Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/YKXZknOA48Q687Y2d6b6e138kG0.roa
File: YKXZknOA48Q687Y2d6b6e138kG0.roa (raw, json)
Hash identifier: YKAaiTG9TWQNiJSpv5qYvX/007RacaolNt+mRs/AVA4=
Subject key identifier: 60:A5:D9:92:73:80:E3:C4:3A:F3:B6:36:77:A6:FA:7B:5D:FC:90:6D
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 019C40D8C248DA6E76D40F46E1435F3E8AA5
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/YKXZknOA48Q687Y2d6b6e138kG0.roa
Signing time: Mon 09 Feb 2026 05:21:13 +0000
ROA not before: Mon 09 Feb 2026 05:21:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 5.10.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:40:d8:c2:48:da:6e:76:d4:0f:46:e1:43:5f:3e:8a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Feb 9 05:21:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=60a5d9927380e3c43af3b63677a6fa7b5dfc906d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:58:25:38:92:1e:43:c7:59:f9:0c:bd:4e:4b:
74:f0:37:0d:56:cf:be:ae:a7:8e:d1:13:77:9c:3f:
8a:26:15:7a:69:8a:e7:5f:a3:ca:1c:c4:3e:98:ae:
67:c0:e9:92:a2:03:dc:17:0b:64:6f:b7:5b:37:66:
9c:11:51:78:0a:d7:3a:e3:ed:39:d7:7e:4d:96:5a:
4e:72:7b:55:2a:19:99:c2:ce:a6:4c:c6:31:4e:8e:
d5:ac:1e:92:cb:af:39:aa:ce:e6:9e:4d:90:e6:5c:
f7:2d:1f:4e:70:cc:27:b6:33:94:60:f2:43:fb:3c:
47:24:ae:b3:76:97:ed:d5:d9:bb:56:b0:a8:11:fe:
47:67:e7:92:50:65:0d:15:62:4f:e1:1b:f9:08:9f:
9d:27:88:e3:69:62:75:b9:3d:8c:0d:38:21:25:c2:
d3:a2:e1:ed:dd:28:f8:2e:d9:d5:79:7f:2a:18:16:
b4:c7:6d:23:1a:e3:05:10:2c:91:90:1c:6b:6f:7f:
d5:38:8c:1d:e5:61:3d:45:23:91:cd:98:6f:30:fb:
e5:1e:57:65:32:a3:3d:e1:ff:dc:ac:a1:66:94:9b:
62:75:29:33:ed:0b:60:cd:36:c9:c0:0b:d7:4e:35:
16:d3:aa:e5:aa:0d:4b:77:8e:31:97:6e:87:a6:2a:
63:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A5:D9:92:73:80:E3:C4:3A:F3:B6:36:77:A6:FA:7B:5D:FC:90:6D
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/YKXZknOA48Q687Y2d6b6e138kG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.250.0/24
Signature Algorithm: sha256WithRSAEncryption
16:7b:b1:86:ca:59:77:68:ad:0e:11:38:74:d8:a2:ec:69:99:
09:6f:c7:44:31:e5:63:e0:6f:38:9d:36:b1:dc:73:5f:1f:20:
bb:18:d0:e5:c8:94:f5:e6:7b:e6:07:45:d5:72:84:97:ba:73:
7d:48:55:85:1b:51:97:4d:ca:a3:6a:3e:34:20:14:19:94:b1:
b3:9c:0c:1f:cd:6a:d9:74:45:c6:29:3f:61:03:c7:88:ab:cf:
f0:ea:51:08:24:15:03:95:77:55:b3:75:3e:01:4c:97:67:6c:
ec:69:c8:c6:11:67:d6:ab:48:98:53:93:77:c4:d6:5d:42:2a:
19:b3:b6:a0:11:bf:d3:43:37:8d:bc:30:a5:12:2d:f6:51:ac:
8a:a1:17:30:3e:5d:d5:cb:3a:16:fd:c8:d2:5c:f0:72:54:60:
f4:7c:13:43:fb:e8:db:14:b8:0b:dc:77:2d:f8:c5:72:a5:91:
63:16:4b:4e:11:ab:aa:f8:ed:1c:88:79:d4:70:0d:fc:7c:3c:
54:e6:59:e5:1d:0c:26:3c:32:1b:f8:2b:89:20:40:91:b2:41:
49:5f:54:54:85:5a:0f:73:4f:4d:8a:01:11:6f:04:57:ce:fa:
6f:9d:7f:f5:3b:a3:e0:10:c2:ed:d0:09:f7:fe:fc:79:d9:b3:
b8:da:38:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:06:04 2026 by rpki-client