Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/YlFGs-OuVmr5qbRkCLrdtGCvFJ8.roa
File: YlFGs-OuVmr5qbRkCLrdtGCvFJ8.roa (raw, json)
Hash identifier: WwZ+U0OLXHVEmaCO7XnTnKG6Dklx2LrGilZE0KoVuAE=
Subject key identifier: 62:51:46:B3:E3:AE:56:6A:F9:A9:B4:64:08:BA:DD:B4:60:AF:14:9F
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019D9CC34724202994988808CC7159784C1F
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/YlFGs-OuVmr5qbRkCLrdtGCvFJ8.roa
Signing time: Fri 17 Apr 2026 18:45:36 +0000
ROA not before: Fri 17 Apr 2026 18:45:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215540
IP address blocks: 93.190.13.0/24 maxlen: 24
185.141.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:c3:47:24:20:29:94:98:88:08:cc:71:59:78:4c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Apr 17 18:45:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=625146b3e3ae566af9a9b46408baddb460af149f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bd:f4:85:0c:dd:7c:ea:b0:d5:6b:24:ef:df:
be:ef:58:30:15:53:e2:f9:5b:65:bd:17:07:e5:f6:
47:2a:95:1e:b3:9d:77:a6:c2:9b:f7:95:dd:68:b5:
91:29:97:d4:d9:28:c1:6b:84:71:71:f5:54:30:aa:
22:72:15:2a:f7:a1:61:83:37:06:20:3d:b9:96:12:
a4:b9:d7:48:3a:c9:fd:d3:97:82:84:39:a7:f5:5e:
74:1e:d9:b8:1d:2f:d0:60:ba:80:12:eb:06:bd:f2:
43:94:70:6f:fa:56:95:e7:d4:1b:e1:3d:60:39:4c:
77:46:9b:f5:06:42:42:2c:3d:bc:3e:d8:8c:6a:c2:
cb:6c:3b:16:07:83:13:23:a5:a0:c7:6e:02:8f:22:
f2:ae:36:7b:79:cb:f0:1c:88:53:06:89:86:b2:63:
0c:8a:c5:4d:bd:23:e7:19:e4:ce:63:8f:83:cd:4a:
2c:1e:49:d1:e9:30:19:5e:70:a4:ce:0a:22:34:96:
81:ae:d1:38:8e:3b:c4:61:60:43:c5:e5:32:2e:47:
07:48:b7:5f:8a:8a:6f:de:10:1b:68:e9:4b:9a:3c:
8a:30:80:88:cc:7b:59:59:16:57:07:80:5d:ca:70:
e8:23:26:af:dc:35:aa:01:7a:f5:74:98:4c:79:b7:
19:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:51:46:B3:E3:AE:56:6A:F9:A9:B4:64:08:BA:DD:B4:60:AF:14:9F
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/YlFGs-OuVmr5qbRkCLrdtGCvFJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.13.0/24
185.141.35.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:66:17:ae:49:75:53:34:d5:06:ce:c4:4c:32:76:9a:a0:f0:
10:d1:32:5a:94:99:54:ef:e6:0f:0c:a1:db:4a:a6:29:c2:4b:
2c:c7:13:d0:1d:18:9b:2b:08:f5:d8:9d:50:d5:99:31:6a:3c:
d7:a3:17:eb:3a:58:f3:e5:59:13:09:77:98:53:14:38:1a:14:
1b:da:90:db:b8:86:e7:a7:ed:89:a9:7e:c4:8e:04:fd:37:48:
c3:ce:da:b4:22:31:f6:75:c1:fc:87:11:1a:bf:59:bb:45:cc:
36:ba:22:19:c8:7b:60:f5:a8:89:b2:b6:2f:9e:4e:e0:ed:7d:
4f:89:2a:b8:4d:52:46:14:b8:15:14:7f:30:d9:ba:51:2e:dc:
ca:03:71:e8:2d:b1:df:36:15:c8:b1:41:06:f6:de:21:95:48:
83:0a:6e:13:8a:d7:ed:81:7c:60:83:b1:26:f0:f3:6c:62:d8:
d0:50:4b:ca:36:2b:d0:f5:76:20:1d:af:88:3c:3c:dd:66:cb:
20:b5:73:b7:83:73:24:f0:13:6a:4e:d8:9c:b5:5e:92:63:4f:
91:2e:4c:cf:ac:e0:34:39:ea:01:6f:af:37:97:20:ff:38:45:
f8:84:cd:82:96:1e:11:51:42:d5:e8:d6:36:22:cf:26:fb:aa:
e5:a2:89:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:12:23 2026 by rpki-client