Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/yMvlwhzKfrY9een7T1c_eLiRjek.roa
File: yMvlwhzKfrY9een7T1c_eLiRjek.roa (raw, json)
Hash identifier: PbmjqOmGy2hPK1aLZZhguFnKLy5ZFRT3ye/VUztkdts=
Subject key identifier: C8:CB:E5:C2:1C:CA:7E:B6:3D:79:E9:FB:4F:57:3F:78:B8:91:8D:E9
Certificate issuer: /CN=e731bb83a213f966e142b40da4f32cd6419ae219
Certificate serial: 019F23691D25F6F2C5C8A132A24E1BEE2AD2
Authority key identifier: E7:31:BB:83:A2:13:F9:66:E1:42:B4:0D:A4:F3:2C:D6:41:9A:E2:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zG7g6IT-WbhQrQNpPMs1kGa4hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/yMvlwhzKfrY9een7T1c_eLiRjek.roa
Signing time: Thu 02 Jul 2026 15:18:39 +0000
ROA not before: Thu 02 Jul 2026 15:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209383
IP address blocks: 139.28.192.0/22 maxlen: 22
139.28.192.0/23 maxlen: 23
139.28.194.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/5zG7g6IT-WbhQrQNpPMs1kGa4hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/5zG7g6IT-WbhQrQNpPMs1kGa4hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zG7g6IT-WbhQrQNpPMs1kGa4hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1d:25:f6:f2:c5:c8:a1:32:a2:4e:1b:ee:2a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e731bb83a213f966e142b40da4f32cd6419ae219
Validity
Not Before: Jul 2 15:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8cbe5c21cca7eb63d79e9fb4f573f78b8918de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:38:81:a2:74:5e:da:d8:a9:fd:85:04:67:53:
4f:41:3c:29:c3:92:0f:82:43:34:23:03:79:dd:ed:
fd:a0:20:b1:a9:fe:fb:b1:e3:b6:e2:4a:0a:a8:9e:
fd:03:f3:20:26:0f:5b:33:88:e4:f2:fa:08:c3:7c:
d2:1b:f2:3d:7e:f5:25:3b:a8:f5:f6:a6:57:16:1f:
df:f4:24:95:7d:23:f4:49:fd:4e:77:3b:ac:7d:3a:
6d:32:36:78:aa:92:2b:fb:94:02:49:66:c1:98:7e:
22:72:66:5b:93:c5:2e:2c:17:e8:a6:7d:37:c6:21:
30:57:db:a4:83:7d:c3:87:0d:19:0e:c4:df:07:5f:
af:5f:d7:11:99:bc:b7:6e:80:be:21:40:cb:c5:f6:
8d:58:c8:75:0a:a2:b1:6f:a0:70:b4:ba:03:89:98:
ff:56:2b:09:0d:0e:6a:6f:92:6a:94:ef:17:ec:27:
b8:d8:f3:16:37:bd:12:9b:4e:5e:71:77:d8:6f:c8:
9e:57:c4:be:f7:f7:8d:38:20:f0:83:40:72:80:87:
18:60:c1:83:90:99:29:6c:0f:a7:dd:17:40:dd:a0:
31:f4:32:e8:67:df:fd:3f:8f:5b:a6:d0:07:e5:72:
0c:fb:67:bd:95:a9:42:f0:ea:d1:f5:40:13:cd:90:
8b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:CB:E5:C2:1C:CA:7E:B6:3D:79:E9:FB:4F:57:3F:78:B8:91:8D:E9
X509v3 Authority Key Identifier:
keyid:E7:31:BB:83:A2:13:F9:66:E1:42:B4:0D:A4:F3:2C:D6:41:9A:E2:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zG7g6IT-WbhQrQNpPMs1kGa4hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/yMvlwhzKfrY9een7T1c_eLiRjek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/5zG7g6IT-WbhQrQNpPMs1kGa4hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.192.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:47:3d:37:b5:db:9d:2e:d2:a4:2c:54:01:62:28:00:5b:78:
67:31:b6:fe:43:5e:01:5d:f0:6a:6c:80:8d:56:49:c6:a5:fe:
e1:97:6c:ea:4c:f2:03:fc:90:cb:54:40:f7:11:db:60:ec:47:
ef:60:a9:7c:a9:25:4b:36:67:36:ef:b8:09:3e:eb:a6:84:79:
b2:cf:c3:a7:be:f9:17:ed:52:ea:59:a9:39:8c:30:6d:03:a6:
af:17:60:96:48:c8:3b:d4:2e:4d:70:80:fb:99:9a:ab:cc:3d:
23:dd:73:cb:07:df:98:e0:75:a2:7f:8d:36:dd:bb:6a:95:83:
48:c8:3e:c2:f7:62:71:32:c5:c3:b3:40:03:e3:4a:7d:a2:92:
2d:82:6d:8b:a9:4b:3a:de:19:89:ca:e5:c9:42:32:48:5f:02:
ca:c2:c3:a5:c7:d3:17:eb:47:c3:d8:b4:ea:8d:51:73:ce:43:
a7:ac:66:3d:d2:54:e4:74:df:af:9f:74:57:03:43:0a:09:24:
1c:f4:90:37:b0:d6:83:95:35:e3:ea:44:88:51:f4:64:9e:7e:
8b:da:a2:88:16:48:d3:e5:ff:bc:fc:db:7f:e5:40:8f:f4:7c:
fe:65:f4:33:9e:a3:47:bd:60:a6:44:19:38:98:08:36:4d:74:
f5:7f:0d:5f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaR0l9vLFyKEyok4b7irSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MzFiYjgzYTIxM2Y5NjZlMTQyYjQwZGE0ZjMyY2Q2NDE5
YWUyMTkwHhcNMjYwNzAyMTUxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOGNiZTVjMjFjY2E3ZWI2M2Q3OWU5ZmI0ZjU3M2Y3OGI4OTE4ZGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTiBonRe2tip/YUEZ1NPQTwpw5IP
gkM0IwN53e39oCCxqf77seO24koKqJ79A/MgJg9bM4jk8voIw3zSG/I9fvUlO6j1
9qZXFh/f9CSVfSP0Sf1OdzusfTptMjZ4qpIr+5QCSWbBmH4icmZbk8UuLBfopn03
xiEwV9ukg33Dhw0ZDsTfB1+vX9cRmby3boC+IUDLxfaNWMh1CqKxb6BwtLoDiZj/
VisJDQ5qb5JqlO8X7Ce42PMWN70Sm05ecXfYb8ieV8S+9/eNOCDwg0BygIcYYMGD
kJkpbA+n3RdA3aAx9DLoZ9/9P49bptAH5XIM+2e9lalC8OrR9UATzZCLXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMjL5cIcyn62PXnp+09XP3i4kY3pMB8GA1UdIwQY
MBaAFOcxu4OiE/lm4UK0DaTzLNZBmuIZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXpHN2c2SVQtV2JoUXJRTnBQTXMxa0dhNGhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9mOTM0MmMtNTdhOS00OGYzLTllNjct
OGEzZDhkYzM1OGViLzEveU12bHdoektmclk5ZWVuN1QxY19lTGlSamVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9mOTM0MmMtNTdhOS00OGYzLTllNjctOGEzZDhkYzM1OGVi
LzEvNXpHN2c2SVQtV2JoUXJRTnBQTXMxa0dhNGhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCixzAMA0G
CSqGSIb3DQEBCwUAA4IBAQBMRz03tdudLtKkLFQBYigAW3hnMbb+Q14BXfBqbICN
VknGpf7hl2zqTPID/JDLVED3Edtg7EfvYKl8qSVLNmc277gJPuumhHmyz8OnvvkX
7VLqWak5jDBtA6avF2CWSMg71C5NcID7mZqrzD0j3XPLB9+Y4HWif4023btqlYNI
yD7C92JxMsXDs0AD40p9opItgm2LqUs63hmJyuXJQjJIXwLKwsOlx9MX60fD2LTq
jVFzzkOnrGY90lTkdN+vn3RXA0MKCSQc9JA3sNaDlTXj6kSIUfRknn6L2qKIFkjT
5f+8/Nt/5UCP9Hz+ZfQznqNHvWCmRBk4mAg2TXT1fw1f
-----END CERTIFICATE-----
Generated at Wed Jul 22 16:05:47 2026 by rpki-client