Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/YnaVL83EnDyPXsVJYrytnkQg5ug.roa
File: YnaVL83EnDyPXsVJYrytnkQg5ug.roa (raw, json)
Hash identifier: Fnqs3WN0fegg9CdKzgXczrQTO3HUhiFCAXykCpf5Clk=
Subject key identifier: 62:76:95:2F:CD:C4:9C:3C:8F:5E:C5:49:62:BC:AD:9E:44:20:E6:E8
Certificate issuer: /CN=756127c6cd4e35d98f0a4ba362ce273164971942
Certificate serial: 019F2369013D84C76E9B378027A0FD658064
Authority key identifier: 75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/YnaVL83EnDyPXsVJYrytnkQg5ug.roa
Signing time: Thu 02 Jul 2026 15:18:31 +0000
ROA not before: Thu 02 Jul 2026 15:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212480
IP address blocks: 92.255.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:01:3d:84:c7:6e:9b:37:80:27:a0:fd:65:80:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756127c6cd4e35d98f0a4ba362ce273164971942
Validity
Not Before: Jul 2 15:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6276952fcdc49c3c8f5ec54962bcad9e4420e6e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:70:cf:59:53:60:2a:8e:e7:92:22:a1:60:de:
1e:3c:0e:28:fd:ed:9a:49:e2:fd:eb:bc:b3:b5:97:
36:59:48:0a:c4:e0:36:a3:59:d4:c8:59:c8:6c:81:
bc:26:1d:bd:81:41:56:ff:1e:1f:25:d2:ca:50:8a:
c6:a2:5f:bb:40:7d:2b:55:0d:47:34:74:0d:f3:7b:
d9:57:5e:a2:44:b4:a1:ff:0d:3e:1f:f2:a8:64:14:
66:ec:66:73:82:83:a2:1e:13:28:d2:08:ad:3c:f6:
04:b6:26:60:d0:a6:31:ae:ab:9f:9d:fd:96:6b:b9:
e7:47:63:af:cf:5d:c7:49:59:ec:31:57:69:f3:35:
23:37:5c:07:7c:38:09:78:bc:b5:a1:23:ff:b0:04:
c1:65:87:92:23:4e:b6:2f:e3:03:a5:6b:9d:bd:fb:
3c:f5:18:18:21:33:ff:fa:1c:95:2a:64:cc:e6:5a:
e2:28:c4:fe:b0:9c:d7:f6:3f:19:56:40:a5:c1:73:
ea:51:0f:8c:fe:91:2e:a6:50:53:f2:6a:c9:8a:7a:
fd:10:e9:7b:e5:86:13:b8:23:91:60:fe:80:1b:de:
13:b7:e1:a4:75:3d:7d:cd:9c:80:5c:f3:89:d8:d8:
4a:86:a9:63:a5:79:1b:0f:8e:c3:5b:f8:8f:d1:19:
9a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:76:95:2F:CD:C4:9C:3C:8F:5E:C5:49:62:BC:AD:9E:44:20:E6:E8
X509v3 Authority Key Identifier:
keyid:75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/YnaVL83EnDyPXsVJYrytnkQg5ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.255.49.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:a9:e9:d3:e5:9a:af:7d:90:92:b3:d5:3f:8b:bb:16:53:90:
49:4e:4f:6a:76:0e:99:fd:d5:a8:4a:f8:2e:21:2e:1d:a0:77:
d7:f1:1d:60:fc:18:35:ee:62:76:91:58:cd:04:0e:8c:51:9e:
31:d4:3f:79:61:ff:b8:4b:f6:5c:b7:4d:cd:44:e4:b6:70:e9:
b0:3d:b9:c0:8b:ce:21:1f:11:c8:c4:7a:2f:1b:06:21:4f:77:
28:73:d5:5c:30:34:c8:81:22:aa:01:77:b3:1d:c0:9a:0a:13:
b2:35:3a:75:b6:7c:2f:6c:12:8b:c9:d2:d1:c6:eb:5d:8a:b0:
7f:85:74:0c:8b:46:02:61:20:bb:f2:31:c0:6d:a5:95:48:8c:
84:54:d6:cb:95:2b:d2:ab:0e:3f:f5:1a:1f:48:db:b6:10:1a:
e4:38:00:8f:15:c2:96:ce:9c:ce:39:c8:9a:b7:de:26:42:89:
bf:7d:42:cf:68:6a:79:fe:ba:d8:72:cb:bc:94:e5:ca:1e:b6:
68:22:46:82:02:dd:2f:2a:7a:26:09:96:ea:54:69:e1:78:bb:
7e:7b:11:d0:35:e3:1c:31:4b:2a:22:18:6d:b0:02:ad:69:b1:
c9:af:8e:c7:1b:b6:58:23:76:2c:93:b2:04:64:7e:d0:bf:f7:
8a:d9:48:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:44:54 2026 by rpki-client