Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/YGtlZnWeERw8AsqsnIvt3Avrp8g.roa
File: YGtlZnWeERw8AsqsnIvt3Avrp8g.roa (raw, json)
Hash identifier: wjBYM93Z9LSZQjBjOvD3I1KwuCypmMdncWxGSLsNk2o=
Subject key identifier: 60:6B:65:66:75:9E:11:1C:3C:02:CA:AC:9C:8B:ED:DC:0B:EB:A7:C8
Certificate issuer: /CN=145010ddd2c6f7b644a5002cb1e4ee162c63d1d7
Certificate serial: 019F1DC0D2D0591B43BA75280EF76E699CF6
Authority key identifier: 14:50:10:DD:D2:C6:F7:B6:44:A5:00:2C:B1:E4:EE:16:2C:63:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFAQ3dLG97ZEpQAsseTuFixj0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/YGtlZnWeERw8AsqsnIvt3Avrp8g.roa
Signing time: Wed 01 Jul 2026 12:56:43 +0000
ROA not before: Wed 01 Jul 2026 12:56:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207230
IP address blocks: 45.66.98.0/24 maxlen: 24
195.184.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FFAQ3dLG97ZEpQAsseTuFixj0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:c0:d2:d0:59:1b:43:ba:75:28:0e:f7:6e:69:9c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=145010ddd2c6f7b644a5002cb1e4ee162c63d1d7
Validity
Not Before: Jul 1 12:56:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=606b6566759e111c3c02caac9c8beddc0beba7c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fa:2d:e0:6b:8f:75:d8:43:18:3f:41:c7:65:
7e:31:f4:05:20:af:95:fc:a9:15:fe:20:e1:75:dd:
45:4e:2f:0b:54:95:96:d3:60:35:88:a9:7b:67:a4:
f5:87:26:66:21:09:0b:28:fa:b8:66:be:f0:c3:1a:
60:14:f6:a8:ca:96:f4:ce:19:fa:63:16:49:b2:b2:
c7:f1:14:6c:d8:b9:24:25:7e:61:03:20:33:b4:40:
e8:dd:58:d8:0b:7c:50:a4:99:20:cc:0d:39:96:7a:
1b:5d:c5:fc:36:c6:63:5c:f8:4b:c7:7e:02:5b:f1:
e4:18:c2:66:b4:ab:91:12:b8:a2:3f:7c:4b:49:23:
ca:26:f1:46:24:15:ae:b6:84:c2:e6:0c:61:67:cc:
ce:62:e9:94:69:51:ba:ac:a6:16:3e:12:36:7f:2b:
9f:bc:32:82:7a:f1:97:be:7e:b9:aa:9c:bf:79:78:
86:aa:0a:df:1d:42:a5:b4:d3:e8:27:a4:c2:77:ed:
77:64:e0:75:a7:83:fb:11:69:88:1e:02:f8:97:b1:
27:c4:8b:b5:90:f0:d1:1c:39:0e:c2:22:f0:cd:6a:
38:4e:65:ba:01:2b:1d:91:f2:05:37:b9:68:6d:b5:
50:2f:06:a3:72:8a:c1:03:03:ce:85:fc:90:17:79:
a5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:6B:65:66:75:9E:11:1C:3C:02:CA:AC:9C:8B:ED:DC:0B:EB:A7:C8
X509v3 Authority Key Identifier:
keyid:14:50:10:DD:D2:C6:F7:B6:44:A5:00:2C:B1:E4:EE:16:2C:63:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFAQ3dLG97ZEpQAsseTuFixj0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/YGtlZnWeERw8AsqsnIvt3Avrp8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.98.0/24
195.184.244.0/24
Signature Algorithm: sha256WithRSAEncryption
82:34:d8:1b:31:a0:2c:13:80:dc:5e:a6:eb:ae:d7:29:a3:dd:
82:85:48:da:16:6f:7e:e9:a1:c8:cf:4c:27:ee:a0:90:79:7b:
d4:0b:7e:a1:d5:48:93:d9:a7:0b:c9:3c:d2:36:4f:28:25:b6:
84:26:91:d8:45:f1:5f:e4:8d:46:2d:5d:a0:ce:11:93:eb:76:
14:8a:a8:9d:93:ef:01:52:7e:21:14:22:b3:da:8d:f8:a8:e6:
dc:37:04:19:42:65:f4:e2:b1:c8:84:db:c2:5b:a6:b5:88:90:
c0:66:f5:89:19:9d:6b:bc:60:3c:fa:c5:d6:ca:e6:c3:0d:e5:
56:3c:aa:1a:1c:8d:93:b6:4a:15:33:ff:c6:32:d7:74:62:09:
1f:c2:a4:e4:0e:d9:a8:00:8c:f1:99:da:81:ca:dc:94:f8:1a:
4e:61:40:9b:d4:6f:a4:47:da:2a:bd:61:97:93:db:3d:ae:be:
3e:58:a4:62:5b:85:36:58:d7:58:07:06:44:90:a4:0d:9a:e9:
0f:c3:28:48:27:16:8c:e1:e1:80:bf:4a:2e:90:a8:d8:d8:a0:
2c:4a:0d:35:43:a8:e4:ef:a6:ad:1d:c4:13:f1:e3:51:12:e9:
b9:3e:db:31:c6:08:fd:71:9b:93:64:e8:ee:ba:8b:fb:29:60:
2d:8d:3e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:40:07 2026 by rpki-client