Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/YV-2Yw-MSM5ofNiZrhnZCBnpWlg.roa
File: YV-2Yw-MSM5ofNiZrhnZCBnpWlg.roa (raw, json)
Hash identifier: PIAJ5QQcWmHN/K6hNUsH2e0NEtHXUPELipLw3cX3rk8=
Subject key identifier: 61:5F:B6:63:0F:8C:48:CE:68:7C:D8:99:AE:19:D9:08:19:E9:5A:58
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019FA96E21EE5CA20BCFB67539CF5342D3ED
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/YV-2Yw-MSM5ofNiZrhnZCBnpWlg.roa
Signing time: Tue 28 Jul 2026 15:53:14 +0000
ROA not before: Tue 28 Jul 2026 15:53:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2834
IP address blocks: 191.219.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:6e:21:ee:5c:a2:0b:cf:b6:75:39:cf:53:42:d3:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 28 15:53:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=615fb6630f8c48ce687cd899ae19d90819e95a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:32:b8:ff:84:ed:79:50:19:ba:f7:ed:a8:67:
2c:0c:76:42:18:b7:6f:03:b5:1e:9c:4f:55:7e:d6:
dd:d9:ca:43:15:9e:d6:58:c3:c6:26:03:48:83:62:
d0:fb:27:d9:94:c4:db:bf:15:27:25:85:1a:f2:57:
3c:43:6a:19:33:fb:4c:ae:39:6e:ac:89:4f:c1:6d:
51:28:7d:cd:b5:9d:fc:11:a8:70:04:68:68:68:c0:
76:6a:22:f1:bc:97:f7:25:9d:7a:ed:8e:7a:d2:3d:
bb:eb:33:24:cd:70:55:94:ae:3f:d4:b2:03:82:6e:
e0:15:3c:af:a7:0c:ee:fd:a9:e8:bf:9a:53:22:a3:
54:02:cc:8a:7a:a5:90:0f:76:95:8b:f9:f1:88:af:
38:de:ed:f4:1a:d2:54:15:93:fe:86:1c:c6:96:17:
ad:e5:90:3e:79:e9:e6:81:08:43:6e:2c:82:92:fb:
fd:9b:14:d6:2b:6d:eb:78:1f:e2:60:56:62:c8:5a:
70:ad:20:04:3c:f9:10:29:b2:2a:86:40:70:e9:0f:
bd:06:8a:da:3a:e0:b8:38:d2:7f:6b:a2:9f:9b:17:
66:a8:6e:4f:92:ca:9c:10:d0:bf:4f:a5:57:ee:56:
1c:f4:d8:b7:16:4c:bd:cd:e2:2d:61:3e:a1:15:ce:
6f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5F:B6:63:0F:8C:48:CE:68:7C:D8:99:AE:19:D9:08:19:E9:5A:58
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/YV-2Yw-MSM5ofNiZrhnZCBnpWlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.219.24.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:1f:49:fc:f7:a7:eb:52:e8:54:84:c2:73:eb:a7:c2:eb:57:
18:73:59:7b:22:6c:c8:dd:ac:b3:bd:3e:95:99:70:dd:f2:17:
74:1d:95:f4:04:d5:29:ee:bb:d8:a4:9e:c9:20:c6:df:9f:54:
02:ca:16:e2:29:bc:92:cb:cf:39:17:69:d9:e2:11:3d:b3:a6:
ee:45:93:4f:7d:e4:e1:60:22:28:86:d6:6b:14:a1:a5:80:52:
14:04:f0:e2:01:9e:cd:4a:34:a6:55:f0:cc:8f:f3:b6:70:ae:
20:35:69:0f:9a:a0:72:96:c2:70:63:05:ca:a4:58:bd:78:fc:
2b:4f:fa:c1:c6:db:b0:4d:ad:bd:04:66:02:bc:54:d5:3c:4e:
e1:d6:16:bf:1a:bd:2b:9c:cc:60:43:6b:7b:3f:bb:98:ed:b9:
95:a6:e2:b4:ef:04:a3:27:9f:84:e3:99:6f:3a:bb:80:7f:35:
72:55:59:7c:3e:6a:bb:86:13:fa:3f:af:ef:19:13:cb:d2:b8:
9b:9c:90:e5:3b:54:29:64:08:02:3f:24:7a:62:43:30:d9:85:
b8:7f:1d:bb:59:18:c9:a3:d8:10:4e:fd:ba:56:a6:92:2d:fc:
01:f1:7a:4c:07:50:49:3a:46:b0:77:96:28:04:e5:88:ba:8f:
c8:a5:54:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:20:33 2026 by rpki-client