Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/yogiE4AfqTgfcPCCtr-U5LumWGA.roa
File: yogiE4AfqTgfcPCCtr-U5LumWGA.roa (raw, json)
Hash identifier: 7sG8K1mqCmAxwFkd6xn5cCRRc3Cm5vOY2e233XKrBN8=
Subject key identifier: CA:88:22:13:80:1F:A9:38:1F:70:F0:82:B6:BF:94:E4:BB:A6:58:60
Certificate issuer: /CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6
Certificate serial: 019DB57B40820FAF0154EA9DD078BED6DE27
Authority key identifier: 4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/yogiE4AfqTgfcPCCtr-U5LumWGA.roa
Signing time: Wed 22 Apr 2026 13:57:26 +0000
ROA not before: Wed 22 Apr 2026 13:57:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19905
IP address blocks: 163.62.72.0/21 maxlen: 24
163.62.80.0/22 maxlen: 22
163.62.92.0/22 maxlen: 22
163.62.96.0/21 maxlen: 21
163.62.112.0/22 maxlen: 22
163.62.116.0/24 maxlen: 24
163.62.118.0/23 maxlen: 23
163.62.120.0/21 maxlen: 21
163.62.128.0/23 maxlen: 23
163.62.132.0/22 maxlen: 22
163.62.240.0/20 maxlen: 20
163.114.20.0/22 maxlen: 22
163.116.0.0/21 maxlen: 21
163.116.8.0/22 maxlen: 22
192.54.192.0/23 maxlen: 23
192.196.12.0/23 maxlen: 23
192.196.36.0/22 maxlen: 22
192.196.40.0/22 maxlen: 22
192.196.70.0/23 maxlen: 23
192.196.72.0/23 maxlen: 23
192.196.90.0/23 maxlen: 23
192.196.92.0/23 maxlen: 23
192.196.98.0/23 maxlen: 23
192.196.114.0/23 maxlen: 23
192.196.118.0/23 maxlen: 23
192.196.120.0/22 maxlen: 22
192.196.124.0/23 maxlen: 23
192.196.140.0/22 maxlen: 22
192.196.140.0/24 maxlen: 24
192.196.148.0/23 maxlen: 23
2a00:7e40::/36 maxlen: 36
2a00:7e40:7000::/64 maxlen: 64
2a00:7e40:9ac1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b5:7b:40:82:0f:af:01:54:ea:9d:d0:78:be:d6:de:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6
Validity
Not Before: Apr 22 13:57:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca882213801fa9381f70f082b6bf94e4bba65860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:06:ac:61:f0:9a:7c:d0:c4:5d:ca:fb:65:be:
12:20:46:33:2e:45:8c:5b:fc:c0:71:7a:ac:f7:9e:
f2:11:c3:40:02:69:e1:45:c6:cc:7e:9b:45:27:02:
05:9e:a3:13:87:62:f4:f3:54:b5:bd:4e:a3:cc:51:
ff:4a:5e:94:09:2a:14:38:05:e6:67:ea:e0:e5:2d:
9f:d2:4a:bc:9f:be:d6:71:70:42:ba:4f:30:c7:b3:
83:21:40:16:01:bf:b8:93:1f:e9:d1:c8:d8:8d:79:
81:62:e7:e0:a5:3d:6f:ee:88:43:f0:f4:8e:2e:19:
56:ef:f1:2d:ff:68:1c:8a:aa:9e:66:09:ca:6d:98:
1e:7d:c8:5d:b5:4f:d6:a2:c7:46:ca:29:43:2b:18:
bc:98:e6:f7:04:d5:57:31:71:d8:78:f5:b5:e1:87:
5c:38:50:f0:b2:d4:46:1f:3a:49:af:f1:10:c1:6c:
ff:d6:9b:c1:ca:74:04:58:67:1e:de:b0:63:2f:3c:
90:3a:1d:d5:ee:00:af:f2:64:cf:dd:56:ec:f6:9f:
eb:da:6a:37:e3:8a:8a:bc:8b:7e:d0:99:e7:2b:5f:
8e:f5:0e:a3:c4:f9:68:5e:ce:74:ed:05:24:b9:69:
cf:74:67:8c:d0:7c:ba:32:97:bd:8e:fa:c1:3f:3a:
7b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:88:22:13:80:1F:A9:38:1F:70:F0:82:B6:BF:94:E4:BB:A6:58:60
X509v3 Authority Key Identifier:
keyid:4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/yogiE4AfqTgfcPCCtr-U5LumWGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.62.72.0-163.62.83.255
163.62.92.0-163.62.103.255
163.62.112.0-163.62.116.255
163.62.118.0-163.62.129.255
163.62.132.0/22
163.62.240.0/20
163.114.20.0/22
163.116.0.0-163.116.11.255
192.54.192.0/23
192.196.12.0/23
192.196.36.0-192.196.43.255
192.196.70.0-192.196.73.255
192.196.90.0-192.196.93.255
192.196.98.0/23
192.196.114.0/23
192.196.118.0-192.196.125.255
192.196.140.0/22
192.196.148.0/23
IPv6:
2a00:7e40::/36
2a00:7e40:7000::/64
2a00:7e40:9ac1::/48
Signature Algorithm: sha256WithRSAEncryption
2b:31:2a:4c:b4:e3:54:bc:8f:7d:f9:3e:5c:25:27:6a:3d:0c:
9e:ff:2e:85:0d:5d:5b:7c:3e:50:71:3b:f4:43:ed:62:cd:39:
25:e9:4c:42:a2:d0:bd:20:10:ec:04:1c:61:e3:1b:b9:55:10:
82:02:62:90:3d:51:d5:cb:60:80:00:dd:b4:4f:3d:f3:11:39:
de:1a:6c:22:67:49:98:7f:d9:96:41:a4:6f:87:c5:08:28:34:
41:c7:8d:fb:3d:ba:75:3b:15:68:b0:a1:da:33:dd:3a:30:34:
cb:c3:bd:5e:df:26:f5:d2:e5:0a:60:37:2f:03:c4:72:99:f9:
43:16:ea:d7:35:69:86:95:fc:f1:c6:34:c0:94:25:f6:1f:44:
75:80:de:09:50:d3:a5:0c:eb:6f:57:05:9c:b7:8a:95:80:79:
ab:22:b3:c2:3f:d6:25:a4:1a:71:4e:48:00:a4:d7:b9:cf:d5:
f7:2e:30:92:f9:d6:41:8b:74:78:af:68:24:ab:92:d6:af:87:
49:12:c3:fb:d9:52:6c:0b:00:01:2d:28:88:cf:21:61:04:77:
83:c1:0f:da:f4:2b:d3:20:cc:fb:0a:24:11:1d:b2:ef:11:f9:
ca:fa:92:b3:ad:55:41:71:77:3b:a9:34:bc:95:db:2c:57:c0:
2a:2b:72:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:53:45 2026 by rpki-client