Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/YnRGbn23osm23sihEIW9_mzI2RQ.roa
File: YnRGbn23osm23sihEIW9_mzI2RQ.roa (raw, json)
Hash identifier: aJ8GIGyGcSVIwVpN+pZVEdbKfxFXPkETizLUGD7ljB8=
Subject key identifier: 62:74:46:6E:7D:B7:A2:C9:B6:DE:C8:A1:10:85:BD:FE:6C:C8:D9:14
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019C8F0CCE37A6EDE8575135EF59E41CFD53
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/YnRGbn23osm23sihEIW9_mzI2RQ.roa
Signing time: Tue 24 Feb 2026 09:48:26 +0000
ROA not before: Tue 24 Feb 2026 09:48:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17497
IP address blocks: 89.126.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8f:0c:ce:37:a6:ed:e8:57:51:35:ef:59:e4:1c:fd:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Feb 24 09:48:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6274466e7db7a2c9b6dec8a11085bdfe6cc8d914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d3:c1:fd:13:c7:10:f3:ff:97:0b:83:f8:a9:
4a:78:df:9b:59:4b:13:64:23:ef:25:ff:b4:dd:d2:
c2:29:a5:f4:43:09:61:83:87:68:e7:19:9c:17:ca:
46:e0:db:d3:47:9d:07:f0:d5:50:55:71:4d:a5:4c:
b7:81:d1:d0:3a:06:d5:f1:89:72:81:d4:04:2f:50:
83:3c:59:25:d6:af:21:3c:42:28:1d:46:df:0a:f9:
f5:e3:bd:f3:88:8f:75:e2:49:77:84:4d:d1:d3:4d:
8f:75:a3:f3:ac:15:d0:d0:b1:09:bd:6f:55:6d:18:
6b:e0:59:45:f4:58:c3:b4:60:72:d8:74:98:82:40:
bc:97:11:54:cb:6d:a9:74:89:58:78:b8:00:ef:d3:
0e:56:c6:0b:5d:b5:53:81:b8:d1:5a:14:49:1b:11:
98:c3:43:9e:ca:90:b1:e5:2c:9b:28:a9:2c:b8:48:
f2:1d:22:ed:37:9b:20:83:5f:c9:91:de:e6:7a:40:
82:89:8a:bd:49:33:a2:54:ba:52:1f:b7:55:7b:46:
e6:89:19:87:e7:9b:92:2a:8c:0a:79:4f:aa:6f:f2:
5a:b0:6d:ee:1d:7f:74:98:e7:7e:c7:00:0d:b6:a2:
45:c6:9a:72:d2:fe:a3:e7:3d:46:d0:4b:9c:64:56:
b7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:74:46:6E:7D:B7:A2:C9:B6:DE:C8:A1:10:85:BD:FE:6C:C8:D9:14
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/YnRGbn23osm23sihEIW9_mzI2RQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.126.227.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:24:cb:ac:e6:8d:91:4c:cc:57:99:8d:b9:81:9c:88:ba:46:
13:44:af:0a:c2:f2:b3:6f:1a:c7:78:2f:c7:3b:e7:05:ab:26:
20:87:8d:2a:4b:6a:04:50:63:ac:2f:3f:3f:8a:ad:1b:9b:db:
c9:85:41:84:87:ce:06:ec:e5:00:c4:d7:3d:8c:30:a0:1b:3e:
0d:8d:50:2a:f8:14:c5:55:0e:b5:a1:0c:81:a7:f0:1b:dc:52:
1d:28:bc:7e:d5:57:50:34:db:d4:13:51:9a:c9:33:03:90:53:
ad:27:e7:03:c6:9d:98:c9:83:8a:22:b6:50:4c:56:4b:a7:64:
b1:a3:3a:21:d0:dc:df:b0:ec:a1:88:d6:7d:23:02:99:aa:d4:
10:25:65:a6:ca:3f:16:84:4f:02:7a:fb:57:b9:d0:ab:4f:b9:
5b:ea:13:51:6c:c0:58:e8:de:62:0b:97:3f:89:c3:33:1b:5b:
ae:1e:a5:c9:a6:c1:d9:d9:25:78:11:1c:bc:97:4b:6c:be:3e:
fe:25:92:51:3f:ac:16:fb:0e:7c:5a:ca:05:ff:ca:3e:3d:ce:
15:c5:1b:95:0b:66:d0:d2:cb:49:48:63:f6:d5:b1:3d:72:91:
9c:ac:70:32:0f:49:b6:2e:ed:0d:f5:fe:0f:24:8c:7e:9d:21:
8b:c7:78:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:04:41 2026 by rpki-client