Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/yt-wd7M-USZYSJ2xYJHYfZ81HPc.roa
File: yt-wd7M-USZYSJ2xYJHYfZ81HPc.roa (raw, json)
Hash identifier: uUXr6R5WcWP58SeIkPBHDTo9HBxnrWLQ4sxp1q/aKaA=
Subject key identifier: CA:DF:B0:77:B3:3E:51:26:58:48:9D:B1:60:91:D8:7D:9F:35:1C:F7
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 01A0544C2987F52417273A24A8CD00636948
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/yt-wd7M-USZYSJ2xYJHYfZ81HPc.roa
Signing time: Sun 30 Aug 2026 20:11:12 +0000
ROA not before: Sun 30 Aug 2026 20:11:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 10753
IP address blocks: 87.76.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:33:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:54:4c:29:87:f5:24:17:27:3a:24:a8:cd:00:63:69:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Aug 30 20:11:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cadfb077b33e512658489db16091d87d9f351cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:13:d4:df:77:82:a4:c1:58:cb:71:fe:4c:5d:
1a:21:d3:f8:d0:a5:31:c5:4f:6a:63:52:84:7a:02:
a5:da:89:ec:16:89:52:c5:d8:3f:14:c2:38:26:bb:
3a:1f:e6:8a:08:c3:fd:db:1d:7f:4c:e1:fe:c4:0e:
6b:04:aa:3a:95:88:3f:f6:2e:28:ab:a4:f1:2e:39:
0a:2f:ca:9e:c9:0c:08:18:80:b6:86:34:82:75:49:
25:f8:53:d8:c8:9e:19:97:93:69:f1:cc:23:0d:f1:
61:da:a0:b9:6b:f4:91:3b:3d:b2:6d:86:f7:db:b6:
30:9e:a8:ee:43:ff:7e:eb:82:07:d4:4a:9f:c6:3a:
76:03:35:7d:51:59:8e:c1:1f:ee:c3:2d:58:f1:6c:
60:c3:ae:2b:71:25:4d:78:4b:66:5e:84:38:cf:02:
9f:73:05:75:5c:1d:10:fa:63:13:72:df:64:2b:71:
b4:02:40:f4:a2:1a:18:a2:70:c8:c1:8f:5c:a7:43:
74:ce:c2:32:30:21:d4:7f:2c:e0:31:4a:4c:95:95:
60:91:54:3a:20:44:56:1b:da:1a:77:6d:a6:bc:42:
e4:4b:58:80:c7:da:e0:a6:44:33:86:03:1e:cc:41:
b6:3f:d4:8b:c3:5c:dd:0e:42:72:b7:d3:9b:08:52:
ec:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DF:B0:77:B3:3E:51:26:58:48:9D:B1:60:91:D8:7D:9F:35:1C:F7
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/yt-wd7M-USZYSJ2xYJHYfZ81HPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.214.0/24
Signature Algorithm: sha256WithRSAEncryption
69:a7:4b:b8:1b:52:e9:cb:b0:41:6b:4c:4c:d1:a5:5b:ef:69:
43:e9:67:4d:8a:e5:ae:a1:92:7b:0e:ce:d8:99:d3:7e:a8:57:
3e:9d:cc:ba:11:60:d1:b1:d6:ef:e1:1d:db:e2:58:a3:57:33:
63:80:ce:d0:54:30:56:7a:f5:77:fa:1e:d2:8b:c8:b0:76:5d:
e1:01:cf:d1:b1:85:df:cb:8e:49:fc:a7:9e:8d:54:b1:df:3b:
c5:04:a9:58:02:99:d7:3a:fe:ce:9a:54:6d:7f:4a:ee:c4:60:
41:aa:09:01:19:5b:c9:80:6d:04:dd:be:28:dd:00:40:35:f3:
2a:e6:65:7b:1c:f3:8a:0e:21:a0:b8:88:96:cb:b8:59:03:85:
64:c4:84:25:6e:0f:15:c4:5f:02:c0:cd:13:8a:39:cf:41:57:
45:4e:99:48:79:78:02:08:8d:9f:29:a0:51:49:a4:1d:56:0d:
20:84:00:bc:b4:2b:d7:e1:b3:1a:07:f6:ec:3c:33:49:b0:24:
cb:a0:7e:c3:e8:6c:ba:ea:62:70:11:64:f5:a5:16:91:84:7e:
2f:aa:76:11:57:a6:ec:c4:fd:4b:5a:07:79:be:39:c5:8e:e6:
63:68:4a:1d:5c:98:7e:b8:fb:2d:e8:18:1f:7f:fb:90:71:7e:
2f:45:60:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBUTCmH9SQXJzokqM0AY2lIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1
MzBiMDkwHhcNMjYwODMwMjAxMTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYWRmYjA3N2IzM2U1MTI2NTg0ODlkYjE2MDkxZDg3ZDlmMzUxY2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRPU33eCpMFYy3H+TF0aIdP40KUx
xU9qY1KEegKl2onsFolSxdg/FMI4Jrs6H+aKCMP92x1/TOH+xA5rBKo6lYg/9i4o
q6TxLjkKL8qeyQwIGIC2hjSCdUkl+FPYyJ4Zl5Np8cwjDfFh2qC5a/SROz2ybYb3
27YwnqjuQ/9+64IH1Eqfxjp2AzV9UVmOwR/uwy1Y8Wxgw64rcSVNeEtmXoQ4zwKf
cwV1XB0Q+mMTct9kK3G0AkD0ohoYonDIwY9cp0N0zsIyMCHUfyzgMUpMlZVgkVQ6
IERWG9oad22mvELkS1iAx9rgpkQzhgMezEG2P9SLw1zdDkJyt9ObCFLscwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMrfsHezPlEmWEidsWCR2H2fNRz3MB8GA1UdIwQY
MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt
M2JiOGIwNzVkNjlmLzEveXQtd2Q3TS1VU1pZU0oyeFlKSFlmWjgxSFBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm
LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV0zWMA0G
CSqGSIb3DQEBCwUAA4IBAQBpp0u4G1Lpy7BBa0xM0aVb72lD6WdNiuWuoZJ7Ds7Y
mdN+qFc+ncy6EWDRsdbv4R3b4lijVzNjgM7QVDBWevV3+h7Si8iwdl3hAc/RsYXf
y45J/KeejVSx3zvFBKlYApnXOv7OmlRtf0ruxGBBqgkBGVvJgG0E3b4o3QBANfMq
5mV7HPOKDiGguIiWy7hZA4VkxIQlbg8VxF8CwM0TijnPQVdFTplIeXgCCI2fKaBR
SaQdVg0ghAC8tCvX4bMaB/bsPDNJsCTLoH7D6Gy66mJwEWT1pRaRhH4vqnYRV6bs
xP1LWgd5vjnFjuZjaEodXJh+uPst6Bgff/uQcX4vRWCF
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:01:40 2026 by rpki-client