Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/YTZMwpJnZrVk6SK86vwXo0EQhLg.roa
File: YTZMwpJnZrVk6SK86vwXo0EQhLg.roa (raw, json)
Hash identifier: S9vwsu0sVJT8aMTbgjN68BQb0qOwE7c9n2bVDrCK9c0=
Subject key identifier: 61:36:4C:C2:92:67:66:B5:64:E9:22:BC:EA:FC:17:A3:41:10:84:B8
Certificate issuer: /CN=13fe9bcebae228b36c883c27ea5518e704c10991
Certificate serial: 019F05B109E7ADBDA95B6982F06BC5A19609
Authority key identifier: 13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/YTZMwpJnZrVk6SK86vwXo0EQhLg.roa
Signing time: Fri 26 Jun 2026 20:48:36 +0000
ROA not before: Fri 26 Jun 2026 20:48:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213887
IP address blocks: 94.141.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:05:b1:09:e7:ad:bd:a9:5b:69:82:f0:6b:c5:a1:96:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13fe9bcebae228b36c883c27ea5518e704c10991
Validity
Not Before: Jun 26 20:48:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61364cc2926766b564e922bceafc17a3411084b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cc:65:64:56:43:f6:ea:ce:d9:2f:a2:7d:97:
be:91:bb:ee:2d:48:ff:8b:f0:c8:ae:55:a2:d7:81:
e4:3e:1e:f3:f7:f2:0f:41:22:2c:1d:9e:94:c7:e6:
f4:b4:8a:de:aa:68:67:97:d9:b8:3b:d6:4f:53:04:
eb:13:5d:b9:6a:2d:68:cf:e6:a6:aa:cd:96:50:fd:
75:bd:df:c0:12:9f:1e:73:9c:30:d1:39:a0:b6:fd:
01:dc:7c:7f:94:c3:74:84:28:31:4d:ca:2b:b5:62:
a5:b8:34:0d:f5:d5:82:3d:13:0c:ca:dc:93:d4:af:
a2:94:5b:ca:62:f1:08:99:c3:7f:e9:92:65:38:b2:
a9:5f:43:7f:c7:99:d0:13:d8:06:ed:2d:a6:59:21:
fd:47:58:0c:4f:7b:47:ad:64:a1:84:e4:80:f4:e8:
6e:07:6d:ec:9a:f1:b6:2e:c9:b5:5f:4c:84:69:3f:
91:41:7f:14:c3:90:e8:5b:09:b2:af:7d:78:d6:ff:
5e:a9:df:72:6b:88:de:ab:fd:f5:4a:09:b7:7f:46:
b7:24:68:bf:a8:8d:bf:96:cd:8c:25:e1:de:45:04:
4b:79:d3:0d:06:ff:dc:d4:1d:ed:04:f2:b7:e2:25:
c2:53:3a:d6:47:ae:cc:ce:3a:90:fb:4c:0b:61:a6:
c3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:36:4C:C2:92:67:66:B5:64:E9:22:BC:EA:FC:17:A3:41:10:84:B8
X509v3 Authority Key Identifier:
keyid:13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/YTZMwpJnZrVk6SK86vwXo0EQhLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.141.123.0/24
Signature Algorithm: sha256WithRSAEncryption
47:bc:39:e5:d9:fa:ab:7e:8b:21:1a:72:d1:e8:09:60:c1:6b:
68:68:f6:fb:00:66:2e:18:37:29:7c:7d:21:17:30:8f:dc:b4:
6f:79:f6:b7:4b:e4:56:37:13:b4:a3:82:7b:55:e2:f6:11:5e:
7a:17:90:32:b3:dd:77:71:f7:63:f1:d6:a9:1e:5b:34:a5:71:
aa:cc:05:53:93:04:4a:0b:d6:19:2d:43:b3:b4:16:22:0e:e3:
55:b9:c0:3a:25:ad:07:50:ec:52:c0:91:44:94:ae:54:69:fe:
b7:35:1d:b3:7d:df:c7:34:1d:59:d4:ff:8b:e3:0f:b4:a5:16:
6e:ec:02:9f:ff:32:23:14:50:ea:49:7a:7f:60:79:35:7b:47:
95:e5:72:85:b2:8a:03:a5:fd:8f:d4:48:a9:05:d9:89:f2:92:
6c:f3:44:94:59:84:3f:a3:89:78:a0:49:83:32:64:9d:b4:fb:
fb:da:1c:50:f4:9b:dd:cc:eb:4f:d4:bf:de:64:a3:3a:16:08:
30:5a:02:51:34:1a:f0:3c:eb:c2:50:2e:99:f6:3d:df:f0:6b:
ca:11:1c:d0:cc:b6:9b:6b:70:5e:7f:53:05:a1:31:92:3c:c0:
22:41:3f:c3:99:83:2d:c3:f7:cd:35:e0:20:4b:e0:33:2b:3b:
46:d3:87:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:07:30 2026 by rpki-client