Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/Ykafli2nuvHvr2ZZrxVKMXpHSUQ.roa
File: Ykafli2nuvHvr2ZZrxVKMXpHSUQ.roa (raw, json)
Hash identifier: ZVqCkdThQ+Dxa4j8Ohcu5jpE4zpamft8rts1/91ztKk=
Subject key identifier: 62:46:9F:96:2D:A7:BA:F1:EF:AF:66:59:AF:15:4A:31:7A:47:49:44
Certificate issuer: /CN=64262c8337e218bed316b70cc092dd0befe8195b
Certificate serial: 019F236885304B45EF4CE1DC2AE816EA9BE9
Authority key identifier: 64:26:2C:83:37:E2:18:BE:D3:16:B7:0C:C0:92:DD:0B:EF:E8:19:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/Ykafli2nuvHvr2ZZrxVKMXpHSUQ.roa
Signing time: Thu 02 Jul 2026 15:18:00 +0000
ROA not before: Thu 02 Jul 2026 15:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201027
IP address blocks: 185.238.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:85:30:4b:45:ef:4c:e1:dc:2a:e8:16:ea:9b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64262c8337e218bed316b70cc092dd0befe8195b
Validity
Not Before: Jul 2 15:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62469f962da7baf1efaf6659af154a317a474944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:04:2d:dd:ba:bb:32:71:42:49:e7:39:5c:0d:
ce:ab:d7:65:9a:af:cf:fb:6c:7e:e8:d9:b2:71:04:
1d:76:56:74:5a:f8:11:cc:20:b7:8b:68:24:d8:31:
d4:58:3e:3f:3e:df:29:6f:4e:8d:94:7d:ae:60:e4:
c2:98:f7:60:5b:cb:42:48:c4:97:93:0b:ec:2e:f0:
e3:81:8b:31:cd:73:9b:9c:82:58:bc:7a:35:86:64:
43:63:76:de:98:d7:7e:7a:23:6b:d7:ed:3a:74:20:
67:7c:44:ed:65:b1:6b:a7:be:99:4c:c5:3b:c5:22:
f6:f3:52:51:09:0c:28:ff:cd:64:70:e8:dd:ac:b2:
f6:89:6b:05:bb:4f:31:4a:cb:a2:eb:f6:6c:51:77:
15:7d:dc:20:25:a0:4a:88:99:9c:39:b5:a8:31:bd:
2e:5b:ed:e0:22:8b:b8:6b:27:5e:cd:a6:24:8f:76:
d6:bc:6b:50:c8:e6:0c:63:00:a4:e9:1a:22:d2:e6:
ce:5b:e5:06:26:62:43:ed:34:6a:bb:fd:7c:1a:41:
32:6e:ef:b3:44:61:c0:08:8c:7e:4f:d8:45:d5:91:
21:e4:55:18:6c:35:14:05:a5:56:46:bc:6b:8e:c0:
4b:78:17:f6:aa:45:c9:35:92:61:46:5a:1a:f4:d5:
71:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:46:9F:96:2D:A7:BA:F1:EF:AF:66:59:AF:15:4A:31:7A:47:49:44
X509v3 Authority Key Identifier:
keyid:64:26:2C:83:37:E2:18:BE:D3:16:B7:0C:C0:92:DD:0B:EF:E8:19:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/Ykafli2nuvHvr2ZZrxVKMXpHSUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/ZCYsgzfiGL7TFrcMwJLdC-_oGVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.63.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:1e:24:91:70:c7:98:99:be:4f:19:6a:ad:dd:d3:92:c9:e8:
53:4d:7a:d8:0f:db:99:af:49:d8:f5:a6:05:ff:a6:9a:a0:b7:
84:9b:aa:1a:f4:d2:86:60:0e:b6:37:fd:d4:e0:26:d2:61:cb:
7e:5a:47:b4:42:6c:16:ae:db:f9:75:7f:59:ad:35:1c:71:7c:
f9:0f:e4:eb:f4:2a:dd:34:1f:5f:b0:5c:fa:ff:ee:09:6c:27:
d3:41:c9:6a:03:7e:fe:5f:18:75:5d:0b:5f:a6:f4:da:a8:7a:
9d:0b:39:7e:6d:1c:bf:3c:d5:cf:9d:75:34:d7:74:e2:e9:03:
60:a4:8c:57:65:db:41:6b:8d:27:12:5d:d6:35:18:d6:36:57:
20:21:30:8f:e3:26:cb:f9:40:82:9a:9d:6b:4b:a1:30:c1:e1:
48:12:ce:e6:ea:88:2a:e0:65:91:4f:77:a6:c6:d0:86:83:45:
4d:64:18:ca:9d:d3:5b:c4:be:83:f4:85:df:70:98:42:03:72:
f6:be:a6:a4:e6:0a:e6:01:f1:9e:b4:41:2e:50:f1:44:92:ca:
21:56:3e:bd:41:45:d5:f6:5e:df:00:e8:ed:96:36:16:30:87:
ea:25:14:b3:0b:79:6a:9e:f3:e8:0a:00:b0:05:7b:e1:02:52:
27:5e:d8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:43:37 2026 by rpki-client