Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/YZU5h2cJPs993oeBmAc82_JPG4k.roa
File: YZU5h2cJPs993oeBmAc82_JPG4k.roa (raw, json)
Hash identifier: JlU2N1oKnkfBo3YZbM9h2zkBZpc0rh/bJMlA2t9a81A=
Subject key identifier: 61:95:39:87:67:09:3E:CF:7D:DE:87:81:98:07:3C:DB:F2:4F:1B:89
Certificate issuer: /CN=48519673dd0a9cf57895520af37c2a8183dce168
Certificate serial: 019B79ED0D76218F4BA3398CF432AAA100FC
Authority key identifier: 48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/YZU5h2cJPs993oeBmAc82_JPG4k.roa
Signing time: Thu 01 Jan 2026 14:18:57 +0000
ROA not before: Thu 01 Jan 2026 14:18:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50628
IP address blocks: 193.202.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ed:0d:76:21:8f:4b:a3:39:8c:f4:32:aa:a1:00:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48519673dd0a9cf57895520af37c2a8183dce168
Validity
Not Before: Jan 1 14:18:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6195398767093ecf7dde878198073cdbf24f1b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cf:3e:19:91:3f:44:5c:2b:9e:44:3a:20:7e:
69:74:34:df:78:c1:7f:eb:11:93:a4:28:d9:79:29:
06:6e:ea:36:93:89:04:66:a4:ec:83:c1:08:70:03:
2c:56:40:02:99:a9:42:89:f2:69:5f:04:0b:55:ce:
f2:86:51:88:dd:e2:5e:dc:b6:de:cb:af:10:dd:35:
5b:ec:b2:78:75:62:f4:3f:8e:c6:2e:cf:b9:08:76:
bb:fd:a8:b3:d2:35:cb:ce:32:a7:46:ac:5a:a3:60:
fa:d3:36:27:f8:c2:fe:2d:2e:9e:28:88:94:21:6c:
7d:7e:b2:ba:16:9a:67:42:8a:94:9f:f2:e3:e9:f6:
e9:50:95:82:a8:34:e7:36:05:8c:2f:ca:fa:74:52:
da:e5:9b:8c:5b:7f:f6:d4:ae:d7:9b:6b:71:80:de:
bc:cc:60:f7:6e:48:be:e9:8f:9b:a0:53:3c:94:26:
b6:fb:cb:ba:01:5e:76:2c:a9:df:45:77:4b:52:68:
ee:ed:a9:34:57:91:3d:1b:5b:6c:e6:a6:a9:2b:dc:
c6:8a:29:40:95:77:a7:a3:09:d2:c6:6d:30:ad:5c:
3e:82:1c:46:d9:fc:ee:07:70:ca:0b:42:95:d9:30:
04:e8:94:4e:42:fc:6d:d3:5f:e7:11:f6:67:c6:32:
e5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:95:39:87:67:09:3E:CF:7D:DE:87:81:98:07:3C:DB:F2:4F:1B:89
X509v3 Authority Key Identifier:
keyid:48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/YZU5h2cJPs993oeBmAc82_JPG4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.0.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:9d:ec:10:3b:29:ec:3b:ed:b8:ff:cc:7c:1e:6d:23:a8:15:
1c:da:59:9e:23:48:54:80:7d:18:c3:56:fb:6a:45:ae:a3:60:
c0:fd:98:d2:d9:09:54:57:0f:68:a0:01:f1:70:b0:45:1f:18:
d3:ce:f8:bc:12:77:65:14:fb:9c:33:10:10:f6:2e:38:56:24:
8e:87:fe:12:c4:54:04:25:af:51:4f:79:ce:f1:aa:03:13:52:
b9:28:1c:a1:5f:72:41:d0:54:b3:0b:97:7a:43:68:68:84:be:
8b:e2:bd:90:a7:b7:8c:96:97:83:d5:0c:2b:d5:ce:c3:44:ab:
ec:6e:ff:0b:75:fa:21:31:0b:82:d8:bf:84:92:37:65:56:6f:
1f:b9:db:e4:78:9d:5d:66:22:b4:ff:03:e7:a6:fb:f6:4d:10:
d5:6e:f7:37:3f:1e:c8:9a:74:f3:a3:dc:db:3e:be:bb:b1:29:
6d:fc:62:1a:f2:db:01:c8:c9:45:be:43:b6:bd:b2:87:e3:45:
ad:e6:19:a9:02:b2:e7:ea:9c:f7:45:61:0f:4a:f7:68:12:29:
0e:76:45:a3:35:28:fd:cd:24:1a:a1:89:54:89:6c:56:21:f9:
d1:1a:45:73:04:11:fc:25:c1:5c:9b:c6:06:b7:e8:3d:ba:33:
fd:53:e6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:35:48 2026 by rpki-client