Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/YwZpEciALbahxIf7Aq34l4yS01s.roa
File: YwZpEciALbahxIf7Aq34l4yS01s.roa (raw, json)
Hash identifier: rjlmnwqgplpDnsO5ig/mWr1AtDmk7T8Yh0Nyb4OSolc=
Subject key identifier: 63:06:69:11:C8:80:2D:B6:A1:C4:87:FB:02:AD:F8:97:8C:92:D3:5B
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 019F26E13ED83BE8D524E845FF9D70F990B9
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/YwZpEciALbahxIf7Aq34l4yS01s.roa
Signing time: Fri 03 Jul 2026 07:28:43 +0000
ROA not before: Fri 03 Jul 2026 07:28:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 185.74.54.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:26:e1:3e:d8:3b:e8:d5:24:e8:45:ff:9d:70:f9:90:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Jul 3 07:28:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63066911c8802db6a1c487fb02adf8978c92d35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:43:71:ed:eb:47:48:19:da:1c:c7:80:9f:be:
2e:1d:2b:3d:97:da:f6:fb:ba:5e:2e:ce:d9:f8:41:
25:35:a5:e1:2c:52:69:c0:a4:9d:2e:61:f7:9c:d4:
e3:db:80:3c:8b:ce:38:68:67:98:b0:c9:d8:e2:23:
2b:f1:f3:1a:15:8c:db:f2:f8:fb:9f:47:15:15:0b:
ac:ef:14:ef:61:8f:6b:73:1d:c9:f3:a1:68:e0:04:
da:42:4f:86:3d:fb:90:de:80:76:cf:44:47:82:48:
8d:0f:7e:b3:db:cd:69:a9:b8:41:79:6b:eb:6c:45:
2d:1b:04:19:6c:3f:f1:28:de:b3:11:c2:5a:a2:f2:
fd:63:82:05:d3:7a:65:c3:c7:8f:9d:a5:2f:6e:73:
74:6c:7e:79:67:16:cf:e3:38:8c:f0:69:18:7f:01:
ae:9d:cb:98:1d:f4:06:d5:93:c2:3f:68:31:d2:95:
54:37:60:6d:00:3e:cd:71:41:ca:c8:32:3a:ec:c0:
61:8c:2e:3b:1a:42:7a:cb:5e:4a:db:61:89:24:13:
ef:33:0c:5c:5b:f6:cc:72:e3:cb:a4:db:86:a5:8f:
59:c2:e8:ba:b3:ae:eb:98:64:83:be:d9:38:77:0a:
71:de:e9:ca:47:97:f8:1c:00:91:1d:3d:e0:ab:d4:
a7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:06:69:11:C8:80:2D:B6:A1:C4:87:FB:02:AD:F8:97:8C:92:D3:5B
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/YwZpEciALbahxIf7Aq34l4yS01s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.74.54.0/23
Signature Algorithm: sha256WithRSAEncryption
97:b2:f8:a1:9a:8f:aa:d8:61:a0:0a:ef:90:4a:7f:5a:e4:4d:
2a:70:db:a2:3a:ea:90:db:24:38:29:2d:9e:47:74:01:36:22:
9a:5b:94:4f:57:36:6a:c2:d0:26:ce:45:86:51:d6:a8:51:db:
7f:17:a6:c9:a9:b9:91:a8:6e:e0:10:1b:72:8f:c2:c3:b8:05:
81:b5:19:e9:85:f7:73:fe:b6:e0:62:7c:9c:be:4a:26:8e:0f:
cf:39:d0:74:c6:05:23:4a:c6:7d:c7:2c:f1:40:38:71:ca:ec:
31:ea:63:25:99:09:5b:a6:ea:27:d0:67:23:52:9d:0c:93:91:
85:2c:8e:74:01:92:69:97:27:3c:47:5d:20:84:0f:c2:b9:d5:
15:f9:83:44:9b:5f:9b:38:03:cc:7d:8b:f0:6c:21:a1:7e:51:
0c:e6:02:9d:22:6e:e4:8d:33:34:73:e3:f8:24:34:87:d6:49:
a0:a6:6b:38:c7:78:d6:da:dc:cc:8d:cf:5e:99:46:c7:4d:05:
89:ec:97:ed:70:25:c3:2b:fd:54:21:5f:11:dd:fb:4d:44:11:
cd:34:34:7f:57:c5:76:48:c4:37:b8:c2:8c:55:62:c6:1e:20:
3f:ae:b2:e9:02:70:95:2d:ec:84:8f:05:94:be:ed:2d:94:c5:
b1:26:cf:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:20 2026 by rpki-client