Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ygjzap2ps9XKNCweRLMdVDM3eOU.roa
File: ygjzap2ps9XKNCweRLMdVDM3eOU.roa (raw, json)
Hash identifier: OsknBHg+qVBQAgv4CvRRqbWGV/klFxhwktV/Hqq8aLU=
Subject key identifier: CA:08:F3:6A:9D:A9:B3:D5:CA:34:2C:1E:44:B3:1D:54:33:37:78:E5
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A07A808889A9D2AC6C1EE6BACF8ACA58D6
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ygjzap2ps9XKNCweRLMdVDM3eOU.roa
Signing time: Mon 07 Sep 2026 06:13:58 +0000
ROA not before: Mon 07 Sep 2026 06:13:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209553
IP address blocks: 178.253.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7a:80:88:89:a9:d2:ac:6c:1e:e6:ba:cf:8a:ca:58:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 7 06:13:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca08f36a9da9b3d5ca342c1e44b31d54333778e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4b:8f:42:1e:92:9f:da:76:0a:20:92:d8:9d:
b4:07:05:22:94:a0:9d:1a:b1:2a:1f:d4:37:b0:8c:
83:e8:1f:4f:b8:ec:15:68:4d:00:91:2e:69:a6:b9:
be:a5:a1:1d:a7:d8:46:cf:e8:b2:18:fa:7b:e5:8f:
52:f2:ce:3e:a6:c7:f1:64:0e:6b:00:fd:c8:5a:20:
b5:72:c5:aa:98:1d:7f:22:64:37:71:2f:ef:81:c8:
fa:76:2b:da:af:79:6b:f5:86:ce:81:5a:85:28:97:
88:2f:e9:f5:b1:6b:da:59:4a:9d:f5:21:15:b7:a2:
ea:0f:ea:ba:84:df:14:83:92:6e:9a:81:54:24:15:
fb:84:2d:8a:87:28:ec:98:9f:19:0e:27:12:db:ad:
2b:8b:51:d2:10:cf:25:e4:f2:8a:78:c8:c6:80:1f:
58:68:b0:fa:4e:07:30:54:e2:d9:99:88:0f:cc:41:
8c:6d:5b:60:f3:16:6e:e3:a0:b7:ed:21:05:ca:76:
72:e3:08:0e:ad:c8:50:2c:4a:7c:7f:b4:51:33:16:
69:4f:7e:87:c2:df:a8:03:e6:25:82:49:df:de:9d:
a5:f6:77:a8:16:aa:ba:3e:b6:79:84:e0:63:58:0d:
a2:88:1f:c2:6f:3d:95:be:37:12:58:92:40:20:65:
e2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:08:F3:6A:9D:A9:B3:D5:CA:34:2C:1E:44:B3:1D:54:33:37:78:E5
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/ygjzap2ps9XKNCweRLMdVDM3eOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.227.0/24
Signature Algorithm: sha256WithRSAEncryption
39:8e:52:f1:dc:16:5f:ff:f3:13:fc:7f:f4:cf:e0:50:ef:91:
42:63:f0:5d:70:42:31:45:05:19:87:3a:6d:8c:bc:97:d5:8d:
6b:0c:66:f1:80:c1:0f:93:3a:8e:cc:13:a3:aa:b9:32:9d:52:
a2:51:71:28:ef:3c:85:33:f5:f2:00:f7:7e:88:79:0c:e6:8b:
16:72:da:d6:85:20:15:4c:21:59:7d:26:0a:23:77:74:2a:07:
fc:5f:8d:0e:75:16:d3:25:ee:32:aa:33:33:58:a1:ea:ce:98:
e6:a6:89:e0:46:f7:61:02:a6:73:4c:6a:a0:de:b7:0f:1c:27:
c5:59:08:ee:c9:40:f0:fa:0d:85:95:04:6f:a1:46:7c:21:1f:
04:54:e3:37:df:c9:67:44:fd:67:a5:57:3a:3f:d2:90:cb:85:
31:77:b9:03:0b:e9:18:34:47:9d:1a:88:67:e8:b5:51:8b:48:
83:a5:70:fb:86:69:6d:6a:e5:18:b1:a0:47:96:e5:e6:24:2e:
2d:0c:23:b3:e0:ab:07:b2:94:50:92:07:bb:81:b5:d4:4a:a5:
6e:13:79:3b:e3:5a:2a:0e:a1:e7:56:fd:3a:93:6f:53:7e:dc:
10:d9:cf:9b:0b:c5:72:3f:21:c6:48:68:e4:1d:22:72:40:6d:
a4:c5:f8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:45:42 2026 by rpki-client