Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/YNFKGjO3TQkGaxStdlGiqatiFHI.roa
File: YNFKGjO3TQkGaxStdlGiqatiFHI.roa (raw, json)
Hash identifier: qn5Y0GIDsP6OYAy/rgGsIPR0ev9c0lciMSbpXL+AhRY=
Subject key identifier: 60:D1:4A:1A:33:B7:4D:09:06:6B:14:AD:76:51:A2:A9:AB:62:14:72
Certificate issuer: /CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Certificate serial: 019F4AA9181FB97C915195C5A999120D3BF3
Authority key identifier: 9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/YNFKGjO3TQkGaxStdlGiqatiFHI.roa
Signing time: Fri 10 Jul 2026 06:13:43 +0000
ROA not before: Fri 10 Jul 2026 06:13:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44765
IP address blocks: 94.127.18.0/24 maxlen: 24
209.92.64.0/22 maxlen: 24
209.92.64.0/24 maxlen: 24
209.92.65.0/24 maxlen: 24
209.92.66.0/24 maxlen: 24
209.92.67.0/24 maxlen: 24
2a00:8e40::/32 maxlen: 48
2a00:8e40:b00b::/48 maxlen: 48
2a00:8e41::/32 maxlen: 48
2a00:8e42::/32 maxlen: 48
2a00:8e43::/32 maxlen: 48
2a00:8e44::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4a:a9:18:1f:b9:7c:91:51:95:c5:a9:99:12:0d:3b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Validity
Not Before: Jul 10 06:13:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=60d14a1a33b74d09066b14ad7651a2a9ab621472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:70:eb:ad:cf:83:86:d7:21:0a:dc:51:b2:c7:
3a:3a:43:b2:d4:27:94:09:76:7e:d4:46:28:bf:60:
2d:18:95:26:5b:91:8a:f5:e3:1a:9e:80:72:b9:d3:
79:0c:0f:bd:99:c9:b9:3e:60:bc:e2:26:98:3f:2d:
a1:74:86:fe:85:ad:bf:23:9c:8a:95:4d:c9:73:68:
1f:94:1e:f3:9f:db:52:f4:55:2d:84:6d:87:32:68:
78:25:29:ad:ed:09:06:e7:45:f7:4e:56:a8:e8:dc:
35:d7:41:d9:e7:8b:52:19:1e:f0:2c:91:1d:32:b0:
f1:c4:33:c4:e0:b2:f1:81:e8:b9:be:93:1c:a2:f6:
ef:10:41:14:b2:dc:22:40:fc:b8:14:9e:de:b5:f6:
9a:9d:e6:c4:d1:50:d6:80:c7:08:68:1c:df:d6:b2:
da:c3:02:b1:51:d5:9b:73:c8:d4:00:48:b0:54:c2:
af:c0:7f:0f:9b:b6:0f:3c:7e:ab:95:d5:ec:d4:1d:
d3:e3:66:1e:d1:b9:90:e0:c6:7a:c5:86:c5:b6:46:
5c:6b:20:97:04:cc:13:7f:4c:03:b1:5e:84:8d:6e:
c3:62:a7:ef:34:70:c6:27:5f:5e:5d:26:79:51:c3:
58:ab:d2:db:74:01:58:4d:de:b9:8f:6f:7d:3f:ad:
62:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D1:4A:1A:33:B7:4D:09:06:6B:14:AD:76:51:A2:A9:AB:62:14:72
X509v3 Authority Key Identifier:
keyid:9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/YNFKGjO3TQkGaxStdlGiqatiFHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.127.18.0/24
209.92.64.0/22
IPv6:
2a00:8e40::-2a00:8e44:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
84:74:f7:82:f5:b4:ea:f0:20:d1:28:4f:c9:07:23:49:53:3b:
80:49:d3:58:3f:24:75:5e:49:a2:40:56:1b:be:e7:62:c3:79:
43:9b:25:e5:00:98:a9:34:9f:72:d3:0e:67:17:99:89:05:f3:
50:01:03:b3:44:64:a3:29:56:3b:b2:d9:99:cd:9d:ee:5f:74:
90:fb:c6:48:d4:23:1d:a4:03:ed:95:46:a3:ed:17:24:78:4b:
72:a3:36:f2:1b:ae:9d:d0:7f:43:5c:5a:0f:6d:84:61:47:2d:
8d:95:17:cf:ed:44:46:68:3a:41:4e:43:7b:98:ca:c9:21:45:
eb:59:6d:00:14:f8:a1:75:d5:26:57:08:99:de:6d:21:76:c3:
e0:6c:27:32:e8:de:18:2e:70:95:7a:5c:9b:5e:45:8d:c2:57:
e8:90:35:16:b2:08:40:36:1b:fd:5c:29:ee:ac:e0:38:b5:46:
8e:6d:ea:5c:d9:ba:53:79:7f:cd:40:1e:74:87:bb:49:29:21:
fc:f0:f1:89:6a:74:33:be:a8:23:8e:d5:0a:60:f2:9e:8f:74:
5b:21:7c:2e:db:87:10:53:0d:d8:0b:e6:34:ce:d5:de:34:d4:
8e:58:da:4a:bd:1b:2a:09:f1:c7:24:30:9c:09:22:76:8d:79:
5d:fb:e0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:20:08 2026 by rpki-client