Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/Y76_y_xLVztNK39T96pu_rBSKLo.roa
File: Y76_y_xLVztNK39T96pu_rBSKLo.roa (raw, json)
Hash identifier: 9BvqRt1UWnSCDtktvQou5BOZ1pz9BvWMZVJv4pDcqvs=
Subject key identifier: 63:BE:BF:CB:FC:4B:57:3B:4D:2B:7F:53:F7:AA:6E:FE:B0:52:28:BA
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 019C41D8EE1911346397B6D2B6AC6B25CE54
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/Y76_y_xLVztNK39T96pu_rBSKLo.roa
Signing time: Mon 09 Feb 2026 10:01:01 +0000
ROA not before: Mon 09 Feb 2026 10:01:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214196
IP address blocks: 88.210.62.0/24 maxlen: 24
138.226.236.0/24 maxlen: 24
138.226.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:ee:19:11:34:63:97:b6:d2:b6:ac:6b:25:ce:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Feb 9 10:01:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63bebfcbfc4b573b4d2b7f53f7aa6efeb05228ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a0:a5:29:84:a7:d9:41:25:b7:04:bd:2d:08:
0c:95:43:7c:b5:a3:73:6e:25:10:61:50:9d:29:47:
80:b0:7f:f9:cc:82:27:1b:d8:72:7b:8b:ae:01:29:
02:70:c4:30:63:99:d6:63:2f:53:d4:0e:25:fc:d0:
f4:67:4e:ef:ba:65:db:0b:97:e6:08:f0:0f:61:fd:
e2:9d:09:71:82:96:ca:29:4a:ae:cd:63:d0:3c:75:
08:59:d0:02:23:63:6b:69:fe:e7:45:97:5c:f5:20:
78:bf:21:59:13:e1:3f:95:79:66:14:82:e6:40:4e:
16:25:62:c1:54:7a:d5:82:9a:f4:09:ce:b8:e3:9c:
8b:6a:c6:dd:8b:19:60:fa:2a:55:ad:50:66:d4:7c:
80:95:6a:ee:ed:1b:9e:65:f4:e9:71:66:ba:0d:99:
a6:56:2c:54:2a:e3:c6:59:c3:1e:46:30:6e:9e:35:
09:39:55:25:aa:cc:4c:b3:50:de:d4:c5:bd:10:1d:
c3:f3:1a:f8:42:bc:9d:4b:fb:a4:b2:6a:10:04:03:
8d:78:02:32:68:5f:13:b9:c8:f5:50:a8:5f:53:ea:
d0:16:bc:20:13:f4:c6:ee:7f:12:2a:9f:bd:36:e6:
24:b0:2f:dd:a9:62:cf:57:6f:72:4f:de:62:e5:fc:
aa:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BE:BF:CB:FC:4B:57:3B:4D:2B:7F:53:F7:AA:6E:FE:B0:52:28:BA
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/Y76_y_xLVztNK39T96pu_rBSKLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.210.62.0/24
138.226.236.0/23
Signature Algorithm: sha256WithRSAEncryption
02:dd:9e:72:cc:b9:06:f4:7d:33:1f:56:e3:2b:91:05:56:44:
bc:7d:a1:95:09:bc:e6:c9:0d:ec:c2:e0:49:7c:4d:42:7f:93:
b7:54:4a:90:e2:f8:69:92:b6:3f:2f:92:66:f3:de:36:0e:60:
47:ed:6f:b1:d2:f4:3f:e4:ec:34:cf:13:3a:3d:74:f8:32:c4:
ee:88:9c:fc:8f:4f:49:1b:53:38:00:19:67:bc:05:a5:50:a3:
03:f3:a4:e7:0b:76:47:50:7a:07:6f:7c:a6:5f:e2:fb:19:d5:
e8:53:90:0d:83:e7:5e:99:af:d8:4b:da:94:c8:3a:7d:aa:66:
aa:f7:8b:14:25:77:7a:69:0a:56:48:42:35:2b:f6:d1:2a:fc:
31:68:bc:31:80:af:dd:11:a9:ed:73:3c:7e:b2:21:b2:62:f9:
b3:31:04:0f:9f:19:18:76:66:65:de:67:94:9a:23:5b:3c:6f:
05:60:c0:30:e8:77:2d:ea:68:25:47:30:09:07:85:b8:54:57:
3d:27:a8:a4:a1:e8:67:b6:e4:c9:c3:3d:a6:e1:c9:82:1b:cb:
24:3a:f0:c1:db:29:70:31:9e:20:7f:16:0d:a6:31:ad:dd:04:
bb:c4:1b:1d:2f:e4:74:65:c2:32:4a:a3:dc:cc:b9:a7:6f:76:
49:55:8b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:06:05 2026 by rpki-client