Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YymgUz-yMQGDPP4MROtYLA89E74.roa
File: YymgUz-yMQGDPP4MROtYLA89E74.roa (raw, json)
Hash identifier: nEnPPGt5UBNZfh8KWP1TSMLTDZZ38HKbE9QAVhlvCmk=
Subject key identifier: 63:29:A0:53:3F:B2:31:01:83:3C:FE:0C:44:EB:58:2C:0F:3D:13:BE
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01A0D3D7423E88959C160556B18CE6584FDB
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YymgUz-yMQGDPP4MROtYLA89E74.roa
Signing time: Thu 24 Sep 2026 14:34:54 +0000
ROA not before: Thu 24 Sep 2026 14:34:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43440
IP address blocks: 104.238.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:d7:42:3e:88:95:9c:16:05:56:b1:8c:e6:58:4f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Sep 24 14:34:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6329a0533fb23101833cfe0c44eb582c0f3d13be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:30:80:a0:66:b3:0f:6b:c3:7d:f6:6f:1c:2c:
94:1b:f6:17:14:af:a5:d5:7a:15:9a:e7:08:9b:9e:
82:a5:e9:ff:65:bf:56:8e:42:76:8d:ee:22:8f:d0:
6d:7a:43:5c:cb:25:29:a7:65:71:52:96:c1:e5:68:
5e:4e:3b:e9:54:ae:7a:6d:9c:75:8d:d2:56:a8:bb:
90:9e:8d:5e:2b:a7:f8:69:f7:a9:37:8f:7f:10:08:
1d:b6:3a:0a:ce:f1:d5:c8:fe:77:c7:23:46:3d:f5:
ed:1a:24:a6:19:86:66:b8:2d:90:6c:b7:73:53:68:
61:ba:58:d2:f6:cf:ac:b2:03:7d:db:7b:de:9b:5e:
7a:59:5f:9a:a3:75:32:19:9d:1f:c5:c5:65:1a:e2:
c0:55:38:84:1b:82:ce:ac:ba:a3:4d:df:83:be:c4:
eb:9d:49:e0:25:02:b4:86:e5:62:ab:fe:98:51:f3:
74:a4:f9:c4:da:75:7f:36:0b:2e:3e:6e:fb:58:3d:
b4:4b:03:db:05:33:f7:0d:ca:e6:eb:e0:6f:fa:ec:
3b:c2:04:16:05:33:34:f3:95:e2:fc:94:21:ea:17:
3d:bf:41:2b:d2:78:b8:f1:d2:16:f2:2b:14:d8:aa:
bf:d0:37:53:b3:59:33:a3:0f:d0:81:d4:6b:58:0f:
f3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:29:A0:53:3F:B2:31:01:83:3C:FE:0C:44:EB:58:2C:0F:3D:13:BE
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YymgUz-yMQGDPP4MROtYLA89E74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.238.2.0/24
Signature Algorithm: sha256WithRSAEncryption
48:bb:17:dd:2e:ae:66:8f:d3:2d:54:74:58:1a:2a:f5:d2:4d:
1d:63:b3:bc:8e:48:17:bb:01:7e:09:50:44:6e:96:37:ad:a1:
28:e0:9f:a2:99:20:18:23:37:c6:21:e3:db:17:fd:b7:2a:49:
2f:7f:b0:54:42:5b:b5:0c:e2:cd:b9:0d:e4:8a:03:b5:98:38:
3c:3f:cd:10:e9:cf:10:94:46:6a:8b:1f:2f:ee:22:b0:25:57:
42:19:bd:6d:17:50:10:4b:29:14:03:b5:12:9d:5c:5b:10:3a:
d2:d0:0e:6e:58:ec:43:b8:43:07:1c:76:67:90:71:06:0d:11:
c1:75:8a:4b:e0:91:40:fe:3f:83:b3:fb:c1:dc:9b:1d:99:93:
57:31:b7:f4:fe:b8:5f:96:30:12:99:c1:c1:83:65:47:ae:57:
7d:35:81:37:69:5a:c4:6e:cd:ef:33:ac:18:11:bd:16:4d:9c:
68:44:f2:7b:07:75:f2:90:ef:e8:89:aa:b9:ea:9a:1c:e7:df:
15:18:f4:99:ca:ab:25:a7:30:c6:e8:59:f9:84:11:82:b2:0d:
80:06:19:c9:23:8a:d4:17:a4:ff:03:d6:b2:01:1c:6a:26:75:
14:57:a7:ec:7f:73:19:08:27:f3:61:12:8d:f0:f1:10:ff:d4:
ef:b2:5b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:17:57 2026 by rpki-client