Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/YnuWSiECKs46KqAQH2-p7CjlQBQ.roa
File: YnuWSiECKs46KqAQH2-p7CjlQBQ.roa (raw, json)
Hash identifier: CGPSpK9CwDyzIaayrss+ySc2HPgoYOHHQO7gmEb9KdE=
Subject key identifier: 62:7B:96:4A:21:02:2A:CE:3A:2A:A0:10:1F:6F:A9:EC:28:E5:40:14
Certificate issuer: /CN=97024ffc4927bfe35289435d9d0280420b8ecdcb
Certificate serial: 019B7EA730CB329B3D95C936ECE4228EA98B
Authority key identifier: 97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/YnuWSiECKs46KqAQH2-p7CjlQBQ.roa
Signing time: Fri 02 Jan 2026 12:20:44 +0000
ROA not before: Fri 02 Jan 2026 12:20:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210186
IP address blocks: 194.53.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a7:30:cb:32:9b:3d:95:c9:36:ec:e4:22:8e:a9:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97024ffc4927bfe35289435d9d0280420b8ecdcb
Validity
Not Before: Jan 2 12:20:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=627b964a21022ace3a2aa0101f6fa9ec28e54014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cc:ee:45:10:7a:8a:af:58:fd:5a:95:83:d8:
e4:40:61:4f:86:8e:88:18:8d:3a:5e:77:85:b6:7b:
b2:16:06:62:d0:75:e5:2e:9f:99:c5:a6:a4:ea:bc:
ea:4a:78:e7:6e:d8:c8:a3:7e:46:12:86:3f:11:0a:
81:71:a7:d5:3d:d8:87:c0:07:9b:64:67:42:4d:47:
50:7f:8c:bc:b3:09:93:55:0c:60:26:51:86:8b:e2:
a5:cf:fe:4a:5b:5c:31:fe:8f:51:fb:7a:e4:5d:19:
4d:a7:5a:c7:ce:05:16:24:23:3a:13:9a:66:a3:89:
e2:7a:5d:62:cd:97:59:4c:15:e0:9e:2d:bd:c4:bc:
f0:2a:21:5b:0f:d9:27:ed:26:23:3f:36:e7:97:20:
3b:f0:0b:c9:78:e4:51:ce:b3:83:51:1c:51:1a:b7:
48:32:72:ed:c3:7c:65:15:33:9a:fc:34:82:65:dd:
fc:75:53:46:01:d9:dd:4a:b2:a9:83:c6:51:b2:48:
9f:e7:a3:cd:4b:70:8c:0c:39:9d:08:39:08:92:c4:
93:5f:18:aa:51:5c:9c:de:ea:26:94:2a:70:96:48:
d2:30:db:1f:68:7c:7f:20:ce:a9:f4:a8:4b:a8:d6:
df:26:0e:ec:8a:59:74:89:7e:19:e3:42:d8:e4:ac:
ca:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7B:96:4A:21:02:2A:CE:3A:2A:A0:10:1F:6F:A9:EC:28:E5:40:14
X509v3 Authority Key Identifier:
keyid:97:02:4F:FC:49:27:BF:E3:52:89:43:5D:9D:02:80:42:0B:8E:CD:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwJP_Eknv-NSiUNdnQKAQguOzcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/YnuWSiECKs46KqAQH2-p7CjlQBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/717221-1d03-4d13-9049-401bda4477b5/1/lwJP_Eknv-NSiUNdnQKAQguOzcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.196.0/22
Signature Algorithm: sha256WithRSAEncryption
39:45:63:6d:b5:c5:85:b9:4d:02:ee:ba:6e:8f:ed:a6:c4:19:
9b:9c:7e:84:c0:76:f7:78:ff:cd:45:81:eb:67:cc:37:f5:f4:
83:a3:ea:f1:00:c7:f5:8a:e5:93:f4:e3:6d:ad:35:4f:01:3e:
4a:ed:ad:65:f9:4c:d3:46:d2:b0:9c:28:2f:4c:25:30:68:33:
eb:08:6c:f7:e8:bf:c1:c2:73:c3:4a:49:c8:f7:4c:08:9b:6a:
6e:66:2f:13:7b:b3:19:86:c1:22:eb:6b:cc:5f:28:bf:11:ce:
d4:2e:fb:86:6d:70:4a:43:f9:15:f7:4c:ef:c1:1b:ed:5f:cc:
a5:27:7b:6c:f3:82:6d:a2:e3:b9:1b:47:a9:7e:1c:ae:88:9b:
65:ce:f7:60:e2:37:c0:b3:b0:23:a5:a4:58:f8:0b:e0:cd:4d:
d6:54:00:a0:10:cf:ca:ad:6f:1b:24:e2:f7:c9:b0:34:10:95:
42:e2:41:34:57:18:b5:b2:e1:5d:c4:0e:20:51:d9:2c:fb:c9:
a4:09:88:33:4e:6b:50:18:3f:79:f6:33:04:75:fc:f8:a5:c8:
55:35:69:9f:45:3f:9b:b4:8e:fa:2b:4c:9d:5e:0d:24:93:21:
b4:b8:1d:a6:0d:ff:a8:ec:4d:01:63:d0:df:59:ca:0d:c6:2c:
32:24:b6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:25:05 2026 by rpki-client