Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/YbvuxNmEM9puc_pD09f_17c_b3Q.roa
File: YbvuxNmEM9puc_pD09f_17c_b3Q.roa (raw, json)
Hash identifier: 0UC1RMCMv7LFWJ7ffAC3hAFesoaiWMs9jBqK2lLJPHk=
Subject key identifier: 61:BB:EE:C4:D9:84:33:DA:6E:73:FA:43:D3:D7:FF:D7:B7:3F:6F:74
Certificate issuer: /CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
Certificate serial: 019D4D35DF9836DA9D61956A9E9ECF810EA2
Authority key identifier: EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/YbvuxNmEM9puc_pD09f_17c_b3Q.roa
Signing time: Thu 02 Apr 2026 08:01:09 +0000
ROA not before: Thu 02 Apr 2026 08:01:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42929
IP address blocks: 2.56.81.0/24 maxlen: 24
2.56.82.0/24 maxlen: 24
2.56.83.0/24 maxlen: 24
45.156.244.0/22 maxlen: 22
185.142.136.0/22 maxlen: 22
193.33.222.0/23 maxlen: 23
193.36.182.0/24 maxlen: 24
193.104.36.0/24 maxlen: 24
195.8.62.0/24 maxlen: 24
2a07:2d80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4d:35:df:98:36:da:9d:61:95:6a:9e:9e:cf:81:0e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
Validity
Not Before: Apr 2 08:01:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61bbeec4d98433da6e73fa43d3d7ffd7b73f6f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:42:33:bf:c9:42:88:a5:61:12:96:af:fd:bd:
f1:fb:a9:22:d0:a2:ce:b7:de:a1:61:a9:44:aa:65:
cf:a4:3c:e3:fb:14:6b:3d:3a:b4:13:b9:94:69:a7:
86:e3:13:eb:0a:85:95:bf:9d:34:65:29:6c:be:07:
66:5c:49:62:88:6d:f1:a7:92:0a:eb:3a:a6:85:c2:
8c:db:0c:85:6e:24:92:e6:f0:96:f8:09:8a:4f:94:
ad:6a:b2:b7:54:7c:9b:cc:c4:8f:ca:a7:06:ba:3f:
ce:d9:7f:74:18:d6:d6:b6:50:97:60:43:49:d4:4c:
6d:22:72:4b:aa:48:ac:92:ca:c2:75:a9:1e:57:33:
03:54:9b:be:9e:03:2e:34:12:92:fa:79:02:d6:d3:
57:7c:f3:91:03:a8:51:64:75:2f:1e:ee:8e:76:1d:
d1:6a:78:2c:18:66:3e:02:b2:cb:23:e7:fc:2a:8a:
27:ef:45:51:a4:45:3d:98:3e:3c:6b:5e:c3:60:49:
79:53:26:f9:dd:26:a2:c9:53:cc:0d:09:05:cb:4d:
9c:b8:97:62:2f:90:4e:b2:f1:7c:99:95:de:df:98:
ca:73:da:99:5a:4d:41:4a:a1:ad:d7:99:51:37:81:
a6:ea:a2:cc:69:b7:33:ee:3b:42:c2:80:65:a9:40:
f8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BB:EE:C4:D9:84:33:DA:6E:73:FA:43:D3:D7:FF:D7:B7:3F:6F:74
X509v3 Authority Key Identifier:
keyid:EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/YbvuxNmEM9puc_pD09f_17c_b3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.81.0-2.56.83.255
45.156.244.0/22
185.142.136.0/22
193.33.222.0/23
193.36.182.0/24
193.104.36.0/24
195.8.62.0/24
IPv6:
2a07:2d80::/29
Signature Algorithm: sha256WithRSAEncryption
14:41:82:f0:79:f7:28:1e:48:30:f7:01:30:21:6d:2c:79:9b:
af:53:75:0c:70:d7:a8:87:42:2e:75:9d:08:83:a3:8a:88:c2:
1d:f9:37:f0:dd:97:ac:ae:16:77:d3:94:1f:f1:70:4d:2e:c6:
a7:c8:58:5a:71:1d:b9:80:7d:3a:f5:1c:e0:1c:48:98:5b:0a:
97:ca:ef:8e:bd:a1:0a:db:13:f5:7b:e7:9d:55:1a:b3:b1:89:
25:5a:b2:0a:86:4e:fd:6d:2b:9d:91:57:23:ca:83:f5:cc:8d:
07:fc:60:b8:06:af:a0:ba:c6:d2:75:ad:f4:84:e1:03:0e:af:
d2:c4:e5:bd:a0:a0:54:0a:20:a7:5e:c0:21:03:87:f6:93:be:
ea:f6:b7:c5:1d:9a:36:8d:e4:2e:e4:51:39:38:6e:a7:0c:c1:
dc:95:0b:bb:d3:73:bf:60:32:cd:ca:ce:7d:67:3e:0f:11:61:
b3:f5:90:30:0f:30:77:69:fc:44:ee:8c:79:71:3e:2c:93:98:
60:95:7e:b8:98:c8:8a:cf:d0:01:b8:a3:c0:9a:94:e5:06:92:
14:e1:06:09:e8:ca:09:d0:88:04:90:ef:6d:14:15:c8:28:26:
a3:6c:5c:16:28:a3:6e:28:68:67:fc:7e:72:70:03:26:8e:a9:
87:ea:61:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:55:19 2026 by rpki-client