Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/YkGxABSkvEadE0bpAE4U0fLjjCY.roa
File: YkGxABSkvEadE0bpAE4U0fLjjCY.roa (raw, json)
Hash identifier: WloQ1VDbe/34/Tu2PnAzaV0fGW/7c5e9/bSt7tKhd9I=
Subject key identifier: 62:41:B1:00:14:A4:BC:46:9D:13:46:E9:00:4E:14:D1:F2:E3:8C:26
Certificate issuer: /CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f
Certificate serial: 019A7D206554747CED639EFBB2B0B0F4CBE5
Authority key identifier: 17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/YkGxABSkvEadE0bpAE4U0fLjjCY.roa
Signing time: Thu 13 Nov 2025 12:11:06 +0000
ROA not before: Thu 13 Nov 2025 12:11:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 157.167.134.0/24 maxlen: 24
157.167.135.0/24 maxlen: 24
157.167.136.0/21 maxlen: 21
157.167.144.0/21 maxlen: 21
157.167.152.0/24 maxlen: 24
157.167.153.0/24 maxlen: 24
157.167.155.0/24 maxlen: 24
157.167.156.0/24 maxlen: 24
157.167.184.0/21 maxlen: 21
157.167.224.0/24 maxlen: 24
157.167.225.0/24 maxlen: 24
157.167.226.0/24 maxlen: 24
157.167.227.0/24 maxlen: 24
157.167.228.0/24 maxlen: 24
157.167.229.0/24 maxlen: 24
157.167.230.0/24 maxlen: 24
157.167.231.0/24 maxlen: 24
157.167.232.0/24 maxlen: 24
157.167.233.0/24 maxlen: 24
157.167.234.0/24 maxlen: 24
157.167.235.0/24 maxlen: 24
157.167.236.0/24 maxlen: 24
157.167.237.0/24 maxlen: 24
157.167.238.0/24 maxlen: 24
157.167.239.0/24 maxlen: 24
157.167.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Nov 2025 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:7d:20:65:54:74:7c:ed:63:9e:fb:b2:b0:b0:f4:cb:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f
Validity
Not Before: Nov 13 12:11:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6241b10014a4bc469d1346e9004e14d1f2e38c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:18:1f:32:c8:ca:7e:a1:f8:88:97:c8:9e:cd:
aa:e7:56:db:70:91:09:1d:50:c0:9a:d0:da:fc:46:
52:7d:9d:81:88:29:af:86:19:7c:82:1f:66:48:4c:
c6:4d:77:18:1c:97:67:ca:14:c6:a1:55:38:64:87:
a8:bf:62:37:70:3a:a4:75:56:be:58:61:77:05:d2:
ce:9f:97:fa:d5:3f:ec:d4:fb:46:af:19:27:8e:42:
47:f6:8e:86:41:83:13:01:ee:a8:b9:a1:fd:be:d6:
3b:b1:f0:3b:33:87:e6:d5:1a:d8:90:3a:57:0b:7f:
83:5f:10:04:4e:1d:59:71:4d:58:18:0b:87:2c:20:
41:c5:5f:6f:a0:5e:c7:3a:d1:80:70:ff:95:fa:fa:
41:db:cb:24:01:f1:95:36:c4:73:ed:fb:4c:e0:76:
5d:cf:98:50:2a:20:81:ef:89:e9:51:03:62:d6:24:
7c:ab:27:9d:f8:77:2d:34:5d:ba:57:22:7f:83:74:
9d:3f:50:2b:85:13:09:15:1c:a6:bb:4f:4c:4f:1b:
7b:46:f5:be:de:1d:58:dc:b8:32:cb:b2:31:f0:cf:
ee:62:b9:5a:67:33:e9:20:a9:25:cf:60:c4:df:72:
f4:d3:c7:b7:7a:04:dd:7a:5d:f6:28:76:04:20:a7:
0a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:41:B1:00:14:A4:BC:46:9D:13:46:E9:00:4E:14:D1:F2:E3:8C:26
X509v3 Authority Key Identifier:
keyid:17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/YkGxABSkvEadE0bpAE4U0fLjjCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.167.134.0-157.167.153.255
157.167.155.0-157.167.156.255
157.167.184.0/21
157.167.224.0-157.167.240.255
Signature Algorithm: sha256WithRSAEncryption
56:06:7f:40:24:af:24:78:37:d7:60:27:a6:fa:6f:e7:36:f9:
ab:0f:3d:a2:ef:e2:a6:9a:f1:66:4a:ca:61:e3:5d:3f:5f:18:
dd:70:ff:5b:e5:ff:c7:32:23:d5:8e:61:40:79:b0:0f:ca:85:
ee:94:7e:a1:1c:13:59:a7:cb:f2:b9:e8:0b:07:06:ac:a7:dc:
5b:b7:95:d0:93:a5:cc:61:11:72:0b:30:0b:0f:07:87:18:76:
62:93:15:cb:6b:f1:8a:5c:2a:9e:98:63:80:03:7f:71:b1:cf:
7f:7a:4c:f4:51:f7:2f:aa:7f:15:58:7e:a0:4a:6e:c8:77:84:
39:96:85:e1:30:56:8c:46:0c:7d:47:a4:40:50:47:6a:1e:b5:
a0:37:5e:01:f2:db:87:2c:61:e5:a1:c9:cf:30:20:3a:67:da:
35:8e:b1:d4:79:26:cb:0c:b3:c2:6e:ec:1d:9a:b3:76:e2:cb:
f6:4c:84:d0:d4:60:d1:08:46:d1:2d:28:02:95:8e:f1:ca:b2:
92:9b:19:1b:66:a4:b0:77:4d:9a:b6:0f:5b:51:2a:91:db:75:
fc:5f:d8:94:72:dd:46:a9:95:0d:e5:4c:88:c9:9d:2c:82:5d:
f6:46:82:df:ec:58:c4:38:e6:ee:8e:fc:51:41:dc:c7:a9:30:
0d:80:0c:79
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZp9IGVUdHztY577srCw9MvlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZGQ5YzIzYWY2OWVjMmNkYjZmZTJiOTkzNmViNDk0Y2Zk
MTYyMWYwHhcNMjUxMTEzMTIxMTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjQxYjEwMDE0YTRiYzQ2OWQxMzQ2ZTkwMDRlMTRkMWYyZTM4YzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhgfMsjKfqH4iJfIns2q51bbcJEJ
HVDAmtDa/EZSfZ2BiCmvhhl8gh9mSEzGTXcYHJdnyhTGoVU4ZIeov2I3cDqkdVa+
WGF3BdLOn5f61T/s1PtGrxknjkJH9o6GQYMTAe6ouaH9vtY7sfA7M4fm1RrYkDpX
C3+DXxAETh1ZcU1YGAuHLCBBxV9voF7HOtGAcP+V+vpB28skAfGVNsRz7ftM4HZd
z5hQKiCB74npUQNi1iR8qyed+HctNF26VyJ/g3SdP1ArhRMJFRymu09MTxt7RvW+
3h1Y3Lgyy7Ix8M/uYrlaZzPpIKklz2DE33L008e3egTdel32KHYEIKcKAwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFGJBsQAUpLxGnRNG6QBOFNHy44wmMB8GA1UdIwQY
MBaAFBfdnCOvaews22/iuZNutJTP0WIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjkyY0k2OXA3Q3piYi1LNWsyNjBsTV9SWWg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni84MzU3ZTItYTEwNi00NGFlLWI4NjYt
OGZhN2I0YzUzMDczLzEvWWtHeEFCU2t2RWFkRTBicEFFNFUwZkxqakNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni84MzU3ZTItYTEwNi00NGFlLWI4NjYtOGZhN2I0YzUzMDcz
LzEvRjkyY0k2OXA3Q3piYi1LNWsyNjBsTV9SWWg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwMAwDBAGdp4YD
BAGdp5gwDAMEAJ2nmwMEAJ2nnAMEA52nuDAMAwQFnafgAwQAnafwMA0GCSqGSIb3
DQEBCwUAA4IBAQBWBn9AJK8keDfXYCem+m/nNvmrDz2i7+KmmvFmSsph410/Xxjd
cP9b5f/HMiPVjmFAebAPyoXulH6hHBNZp8vyuegLBwasp9xbt5XQk6XMYRFyCzAL
DweHGHZikxXLa/GKXCqemGOAA39xsc9/ekz0Ufcvqn8VWH6gSm7Id4Q5loXhMFaM
Rgx9R6RAUEdqHrWgN14B8tuHLGHlocnPMCA6Z9o1jrHUeSbLDLPCbuwdmrN24sv2
TITQ1GDRCEbRLSgClY7xyrKSmxkbZqSwd02atg9bUSqR23X8X9iUct1GqZUN5UyI
yZ0sgl32RoLf7FjEOObujvxRQdzHqTANgAx5
-----END CERTIFICATE-----
Generated at Tue Nov 18 05:48:03 2025 by rpki-client