Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/Yx_v2-WnUx4Pa-Xapg--_3nB4SM.roa
File: Yx_v2-WnUx4Pa-Xapg--_3nB4SM.roa (raw, json)
Hash identifier: sYzDtFoQ+Z0jAPr7/aEtcml7DlJ4+rH/UYYE8d0QfIQ=
Subject key identifier: 63:1F:EF:DB:E5:A7:53:1E:0F:6B:E5:DA:A6:0F:BE:FF:79:C1:E1:23
Certificate issuer: /CN=dfdfaea913775f18f5f8d03567e5c20d0dcf88b2
Certificate serial: 019F236912164DDE69655344E9A0FFDA2A69
Authority key identifier: DF:DF:AE:A9:13:77:5F:18:F5:F8:D0:35:67:E5:C2:0D:0D:CF:88:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/Yx_v2-WnUx4Pa-Xapg--_3nB4SM.roa
Signing time: Thu 02 Jul 2026 15:18:36 +0000
ROA not before: Thu 02 Jul 2026 15:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215119
IP address blocks: 217.23.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:12:16:4d:de:69:65:53:44:e9:a0:ff:da:2a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfdfaea913775f18f5f8d03567e5c20d0dcf88b2
Validity
Not Before: Jul 2 15:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=631fefdbe5a7531e0f6be5daa60fbeff79c1e123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:31:dd:28:66:00:4e:03:8d:59:75:11:0a:a1:
aa:07:2d:41:7f:f7:7b:c2:78:82:e6:7b:cd:fc:fe:
13:3a:26:8c:3e:5a:74:9e:de:94:29:a8:49:bd:18:
2c:85:8b:a7:8a:cf:34:a6:c8:51:6d:3a:74:e0:f9:
71:c7:de:e7:bc:80:29:26:31:aa:f0:60:28:a0:ed:
d4:f4:d8:79:6f:d0:46:46:e9:06:e4:1b:c7:64:02:
e3:11:e2:0b:2b:0b:f8:b3:f8:b4:0d:d7:6b:eb:f6:
5f:ae:e4:93:83:c1:d9:fd:1e:8e:a7:ed:37:08:2a:
44:63:06:87:57:0b:a6:76:8a:d8:b8:77:17:2d:9b:
79:8b:90:1d:5a:f7:07:81:49:9c:f7:0e:c3:9d:94:
5b:92:c8:5d:65:7e:dc:d6:9a:a3:ea:eb:cd:eb:72:
fa:f6:56:9f:51:20:32:4b:e8:cb:75:02:27:39:7b:
74:f5:7d:1b:0c:b9:2c:d8:69:ff:64:8b:96:e2:4d:
e7:9c:4e:4a:54:06:95:0d:c9:f9:ba:08:0f:13:9b:
ef:bc:fe:b2:b8:5d:d8:af:1a:9a:7c:81:ce:5b:79:
71:3f:31:0f:48:89:55:65:45:f5:f7:03:57:11:22:
f8:ab:1d:88:17:88:8a:a6:84:c9:e9:63:59:99:67:
60:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1F:EF:DB:E5:A7:53:1E:0F:6B:E5:DA:A6:0F:BE:FF:79:C1:E1:23
X509v3 Authority Key Identifier:
keyid:DF:DF:AE:A9:13:77:5F:18:F5:F8:D0:35:67:E5:C2:0D:0D:CF:88:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/Yx_v2-WnUx4Pa-Xapg--_3nB4SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/39-uqRN3Xxj1-NA1Z-XCDQ3PiLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.23.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:60:dc:79:ca:3c:3e:fb:fa:b0:b1:f0:ce:52:68:10:7c:5c:
45:43:14:17:d9:45:b6:2a:c6:4f:60:5c:99:1c:ac:42:05:42:
e5:8a:de:c0:0e:4c:02:51:e4:e8:9b:80:6a:7b:da:18:c5:c4:
2e:91:04:fc:ce:cd:a8:5e:12:01:77:c2:0b:ba:7a:d0:51:0c:
4b:24:09:f4:96:8c:38:f5:e5:a7:44:fb:a5:8b:71:8e:b2:ec:
91:49:f8:6d:48:cb:8f:d9:ca:46:fa:b9:dc:cf:2c:33:a2:04:
77:00:d0:36:57:37:52:c4:c2:dd:dd:fe:d3:45:4e:aa:36:9e:
1f:ad:1e:c2:a9:31:0f:67:8a:d4:eb:cd:2f:17:d6:b6:b2:a1:
68:f2:06:46:68:34:ca:66:d3:e1:4f:1b:e1:65:7b:53:ed:8b:
db:b6:ed:ab:3e:8b:d8:fb:9b:81:b8:8d:c9:10:28:8c:5c:55:
3f:8a:e9:7c:46:cb:92:c3:bb:75:2c:30:11:7b:4c:42:48:98:
c8:30:2e:ee:9d:9a:2f:f2:13:35:2e:97:b3:8a:80:db:6d:fb:
2e:8d:2d:f6:93:18:b4:e3:a0:e0:0e:fb:a6:29:dc:78:10:00:
70:3c:ce:57:c9:8c:bb:c9:f1:1e:04:92:cb:b4:a4:d4:f6:d6:
51:71:ba:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaRIWTd5pZVNE6aD/2ippMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZGZhZWE5MTM3NzVmMThmNWY4ZDAzNTY3ZTVjMjBkMGRj
Zjg4YjIwHhcNMjYwNzAyMTUxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzFmZWZkYmU1YTc1MzFlMGY2YmU1ZGFhNjBmYmVmZjc5YzFlMTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDHdKGYATgONWXURCqGqBy1Bf/d7
wniC5nvN/P4TOiaMPlp0nt6UKahJvRgshYunis80pshRbTp04Plxx97nvIApJjGq
8GAooO3U9Nh5b9BGRukG5BvHZALjEeILKwv4s/i0Dddr6/ZfruSTg8HZ/R6Op+03
CCpEYwaHVwumdorYuHcXLZt5i5AdWvcHgUmc9w7DnZRbkshdZX7c1pqj6uvN63L6
9lafUSAyS+jLdQInOXt09X0bDLks2Gn/ZIuW4k3nnE5KVAaVDcn5uggPE5vvvP6y
uF3YrxqafIHOW3lxPzEPSIlVZUX19wNXESL4qx2IF4iKpoTJ6WNZmWdgSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGMf79vlp1MeD2vl2qYPvv95weEjMB8GA1UdIwQY
MBaAFN/frqkTd18Y9fjQNWflwg0Nz4iyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzktdXFSTjNYeGoxLU5BMVotWENEUTNQaUxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS85NThjMmMtYjRjMy00MzJkLTlhYjEt
MGNjODNiMDBmYzU4LzEvWXhfdjItV25VeDRQYS1YYXBnLS1fM25CNFNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS85NThjMmMtYjRjMy00MzJkLTlhYjEtMGNjODNiMDBmYzU4
LzEvMzktdXFSTjNYeGoxLU5BMVotWENEUTNQaUxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Rd4MA0G
CSqGSIb3DQEBCwUAA4IBAQA8YNx5yjw++/qwsfDOUmgQfFxFQxQX2UW2KsZPYFyZ
HKxCBULlit7ADkwCUeTom4Bqe9oYxcQukQT8zs2oXhIBd8ILunrQUQxLJAn0low4
9eWnRPuli3GOsuyRSfhtSMuP2cpG+rnczywzogR3ANA2VzdSxMLd3f7TRU6qNp4f
rR7CqTEPZ4rU680vF9a2sqFo8gZGaDTKZtPhTxvhZXtT7Yvbtu2rPovY+5uBuI3J
ECiMXFU/iul8RsuSw7t1LDARe0xCSJjIMC7unZov8hM1LpezioDbbfsujS32kxi0
46DgDvumKdx4EABwPM5XyYy7yfEeBJLLtKTU9tZRcbrf
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:38:56 2026 by rpki-client