Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/ynXUxqrdFjV2uDjhRAtcxC3THvU.roa
File: ynXUxqrdFjV2uDjhRAtcxC3THvU.roa (raw, json)
Hash identifier: +COHT3b/rqZFicrkLpp20JO0GYnlMEA+hKZxaCTFAkE=
Subject key identifier: CA:75:D4:C6:AA:DD:16:35:76:B8:38:E1:44:0B:5C:C4:2D:D3:1E:F5
Certificate issuer: /CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74
Certificate serial: 019B7B3662DEE29AB03C4A43FCB606DA993B
Authority key identifier: 4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/ynXUxqrdFjV2uDjhRAtcxC3THvU.roa
Signing time: Thu 01 Jan 2026 20:18:40 +0000
ROA not before: Thu 01 Jan 2026 20:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61985
IP address blocks: 93.159.216.0/22 maxlen: 22
93.159.216.0/23 maxlen: 23
93.159.218.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:62:de:e2:9a:b0:3c:4a:43:fc:b6:06:da:99:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74
Validity
Not Before: Jan 1 20:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca75d4c6aadd163576b838e1440b5cc42dd31ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:19:66:5a:42:26:80:3b:c5:da:5a:23:20:9b:
dd:58:f1:8f:7e:75:c5:a3:0d:a4:8e:5b:cc:85:28:
c6:2f:00:fb:00:1d:ab:7b:5f:3f:15:d0:21:50:fa:
ba:fd:bb:ff:40:99:d1:e0:b6:9f:cd:1b:52:d7:d2:
e0:4e:ac:f4:ee:c6:95:89:9b:83:37:7a:2f:e6:37:
d6:ba:b7:b5:2a:cf:79:bb:62:9f:a0:a2:bd:20:9c:
d7:51:86:48:55:2a:e5:aa:a2:0b:c8:43:69:f8:fc:
6f:b7:0f:3a:e5:73:68:06:c2:96:8f:99:8a:6c:12:
97:73:77:50:cb:87:a1:ba:81:1b:5e:52:ac:ed:96:
e3:94:44:90:14:29:da:67:68:88:fb:ce:ca:39:71:
1b:96:d7:f8:3d:25:e5:95:5d:8f:da:86:c4:23:68:
8c:bc:fa:42:a7:20:85:65:97:fc:1f:7d:e6:39:4d:
9b:02:52:85:54:26:ae:e0:8b:30:a1:23:c6:e6:d7:
91:b7:83:0d:b2:8a:fc:87:08:3c:60:0d:aa:07:71:
97:53:42:f1:e1:6d:8b:7f:16:f6:dd:9b:2a:ff:6f:
37:64:77:80:12:e6:91:66:fa:40:77:62:42:f7:c2:
4f:42:07:08:fa:2f:a9:fa:b8:96:b9:ca:7d:2d:37:
cb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:75:D4:C6:AA:DD:16:35:76:B8:38:E1:44:0B:5C:C4:2D:D3:1E:F5
X509v3 Authority Key Identifier:
keyid:4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/ynXUxqrdFjV2uDjhRAtcxC3THvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.159.216.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:5f:cb:45:57:ac:67:18:ce:8c:9f:bd:dd:de:9d:dd:d2:a6:
fd:2d:15:05:e1:dc:31:e2:63:ff:05:6b:b3:0d:ba:85:e1:b1:
13:e4:d5:91:c4:40:ba:0a:04:f0:66:f4:2d:fb:a0:ad:b1:73:
f3:45:b0:a0:89:fb:fe:2f:ca:6a:4c:74:8a:86:8d:c6:84:4a:
7a:28:46:12:62:59:7b:9a:0a:5d:42:8e:92:40:8a:97:00:ca:
bc:37:8a:fa:00:52:82:ce:ec:60:61:61:82:ec:c9:ab:11:f3:
94:e4:02:32:c9:0f:93:6c:71:f5:64:ad:4a:53:24:32:99:19:
12:c9:b2:4a:61:1d:7f:bc:b8:81:9b:34:b9:4c:9a:68:45:78:
12:a6:ec:af:78:f2:78:41:8e:f0:16:c2:81:77:06:bf:65:d3:
91:67:36:47:3b:29:df:6e:55:41:5f:d0:26:8b:fc:49:c6:2e:
b3:f0:5a:a8:b2:01:00:94:6b:b6:93:8c:63:2d:48:6f:3d:3a:
97:38:04:74:89:d8:fc:90:05:20:75:20:96:2c:06:15:86:c1:
7d:49:d6:8f:ce:ec:42:6d:fa:ea:3c:37:e5:58:c1:7b:11:88:
b6:5b:d3:7e:d3:8e:62:94:c6:92:c5:13:d7:6f:96:2d:a6:96:
c6:31:0d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:04:33 2026 by rpki-client