c0:85:22:90:1d:
56:5f:e0:c7:e6:18:ac:5e:fd:66:83:06:93:87:db:
10:db:c7:b8:28:70:6a:c3:79:26:6d:a5:77:32:91:
3b:c8:af:75:bc:d6:ec:c4:54:a6:b2:cf:08:64:44:
59:9b:41:f0:33:bb:a0:06:69:75:d6:93:fe:2d:08:
5b:9d:c3:9c:96:a0:78:5f:23:3e:8b:ef:f4:4c:8b:
e8:ef:96:b3:5f:58:3a:9c:a0:0c:57:e3:df:72:79:
36:07:71:59:63:33:58:b5:91:57:b8:18:31:76:24:
90:6a:ba:81:e4:95:6a:ac:e8:28:00:fd:bd:4b:a2:
63:f4:74:c5:07:0d:4a:31:80:0f:ef:49:66:61:76:
f5:69:5c:f6:81:c1:24:be:68:8f:8a:c4:84:2b:4d:
7b:0b:46:d8:05:9f:5c:68:3f:dc:3e:f5:a8:1b:14:
66:60:0b:67:e4:b1:e0:2e:4d:aa:71:60:fb:6f:eb:
06:4d:f4:90:02:ed:ba:5f:6e:d5:d8:8a:1c:97:94:
f7:ac:15:45:78:99:b4:96:e1:ae:69:60:a1:38:f3:
92:bc:96:47:96:05:f3:c3:3b:61:74:d7:74:94:3b:
85:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:64:B6:0F:AD:8F:CD:D1:7C:DF:2C:74:BF:4C:4A:86:DF:EF:6E:99
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/YGS2D62PzdF83yx0v0xKht_vbpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.253.1.0/24
Signature Algorithm: sha256WithRSAEncryption
36:9f:c7:8d:c6:4f:e5:a5:80:e7:64:7d:0b:c7:56:65:1c:74:
38:8a:f1:a3:23:0c:ea:a8:a4:8e:b0:48:80:76:3e:c6:5a:17:
60:0e:e7:85:f5:53:c9:24:d3:68:31:3d:98:fa:68:bc:a8:d8:
a0:98:b3:b8:0a:54:17:6e:14:54:db:60:08:7f:33:f3:da:e3:
65:62:25:d0:3c:a7:9b:de:c4:ca:ee:94:7f:b8:88:ae:35:56:
09:e1:26:85:47:25:ce:23:b8:1d:92:ef:1f:2c:55:b0:9f:6e:
32:39:31:7b:07:6a:3f:4b:3f:56:ca:c6:3e:e5:0d:4b:a0:64:
0a:0f:8b:c7:7b:0c:53:8b:fc:67:f1:48:ef:56:e6:e5:b9:4e:
88:e7:c3:8e:99:92:83:32:00:50:83:d6:d6:1b:72:34:01:94:
51:72:bf:74:56:16:1e:a8:6a:37:6e:1f:be:c2:fb:31:87:f8:
9a:f0:6d:c5:b7:39:ee:0d:c1:75:9d:2e:28:64:e7:f4:a9:8c:
29:e7:c6:7d:39:7e:9c:ee:e1:96:d8:be:2d:1d:24:46:3c:60:
36:27:96:55:0c:84:bc:99:89:c9:a3:7f:5b:04:16:b8:6a:da:
8e:3c:29:bc:43:b1:3e:5e:4c:15:3b:6e:f5:cf:82:e8:d6:71:
55:42:8a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:31:19 2026 by rpki-client