Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/YRLmUoiyriHbBZz8cKLyi9qEJ78.roa
File: YRLmUoiyriHbBZz8cKLyi9qEJ78.roa (raw, json)
Hash identifier: 2dbD8JRE13NWzX1L2KBuix9ycJyQxpH9mx7PA8Rx7lQ=
Subject key identifier: 61:12:E6:52:88:B2:AE:21:DB:05:9C:FC:70:A2:F2:8B:DA:84:27:BF
Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Certificate serial: 019D5825CE3EBCBB79D0C8A24A0477594289
Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/YRLmUoiyriHbBZz8cKLyi9qEJ78.roa
Signing time: Sat 04 Apr 2026 10:59:25 +0000
ROA not before: Sat 04 Apr 2026 10:59:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215068
IP address blocks: 92.60.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:58:25:ce:3e:bc:bb:79:d0:c8:a2:4a:04:77:59:42:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Validity
Not Before: Apr 4 10:59:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6112e65288b2ae21db059cfc70a2f28bda8427bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a6:42:8c:79:d5:b5:1e:09:3a:83:65:16:b4:
8b:90:83:a2:13:ec:ae:fa:15:d5:a3:ee:18:fe:d4:
f1:72:70:c1:eb:00:68:f6:1b:22:9c:08:47:92:a4:
14:66:d3:61:05:48:69:fc:d9:31:27:2e:5a:21:73:
b1:99:ba:a7:08:ae:57:3d:10:91:c6:65:81:38:f6:
68:ba:0a:50:10:a3:51:9d:56:7f:81:b8:ca:40:b9:
19:42:76:f1:c1:ab:75:c2:2a:3a:d7:0b:9b:f7:64:
db:45:bd:83:43:3a:f7:d6:85:d7:33:2d:80:0d:26:
e7:6e:b3:f1:f6:c0:c9:5d:5e:17:82:61:9f:68:3b:
43:54:d2:5d:0d:6b:34:13:fb:67:27:b2:5d:15:7b:
9f:86:ce:28:24:ec:e6:d4:d5:bb:ec:a6:d6:1c:e9:
29:41:f2:70:8a:3c:9e:82:4e:19:07:53:ba:0b:7c:
04:06:2c:ca:82:cc:ac:bc:20:a0:cb:1b:44:4d:7b:
39:c4:c4:79:b3:81:4c:74:25:11:7d:90:1e:b9:bf:
15:29:b8:c2:5e:6b:67:bf:09:5e:fe:81:12:11:04:
5f:41:7c:21:05:71:cd:ec:df:43:e8:a4:04:80:49:
60:5e:74:ba:85:2c:7d:89:2f:39:ef:38:62:04:b9:
04:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:12:E6:52:88:B2:AE:21:DB:05:9C:FC:70:A2:F2:8B:DA:84:27:BF
X509v3 Authority Key Identifier:
keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/YRLmUoiyriHbBZz8cKLyi9qEJ78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.60.70.0/24
Signature Algorithm: sha256WithRSAEncryption
67:db:6c:f7:bb:f9:39:e0:7a:bd:02:f1:06:ce:b8:a2:af:fd:
1f:a7:3e:e9:a6:41:87:70:15:28:7f:7c:5e:e6:e9:60:41:bf:
70:03:18:ed:63:e6:0d:e9:74:66:4f:91:a4:bc:17:66:66:11:
00:0c:b7:fd:cb:42:48:43:f8:3c:32:51:d5:38:51:27:7f:ed:
5d:d2:78:23:f2:cc:23:9b:ec:60:2e:ae:d5:22:fd:ce:f3:82:
b0:83:d4:22:40:6a:46:43:1c:56:f3:cf:ae:2b:f4:1f:56:8f:
3b:0d:04:1d:76:10:cf:fb:fe:ec:5b:f3:32:0e:8f:63:f8:91:
d9:a8:12:62:ec:8a:11:61:b2:6b:89:32:24:fe:bd:1f:ec:13:
d3:d9:5a:ce:62:68:8f:21:1f:02:21:43:ce:75:e6:87:ec:96:
6c:3f:cf:ac:9d:ca:d2:e1:61:fb:f4:e7:c8:07:be:b0:63:7b:
52:07:02:b1:1f:79:ec:50:1e:ff:c9:fe:87:de:50:71:4b:00:
50:22:bd:ff:b3:ef:18:51:90:89:fc:e9:94:57:f4:be:17:1a:
bc:d6:fa:62:a9:d1:b9:a5:c1:ba:5f:18:dc:84:83:32:5d:5f:
30:46:7c:7f:8a:a6:90:52:3f:42:a6:8f:2e:b6:92:45:72:b6:
b9:46:52:f3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ1YJc4+vLt50MiiSgR3WUKJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZGRlNzFiNDFiZmZiMWI1MTZlMDdiMGM2MTM5MWJkZjRk
M2JmMTEwHhcNMjYwNDA0MTA1OTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTEyZTY1Mjg4YjJhZTIxZGIwNTljZmM3MGEyZjI4YmRhODQyN2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqZCjHnVtR4JOoNlFrSLkIOiE+yu
+hXVo+4Y/tTxcnDB6wBo9hsinAhHkqQUZtNhBUhp/NkxJy5aIXOxmbqnCK5XPRCR
xmWBOPZougpQEKNRnVZ/gbjKQLkZQnbxwat1wio61wub92TbRb2DQzr31oXXMy2A
DSbnbrPx9sDJXV4XgmGfaDtDVNJdDWs0E/tnJ7JdFXufhs4oJOzm1NW77KbWHOkp
QfJwijyegk4ZB1O6C3wEBizKgsysvCCgyxtETXs5xMR5s4FMdCURfZAeub8VKbjC
Xmtnvwle/oESEQRfQXwhBXHN7N9D6KQEgElgXnS6hSx9iS857zhiBLkERwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGES5lKIsq4h2wWc/HCi8ovahCe/MB8GA1UdIwQY
MBaAFEDd5xtBv/sbUW4HsMYTkb30078RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYt
MmJhZGNlNDY2ODUzLzEvWVJMbVVvaXlyaUhiQlp6OGNLTHlpOXFFSjc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYtMmJhZGNlNDY2ODUz
LzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXDxGMA0G
CSqGSIb3DQEBCwUAA4IBAQBn22z3u/k54Hq9AvEGzriir/0fpz7ppkGHcBUof3xe
5ulgQb9wAxjtY+YN6XRmT5GkvBdmZhEADLf9y0JIQ/g8MlHVOFEnf+1d0ngj8swj
m+xgLq7VIv3O84Kwg9QiQGpGQxxW88+uK/QfVo87DQQddhDP+/7sW/MyDo9j+JHZ
qBJi7IoRYbJriTIk/r0f7BPT2VrOYmiPIR8CIUPOdeaH7JZsP8+sncrS4WH79OfI
B76wY3tSBwKxH3nsUB7/yf6H3lBxSwBQIr3/s+8YUZCJ/OmUV/S+Fxq81vpiqdG5
pcG6XxjchIMyXV8wRnx/iqaQUj9Cpo8utpJFcra5RlLz
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:40:48 2026 by rpki-client