Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/ykIO06Z3TWP8C7MBq0116nU3_CM.roa
File: ykIO06Z3TWP8C7MBq0116nU3_CM.roa (raw, json)
Hash identifier: V2LdVfykk4YsRXS4hrAXZ8tG2d0T5pGlU7GKSFQEj8Y=
Subject key identifier: CA:42:0E:D3:A6:77:4D:63:FC:0B:B3:01:AB:4D:75:EA:75:37:FC:23
Certificate issuer: /CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Certificate serial: 01A1D9671474A5AD1DF0F94052187F705B54
Authority key identifier: 4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/ykIO06Z3TWP8C7MBq0116nU3_CM.roa
Signing time: Sat 14 Nov 2026 09:32:53 +0000
ROA not before: Sat 14 Nov 2026 09:32:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41791
IP address blocks: 79.98.37.0/24 maxlen: 24
79.98.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d9:67:14:74:a5:ad:1d:f0:f9:40:52:18:7f:70:5b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349
Validity
Not Before: Nov 14 09:32:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca420ed3a6774d63fc0bb301ab4d75ea7537fc23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c3:42:a4:c9:b6:bd:9d:92:bd:6d:53:4b:b0:
d9:c3:02:06:aa:ad:84:c9:49:eb:37:6f:ab:4c:75:
c5:91:e6:d7:3f:20:9f:d2:eb:51:4a:7f:32:b8:b0:
9c:19:c9:6f:7b:e8:bb:85:de:ba:2c:bc:49:e7:db:
46:8c:7d:5d:40:13:0f:d6:a9:a5:2a:96:8a:91:c2:
0d:fc:cb:bb:ec:35:fe:10:60:96:ab:73:ee:6b:c7:
2b:55:33:5c:e2:0d:e2:3c:89:be:2f:cf:65:2a:cf:
82:f6:6b:26:60:8e:99:cc:88:72:68:f9:3b:bd:a3:
e2:df:30:7e:4a:d9:92:98:82:f6:11:2d:66:04:c2:
85:9a:f7:fc:1e:ed:ba:2d:a1:74:d6:59:b0:8a:44:
8e:58:19:9e:4e:4a:d5:0b:23:44:1f:c3:46:55:7f:
7c:6b:83:12:48:20:43:86:60:75:93:ec:61:1c:86:
a7:47:7b:41:cb:c4:e9:58:2c:a4:44:b0:4d:63:ab:
6c:a0:95:28:82:03:73:50:1f:f0:eb:74:0f:26:c6:
14:c4:47:35:68:41:02:67:21:97:54:ba:6b:37:a1:
74:fc:9c:f3:e1:8b:e1:e1:04:19:e6:92:e8:dc:e8:
48:6d:7f:0e:d4:82:f0:39:39:d0:ba:1f:15:65:78:
2e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:42:0E:D3:A6:77:4D:63:FC:0B:B3:01:AB:4D:75:EA:75:37:FC:23
X509v3 Authority Key Identifier:
keyid:4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/ykIO06Z3TWP8C7MBq0116nU3_CM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.37.0-79.98.38.255
Signature Algorithm: sha256WithRSAEncryption
98:52:ef:d0:b1:0b:5a:34:a1:b7:50:8d:2a:22:e5:06:5c:d1:
26:b8:0d:04:80:59:a9:91:1d:86:41:f8:ef:ea:e4:64:1f:d9:
43:74:7f:94:a9:8d:81:7c:f3:a0:6a:a8:51:13:6c:e4:92:dd:
16:1a:85:4d:e4:8e:b9:97:8f:38:5f:f6:6b:f3:44:22:36:9d:
1c:14:42:71:ac:a9:c4:bb:2f:0f:30:f0:20:29:4e:73:41:7e:
4a:b4:68:fa:34:6a:8f:f3:73:f9:00:9a:4f:76:1f:33:c7:62:
e9:92:30:3a:dc:3b:de:b9:1e:4d:88:4a:f8:08:be:89:69:9d:
3a:26:3b:e8:6c:f4:dc:89:26:3e:76:d1:9d:2b:65:2e:bd:6b:
a6:6a:5c:b4:40:29:7e:fc:29:0d:f1:f1:1f:fa:e1:94:ce:be:
20:c5:15:6a:25:13:22:4d:a6:88:cd:db:39:00:2b:09:c2:8e:
e5:45:ec:8a:b0:dd:42:7c:7e:1d:5c:a8:58:ca:1e:cf:89:3c:
f4:1a:ed:a6:47:12:b8:51:43:4f:02:f8:21:5e:08:0c:f7:c0:
c5:b4:cc:07:2b:29:76:98:4d:93:4a:d9:9d:b3:6d:56:30:9c:
ce:62:d3:b7:5d:6b:5c:70:5f:bb:87:f3:37:9a:73:e1:b0:36:
f3:56:82:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:04:02 2026 by rpki-client