Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ytEA65rD5_Y4RHf6zYeaSyTDZzI.roa
File: ytEA65rD5_Y4RHf6zYeaSyTDZzI.roa (raw, json)
Hash identifier: DUZglD2Eemdl/nFsp9RozJnECdeXREQM1P9YxS9WP5c=
Subject key identifier: CA:D1:00:EB:9A:C3:E7:F6:38:44:77:FA:CD:87:9A:4B:24:C3:67:32
Certificate issuer: /CN=66d4ca7ecd13727eb4621dbcf85efc4ad70c7cb4
Certificate serial: 019F236916A2EACDB8BB6D79B1571E813350
Authority key identifier: 66:D4:CA:7E:CD:13:72:7E:B4:62:1D:BC:F8:5E:FC:4A:D7:0C:7C:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtTKfs0Tcn60Yh28-F78StcMfLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ytEA65rD5_Y4RHf6zYeaSyTDZzI.roa
Signing time: Thu 02 Jul 2026 15:18:37 +0000
ROA not before: Thu 02 Jul 2026 15:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9051
IP address blocks: 80.77.176.0/20 maxlen: 24
185.125.152.0/22 maxlen: 24
2a06:b880::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ZtTKfs0Tcn60Yh28-F78StcMfLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ZtTKfs0Tcn60Yh28-F78StcMfLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtTKfs0Tcn60Yh28-F78StcMfLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:16:a2:ea:cd:b8:bb:6d:79:b1:57:1e:81:33:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d4ca7ecd13727eb4621dbcf85efc4ad70c7cb4
Validity
Not Before: Jul 2 15:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cad100eb9ac3e7f6384477facd879a4b24c36732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:17:e9:94:58:98:55:6a:c4:37:a3:fb:3a:ed:
e0:8a:09:39:d3:6f:d0:37:80:7b:97:94:21:87:94:
46:6e:c0:78:f7:6e:e0:6a:90:43:7f:d0:28:37:2e:
86:0f:b4:ea:24:60:19:25:06:85:4e:d1:3a:b6:72:
aa:d2:03:80:6f:96:26:f5:b0:41:de:8c:32:37:82:
42:d8:b9:98:42:92:cb:3b:c4:6e:dd:25:92:d3:2b:
b3:ea:dc:7b:7e:a0:09:63:e2:e9:09:f2:6d:46:6d:
31:f8:eb:36:ee:4b:c4:a5:af:78:95:55:ea:9e:a9:
15:b5:a9:7f:d2:88:f2:a4:fe:8d:85:ab:ca:8a:d4:
0f:eb:c2:d9:97:a8:c4:2a:03:46:57:92:af:c1:55:
76:53:99:12:a1:ed:9d:0e:92:69:b3:b5:90:77:c0:
ba:55:ac:c2:3c:ee:15:35:c5:e8:8c:b0:87:4f:1c:
03:ea:f0:7d:05:d2:99:5e:0f:92:10:b0:c6:4b:1a:
6c:64:ab:db:19:96:cd:bf:67:18:c9:6a:ff:6e:c0:
c3:00:7c:68:3d:72:cb:17:43:5c:78:43:28:f0:33:
72:90:f1:b7:27:0e:ce:78:55:f9:4d:10:d8:6e:76:
d6:66:65:7b:da:f1:e2:2c:b6:61:52:fe:cc:42:e4:
54:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D1:00:EB:9A:C3:E7:F6:38:44:77:FA:CD:87:9A:4B:24:C3:67:32
X509v3 Authority Key Identifier:
keyid:66:D4:CA:7E:CD:13:72:7E:B4:62:1D:BC:F8:5E:FC:4A:D7:0C:7C:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtTKfs0Tcn60Yh28-F78StcMfLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ytEA65rD5_Y4RHf6zYeaSyTDZzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ZtTKfs0Tcn60Yh28-F78StcMfLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.77.176.0/20
185.125.152.0/22
IPv6:
2a06:b880::/29
Signature Algorithm: sha256WithRSAEncryption
3b:93:de:5b:d4:fe:fd:3b:c0:3b:f1:12:16:6e:06:40:d7:88:
9a:90:16:66:50:7f:44:f9:99:ae:4b:70:dd:ec:41:78:e6:f2:
ae:03:b2:8f:52:35:a3:6a:f6:c2:b6:c6:51:5b:75:a8:52:ba:
87:2f:5d:08:cf:71:09:e8:7b:d7:a9:ae:d7:d7:3e:fc:90:5c:
b8:8d:02:eb:64:9d:c1:15:72:e7:c1:5f:a0:bb:66:50:6e:33:
4a:3d:08:62:7a:97:15:b4:cd:f8:fb:4c:0a:1f:d8:c9:9f:ea:
dd:2b:6a:d4:ec:b8:74:96:6b:f4:cd:f8:58:49:20:85:b6:70:
1c:3e:19:9f:1f:8a:71:1d:8b:29:de:8a:2e:40:e8:35:be:bc:
42:32:32:e9:4d:fe:a6:8a:c0:84:fa:27:92:da:33:59:7d:b0:
90:34:c3:f5:08:d8:19:2e:08:f8:95:43:45:3f:ed:87:e7:39:
e6:28:62:83:24:36:3a:e0:d7:0f:2e:bd:25:3d:89:c5:42:76:
90:37:49:09:cc:0a:59:0c:90:5a:e0:92:c7:57:d7:8f:1a:ae:
3e:f9:ab:9d:79:3f:d2:6e:22:fa:36:e5:18:a5:80:50:0e:7e:
69:9e:6d:24:a7:29:c7:54:ab:78:72:a9:61:8d:a9:e6:b3:06:
67:f7:7e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:19:22 2026 by rpki-client