Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/YJED_YuPGNN0TyGjqOEzNyynaPE.roa
File: YJED_YuPGNN0TyGjqOEzNyynaPE.roa (raw, json)
Hash identifier: /vnAPs3JdGVbMbaWCURGMhIGPbuLmXOnsDJQJ5/MLUc=
Subject key identifier: 60:91:03:FD:8B:8F:18:D3:74:4F:21:A3:A8:E1:33:37:2C:A7:68:F1
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019C253B52EA1DDD6E36AE7498003A0CC42B
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/YJED_YuPGNN0TyGjqOEzNyynaPE.roa
Signing time: Tue 03 Feb 2026 20:39:30 +0000
ROA not before: Tue 03 Feb 2026 20:39:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51847
IP address blocks: 84.245.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:25:3b:52:ea:1d:dd:6e:36:ae:74:98:00:3a:0c:c4:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 3 20:39:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=609103fd8b8f18d3744f21a3a8e133372ca768f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b5:6a:5f:d9:a9:62:ee:da:12:97:a7:c9:5f:
46:be:1b:00:2a:95:31:c2:73:2e:46:9a:42:d1:bb:
ba:f7:27:22:c3:06:f7:10:25:31:55:2a:da:1d:03:
0f:ea:60:5b:dc:87:5c:0a:0d:6d:07:33:e6:55:77:
be:cc:35:33:6b:a3:65:1a:89:fa:98:60:7b:43:30:
7e:43:2f:44:f2:74:c8:21:f4:f1:6f:d0:51:3e:63:
06:f7:88:f5:07:a7:11:c7:7a:28:97:45:70:de:e1:
bf:e5:a8:dd:b2:95:78:41:7b:93:87:d2:4e:96:c8:
7b:14:b0:f5:88:19:f2:25:52:3f:5c:89:0c:68:91:
4a:74:46:18:a8:4d:71:d9:3c:80:16:d6:57:f6:7a:
84:21:94:fb:c9:50:4f:e0:0b:e8:df:bd:87:9d:e9:
e2:f6:aa:83:a2:0a:92:2b:a0:cd:4c:60:d7:9c:0f:
23:65:2a:1c:02:d9:59:32:47:b4:dd:5e:d0:82:bd:
48:6a:53:9a:24:0d:bf:8b:e7:88:02:4c:1f:d9:80:
9a:83:bf:dc:3e:17:63:6f:6c:40:23:c5:6f:02:1d:
bc:89:ed:1d:10:0b:04:75:8d:e4:88:88:9c:4d:53:
fb:3b:dc:69:4f:a1:ff:f6:bb:af:1a:78:9f:9c:4c:
71:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:91:03:FD:8B:8F:18:D3:74:4F:21:A3:A8:E1:33:37:2C:A7:68:F1
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/YJED_YuPGNN0TyGjqOEzNyynaPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.245.0.0/20
Signature Algorithm: sha256WithRSAEncryption
5d:c8:f9:cb:95:38:c9:59:01:db:9f:c5:4d:09:23:8b:47:ab:
23:9e:d7:1c:44:df:28:14:c0:86:87:92:d0:85:61:bf:aa:a0:
dc:6e:6b:1d:9a:15:95:ff:ce:64:c2:d5:5e:7b:3e:53:0d:b3:
19:91:d9:da:da:b8:b4:56:37:51:fa:35:00:a2:52:dc:96:e0:
bc:71:53:14:22:5e:6a:3e:41:e5:c4:46:9d:12:31:27:42:93:
91:84:83:da:45:f5:15:b3:c5:de:72:53:24:5a:d3:10:9d:3a:
48:49:21:76:5a:63:9e:a4:df:84:e2:d7:71:1d:f4:99:ed:fe:
df:b7:d2:d7:dd:40:9f:8e:aa:b0:42:c5:b3:18:f7:f7:12:28:
8b:1f:f5:92:82:e2:01:94:53:35:c5:38:bb:ca:b9:f3:d9:e3:
13:da:3a:34:63:13:f3:b1:c6:e2:58:59:7b:99:d0:be:fb:f8:
2c:06:dd:8a:0e:58:d4:1d:96:97:44:7c:61:76:3c:23:8a:ac:
34:7b:fd:53:1d:9f:bd:c9:30:96:14:89:d1:bc:8d:30:1c:39:
67:8f:76:e9:c1:ea:ff:c5:f8:26:28:86:6d:3f:62:61:c6:5e:
b9:aa:41:e0:a4:e3:b1:68:3a:bc:6f:85:32:0a:42:b0:6f:9b:
4f:1e:1d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:06:13 2026 by rpki-client