Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yoOlkunfyIDQIpu8hSJPuV67N8k.roa
File: yoOlkunfyIDQIpu8hSJPuV67N8k.roa (raw, json)
Hash identifier: 3vGjw6ITVAmFgqvDm6vNVM3T1UQ++9p2OwqdlJ0wKCw=
Subject key identifier: CA:83:A5:92:E9:DF:C8:80:D0:22:9B:BC:85:22:4F:B9:5E:BB:37:C9
Certificate issuer: /CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
Certificate serial: 019C5FDE09F7D731B673D16F0D37EAFF4A8E
Authority key identifier: CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yoOlkunfyIDQIpu8hSJPuV67N8k.roa
Signing time: Sun 15 Feb 2026 05:55:12 +0000
ROA not before: Sun 15 Feb 2026 05:55:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 77.90.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:5f:de:09:f7:d7:31:b6:73:d1:6f:0d:37:ea:ff:4a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
Validity
Not Before: Feb 15 05:55:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca83a592e9dfc880d0229bbc85224fb95ebb37c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1a:e3:00:09:e7:ee:9f:22:e5:29:8d:8c:75:
80:95:29:aa:85:54:f7:cc:e3:c6:81:0b:df:90:1e:
63:fa:ee:d1:7d:8c:01:85:7d:5c:dc:1d:ab:af:c5:
31:f1:a4:ad:92:d8:2c:4a:eb:14:e2:f3:75:5a:69:
73:39:9f:c0:96:63:7a:31:3f:c0:f6:4d:26:fd:e6:
d1:a4:38:0e:1d:d9:43:c2:80:15:77:a3:32:c4:e9:
16:3d:ab:02:96:5f:8b:ca:b6:87:41:e5:d9:1f:f7:
b2:a5:4d:1c:8a:c0:2e:97:39:41:73:61:82:8f:49:
98:8e:70:38:dc:19:d1:2f:c8:bb:4b:16:7c:72:57:
1e:6e:ff:fd:d2:88:59:12:df:f0:57:ec:ff:c5:a5:
97:e8:42:a0:1b:56:5b:d4:9c:55:33:70:f2:54:89:
d3:af:aa:f2:14:74:6d:f3:a8:03:54:ab:ee:4a:5e:
16:91:59:29:30:da:8d:54:d1:42:2a:18:5e:86:f0:
fe:a0:39:21:a7:ad:88:63:04:c4:fb:65:34:78:7a:
a9:98:70:de:ad:36:57:2d:7d:b3:b8:02:aa:4f:c0:
02:ee:63:f3:4f:3a:70:95:9c:59:13:1b:92:e9:fc:
24:d9:23:17:44:f8:95:37:a3:cd:86:8e:2d:b8:7c:
42:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:83:A5:92:E9:DF:C8:80:D0:22:9B:BC:85:22:4F:B9:5E:BB:37:C9
X509v3 Authority Key Identifier:
keyid:CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yoOlkunfyIDQIpu8hSJPuV67N8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.102.0/24
Signature Algorithm: sha256WithRSAEncryption
47:72:d5:85:93:a2:b8:9a:18:c5:7b:d8:09:bd:0f:8f:cb:02:
9b:27:12:39:b3:c7:29:72:6b:38:0c:9d:12:14:23:f4:7f:ae:
7d:73:00:90:9d:b3:50:4b:19:13:94:6b:28:4b:79:00:ff:e3:
8a:0d:91:e9:58:35:18:55:7c:95:7f:cd:72:53:5e:21:b4:2b:
7e:f6:75:9f:ca:c5:49:1a:58:23:9c:f2:1b:65:3a:7b:5f:2d:
37:e1:78:7e:dc:40:a9:32:cb:82:67:71:79:f4:4c:bb:c6:0f:
f7:e2:12:54:08:0a:80:85:4b:22:d0:28:30:e9:19:2b:8a:f0:
ea:32:45:66:02:0d:69:3f:f6:8d:6d:46:18:e2:41:e1:a6:08:
38:1b:ff:32:ce:21:07:e1:04:1a:b1:33:12:8e:de:da:4d:68:
17:90:5b:fe:ac:ab:1f:e2:7e:aa:0e:ba:e7:02:f3:26:76:4d:
fd:42:c7:96:56:c1:ec:4c:fa:8c:5b:e5:59:af:3a:0f:00:7f:
01:bc:6d:46:a7:ba:68:6c:7f:ea:0c:ac:fc:ee:a0:90:0e:72:
e1:a4:d9:e7:8a:a2:c4:fa:66:02:d7:9e:21:de:f7:63:66:90:
15:4c:ee:d4:10:90:df:91:c2:26:8b:a0:f3:b9:cd:1c:f7:de:
30:75:a9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:19:31 2026 by rpki-client