Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/YSP2K25IRGuG9q-MByo9uJoo_cg.roa
File: YSP2K25IRGuG9q-MByo9uJoo_cg.roa (raw, json)
Hash identifier: Pd46j8HnroPwAsfvmv91RgjQs2qRGo37bfk5Rd39ViM=
Subject key identifier: 61:23:F6:2B:6E:48:44:6B:86:F6:AF:8C:07:2A:3D:B8:9A:28:FD:C8
Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd
Certificate serial: 019F5A15C51B30410D912B76528A7A02D337
Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/YSP2K25IRGuG9q-MByo9uJoo_cg.roa
Signing time: Mon 13 Jul 2026 06:06:43 +0000
ROA not before: Mon 13 Jul 2026 06:06:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198404
IP address blocks: 89.39.32.0/24 maxlen: 24
139.47.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5a:15:c5:1b:30:41:0d:91:2b:76:52:8a:7a:02:d3:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd
Validity
Not Before: Jul 13 06:06:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6123f62b6e48446b86f6af8c072a3db89a28fdc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:64:13:c8:dd:c8:6d:4a:32:1b:51:1c:de:c1:
e8:80:88:f2:3a:64:74:2a:d9:e3:3b:00:83:24:be:
49:b4:64:fa:66:3c:71:bc:99:54:60:31:08:05:41:
24:91:8c:82:06:aa:96:91:33:33:c4:c6:1b:6c:ff:
e2:5f:05:fd:7c:ac:16:a7:30:da:e6:f4:b0:6d:77:
17:07:d5:8e:3e:b6:32:84:2b:f4:5c:22:44:34:16:
ec:e2:d5:c4:bc:34:14:b5:49:a0:d9:69:d6:73:c6:
b4:98:9c:21:40:41:c9:45:53:43:c7:a1:f1:e8:1f:
d5:68:27:d9:60:01:32:3d:97:10:1f:01:8b:a0:20:
1e:96:69:fa:cf:bd:75:d9:96:b0:ab:e6:d8:4c:2c:
49:7a:18:96:78:63:2a:12:c9:6c:2d:6d:29:ff:3f:
60:80:2a:f3:a4:40:88:8a:50:8d:0c:6e:c7:c6:37:
39:db:4d:e5:22:d3:3d:5c:fc:3f:38:b3:00:d7:1d:
e4:e2:bd:24:80:12:32:c9:e0:0f:35:d6:7e:53:b9:
fd:c2:cb:d9:2c:31:32:18:1d:33:02:f5:7a:da:cf:
6b:a6:f1:75:07:09:97:54:5c:a0:d6:97:63:c9:b9:
e5:a1:8a:0b:c8:d4:2f:54:3f:c5:2a:c5:f1:88:44:
19:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:23:F6:2B:6E:48:44:6B:86:F6:AF:8C:07:2A:3D:B8:9A:28:FD:C8
X509v3 Authority Key Identifier:
keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/YSP2K25IRGuG9q-MByo9uJoo_cg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.32.0/24
139.47.158.0/24
Signature Algorithm: sha256WithRSAEncryption
75:62:88:ed:bd:49:a7:71:f2:81:ad:f9:1e:6f:82:08:2d:df:
b2:1a:94:32:8e:7a:60:b9:c9:88:df:76:ef:dd:dc:54:d9:b8:
9f:de:90:3c:a9:00:06:2f:ee:ae:b0:26:73:13:0a:54:c5:83:
0f:9d:7a:1c:3c:47:a2:74:1e:a9:8a:0a:a6:9f:8e:03:28:1b:
e3:26:57:8c:a5:2d:81:df:65:51:3d:14:7f:74:f0:bc:a6:4f:
8e:29:29:da:73:db:5b:41:71:47:b7:01:53:7d:32:fc:ba:79:
a2:3d:b9:0c:a4:23:1e:11:93:1d:eb:a6:a5:83:a4:74:e3:03:
46:d8:c7:cd:7e:be:87:cb:e8:56:73:9e:3e:7c:4a:ef:b1:72:
15:91:13:98:42:92:57:4a:bc:08:fc:b4:39:8b:e0:d5:9d:a9:
12:ce:a1:c2:5a:5e:f0:87:6b:91:b6:f6:b8:32:b3:b7:6a:ad:
04:05:49:ea:cc:10:37:8b:94:16:17:89:15:12:47:dc:8f:62:
9c:31:96:06:96:4e:76:ed:6a:10:50:0a:b7:04:39:c7:be:05:
cf:b8:3b:87:14:18:d7:0d:cf:5b:dd:5f:1d:e6:c3:35:db:79:
f2:cd:45:d6:c8:c0:5a:c9:d3:0f:61:c0:04:e6:21:bd:78:1a:
43:d9:c1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:46:09 2026 by rpki-client