Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/ytIxMg-nFxFDrCls8GXhACBFUSI.roa
File: ytIxMg-nFxFDrCls8GXhACBFUSI.roa (raw, json)
Hash identifier: GHaVvWlfNGDA8GztLcPLg+D8rXVf6ft0hke/kEcK6uo=
Subject key identifier: CA:D2:31:32:0F:A7:17:11:43:AC:29:6C:F0:65:E1:00:20:45:51:22
Certificate issuer: /CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Certificate serial: 019C9F62EEF76FCC5C37141F0EE02A2FD2E4
Authority key identifier: 26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/ytIxMg-nFxFDrCls8GXhACBFUSI.roa
Signing time: Fri 27 Feb 2026 13:56:26 +0000
ROA not before: Fri 27 Feb 2026 13:56:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210976
IP address blocks: 64.188.56.0/21 maxlen: 32
216.57.104.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9f:62:ee:f7:6f:cc:5c:37:14:1f:0e:e0:2a:2f:d2:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Validity
Not Before: Feb 27 13:56:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cad231320fa7171143ac296cf065e10020455122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:69:69:ef:dc:05:cd:b2:81:72:85:40:b3:68:
dd:cb:a1:72:6c:d2:ce:64:3e:f0:ae:ce:5b:57:42:
4f:2d:51:d8:e0:50:0d:49:de:a5:9c:75:b5:26:ed:
8e:ea:bc:60:5e:10:d6:dc:ce:e0:ef:cc:48:d3:b0:
f7:82:fc:30:af:33:54:ce:10:a6:9f:a6:de:5f:a9:
76:ec:0c:18:44:51:38:84:ce:a8:85:96:ca:c0:81:
d2:1b:6d:06:7d:3e:bf:36:d1:df:b7:7c:58:0f:67:
c5:9c:97:ef:bd:60:26:98:b9:c4:53:6a:5b:b4:43:
b3:ef:af:cb:ba:11:6d:0f:c8:1a:b6:7b:7a:5e:1a:
da:8f:17:30:be:20:ae:be:5e:74:97:c6:7b:a5:d7:
53:c2:36:f6:f7:a8:97:8a:e2:00:99:2a:57:71:b1:
ac:73:d8:c7:81:69:b5:6e:87:42:fe:62:27:e6:b5:
35:7a:03:e4:cd:6a:31:df:1f:94:19:ec:bb:bb:49:
7e:4c:b9:14:13:f6:9c:f8:83:33:4d:6f:8c:76:79:
a9:89:0b:0e:97:1b:11:12:3f:7c:3b:49:90:59:c4:
35:26:34:c4:b1:91:66:78:9b:26:c2:32:40:d5:21:
be:96:7b:46:65:5c:90:f5:91:2e:9f:94:03:2c:12:
ac:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D2:31:32:0F:A7:17:11:43:AC:29:6C:F0:65:E1:00:20:45:51:22
X509v3 Authority Key Identifier:
keyid:26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/ytIxMg-nFxFDrCls8GXhACBFUSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.188.56.0/21
216.57.104.0/21
Signature Algorithm: sha256WithRSAEncryption
54:86:ca:35:1a:e2:e9:81:33:8f:ae:07:da:67:3c:32:a2:ef:
de:33:8d:d0:84:2b:d0:44:86:a9:7a:ed:14:c8:44:f4:99:04:
a1:f3:c5:07:04:04:fb:80:68:d7:6c:db:54:01:c5:dc:7d:af:
75:3f:1f:c4:c6:78:c8:01:71:ba:f7:bc:38:5b:54:de:99:1b:
11:8b:5a:d9:3b:21:e2:9f:ac:85:f7:09:fd:1b:38:cb:ba:bd:
21:61:a0:3a:ea:2e:74:ce:a6:65:0a:ef:ab:32:b9:3a:5d:ff:
c8:35:06:76:93:5a:b0:c4:cd:c6:4e:22:30:a1:e5:e6:1d:4f:
c0:c5:16:bc:b0:9d:8c:26:dc:93:7b:52:e4:78:0c:8b:28:0a:
89:34:0e:d4:7a:54:8e:4c:f7:5d:6c:85:77:38:3b:ee:2c:65:
36:6e:7d:2a:54:8a:74:16:db:22:a4:0a:48:23:4d:06:13:17:
06:a9:a2:3a:23:f0:c7:da:9f:d8:ed:6a:12:2e:06:22:4f:ee:
bd:ac:02:06:98:7e:fe:9b:2d:28:a1:d5:58:ed:79:0f:13:5a:
c9:e1:1f:ad:27:64:76:e1:a8:6f:76:32:35:b3:f7:dd:0a:42:
c8:b5:fb:d9:5f:85:91:50:50:62:5c:f5:21:7d:28:75:89:82:
e9:35:c2:1d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZyfYu73b8xcNxQfDuAqL9LkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NzJiOWZiNTQ2YjM2NWUzMjMyMzBkY2VhOWJhOGM5ZmJl
ZGZlYjgwHhcNMjYwMjI3MTM1NjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYWQyMzEzMjBmYTcxNzExNDNhYzI5NmNmMDY1ZTEwMDIwNDU1MTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mlp79wFzbKBcoVAs2jdy6FybNLO
ZD7wrs5bV0JPLVHY4FANSd6lnHW1Ju2O6rxgXhDW3M7g78xI07D3gvwwrzNUzhCm
n6beX6l27AwYRFE4hM6ohZbKwIHSG20GfT6/NtHft3xYD2fFnJfvvWAmmLnEU2pb
tEOz76/LuhFtD8gatnt6XhrajxcwviCuvl50l8Z7pddTwjb296iXiuIAmSpXcbGs
c9jHgWm1bodC/mIn5rU1egPkzWox3x+UGey7u0l+TLkUE/ac+IMzTW+MdnmpiQsO
lxsREj98O0mQWcQ1JjTEsZFmeJsmwjJA1SG+lntGZVyQ9ZEun5QDLBKsRwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMrSMTIPpxcRQ6wpbPBl4QAgRVEiMB8GA1UdIwQY
MBaAFCZyuftUazZeMjIw3OqbqMn77f64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm5LNS0xUnJObDR5TWpEYzZwdW95ZnZ0X3JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9iMTNiNTUtMTI4OC00NWU2LTg4NzYt
YTcwZGI1ODI4MGZjLzEveXRJeE1nLW5GeEZEckNsczhHWGhBQ0JGVVNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9iMTNiNTUtMTI4OC00NWU2LTg4NzYtYTcwZGI1ODI4MGZj
LzEvSm5LNS0xUnJObDR5TWpEYzZwdW95ZnZ0X3JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDQLw4AwQD
2DloMA0GCSqGSIb3DQEBCwUAA4IBAQBUhso1GuLpgTOPrgfaZzwyou/eM43QhCvQ
RIapeu0UyET0mQSh88UHBAT7gGjXbNtUAcXcfa91Px/ExnjIAXG697w4W1TemRsR
i1rZOyHin6yF9wn9GzjLur0hYaA66i50zqZlCu+rMrk6Xf/INQZ2k1qwxM3GTiIw
oeXmHU/AxRa8sJ2MJtyTe1LkeAyLKAqJNA7UelSOTPddbIV3ODvuLGU2bn0qVIp0
FtsipApII00GExcGqaI6I/DH2p/Y7WoSLgYiT+69rAIGmH7+my0oodVY7XkPE1rJ
4R+tJ2R24ahvdjI1s/fdCkLItfvZX4WRUFBiXPUhfSh1iYLpNcId
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:59:10 2026 by rpki-client