Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/YJ6wfgmHhSa-XO3XKMIypRrZuFE.roa
File: YJ6wfgmHhSa-XO3XKMIypRrZuFE.roa (raw, json)
Hash identifier: T+g6eqMqBdnyNiCON2Ai+cg12xFO1PEk5qPQtTZnzMo=
Subject key identifier: 60:9E:B0:7E:09:87:85:26:BE:5C:ED:D7:28:C2:32:A5:1A:D9:B8:51
Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial: 019CADF69FA1F7FEA38AC468B453B521DA56
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/YJ6wfgmHhSa-XO3XKMIypRrZuFE.roa
Signing time: Mon 02 Mar 2026 09:52:26 +0000
ROA not before: Mon 02 Mar 2026 09:52:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200658
IP address blocks: 212.66.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:f6:9f:a1:f7:fe:a3:8a:c4:68:b4:53:b5:21:da:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Validity
Not Before: Mar 2 09:52:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=609eb07e09878526be5cedd728c232a51ad9b851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9f:a0:2c:39:7f:ca:69:a0:f0:7c:46:fe:9e:
82:36:2c:ab:8e:b5:27:ab:ee:72:bf:fe:b5:77:81:
d0:b0:89:f1:4f:e4:be:e0:91:37:a2:91:98:a0:48:
59:7c:3e:62:d5:98:3a:0e:22:60:2a:4c:79:9f:80:
ef:e6:96:e4:e7:f8:b1:5c:3f:b5:c0:02:05:d7:a7:
00:6f:f9:10:44:42:c9:45:e3:26:49:78:c9:5a:76:
73:e4:5d:2a:50:26:61:7f:74:40:52:c8:3a:b7:e7:
34:0f:a7:23:ce:76:80:bd:1b:0a:37:4a:dc:fe:e9:
99:8a:8a:ce:85:c7:94:7b:f1:c9:e3:c0:b8:18:0d:
5f:de:58:7c:4c:20:5d:b1:48:e5:cc:a0:18:b0:0d:
8e:00:12:6a:c3:fb:ac:33:27:a4:95:50:a2:50:9e:
35:ef:c3:34:3f:68:56:e9:3e:d7:c4:0a:3a:86:d6:
fe:78:74:c2:76:90:d1:54:ae:4b:35:ea:4e:7e:a5:
2d:6b:20:d9:04:28:8e:85:9d:f4:41:3e:2d:62:17:
48:a2:28:e2:95:6c:9a:f9:93:59:da:94:af:ac:f2:
c7:44:79:a3:3c:0c:8d:8d:3b:ad:9d:a4:42:f1:c6:
12:b5:de:99:0c:7b:37:d5:0e:16:35:5d:df:dc:fd:
0d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9E:B0:7E:09:87:85:26:BE:5C:ED:D7:28:C2:32:A5:1A:D9:B8:51
X509v3 Authority Key Identifier:
keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/YJ6wfgmHhSa-XO3XKMIypRrZuFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.66.55.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:5b:cc:53:fb:66:78:54:c7:69:f0:92:35:f8:20:76:38:21:
5c:a7:fe:24:c2:73:59:39:f9:60:c2:61:8b:1e:b2:50:a5:52:
91:cd:48:98:d7:5c:e4:11:09:08:87:43:e7:fa:ec:9b:65:77:
a8:ab:80:3c:a5:14:6d:f4:a6:f8:65:1e:69:10:0e:8f:04:73:
0c:51:e1:7f:ab:44:4e:2e:e7:d8:7a:69:49:ca:45:96:b4:40:
7c:4b:74:d8:8d:90:aa:06:32:77:58:71:4f:81:b7:46:ce:45:
55:9e:de:0a:7e:b7:69:ef:8b:ee:88:19:a2:4a:96:3b:48:81:
8e:a2:61:7b:11:3f:e4:c4:f2:43:4f:38:22:3d:3a:42:0c:ae:
6a:06:c2:46:39:cc:bd:57:6b:c0:ab:ae:46:0e:ba:b0:bb:87:
f4:af:6f:76:2a:21:19:2a:bf:62:8d:b7:ef:12:9a:bc:28:36:
7b:0f:32:56:cb:7b:08:b0:0e:84:4a:b1:33:a4:5b:24:8c:8c:
40:3b:3a:c8:40:fe:7a:50:27:34:c8:8e:b8:fe:38:b7:8f:da:
57:96:3f:f2:23:62:96:94:1d:c0:f3:9c:5a:21:2d:87:13:54:
8f:0e:00:54:f8:f2:be:61:1d:36:b8:08:ae:61:2d:b7:cc:0d:
9f:19:9a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 09:19:05 2026 by rpki-client