Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YJ4BpbG3lrozlKN9bwVgbIRSx8k.roa
File: YJ4BpbG3lrozlKN9bwVgbIRSx8k.roa (raw, json)
Hash identifier: xK0VeDBnDBe2LXNiNXqlxoZjjKdCuMLdMDsFxaQN9B4=
Subject key identifier: 60:9E:01:A5:B1:B7:96:BA:33:94:A3:7D:6F:05:60:6C:84:52:C7:C9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A0EB773C976A0885E10D73A3B884867444
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YJ4BpbG3lrozlKN9bwVgbIRSx8k.roa
Signing time: Tue 29 Sep 2026 04:40:55 +0000
ROA not before: Tue 29 Sep 2026 04:40:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203154
IP address blocks: 79.110.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 05:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:77:3c:97:6a:08:85:e1:0d:73:a3:b8:84:86:74:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 29 04:40:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=609e01a5b1b796ba3394a37d6f05606c8452c7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e6:98:d8:e9:24:66:16:4b:76:e2:da:1d:e2:
65:c8:44:20:7d:dc:86:ae:c2:b1:cd:79:04:62:87:
cb:f3:ac:fb:fc:54:0a:c5:74:dc:61:a1:e8:29:78:
bf:0f:7e:d4:4e:90:a3:f8:ff:72:f7:aa:19:14:de:
b9:d2:66:08:d2:86:e6:ef:85:be:70:df:3e:d0:ed:
ca:fe:95:d2:3c:85:cf:e0:b7:5f:f9:38:6d:6c:46:
fc:02:97:f3:82:19:25:bc:3f:0e:b2:61:1a:29:6d:
71:ef:ce:56:b0:e2:46:ef:3a:76:e4:df:64:d5:ff:
dc:a0:20:c6:a1:ed:23:b2:01:e6:a7:22:e7:f0:8c:
e1:20:48:9c:31:a3:45:35:27:f5:90:e8:c8:06:27:
92:a4:bf:1b:60:a1:35:30:f0:b2:8f:c9:a7:2d:10:
13:2d:3e:61:b8:35:9d:bc:8e:5d:e2:b8:c5:a9:b3:
dc:f9:a3:f6:4d:84:02:a8:ce:a9:55:16:c4:2b:be:
aa:9d:7b:60:b7:0b:61:67:03:63:99:ae:ac:c5:3e:
15:98:24:36:b3:e8:77:ef:07:f0:59:90:84:e4:0d:
2b:d2:95:8d:7c:29:2a:e4:7e:85:b8:0d:e9:33:54:
c0:ef:8f:9f:21:e3:8e:21:3b:4b:13:a5:ed:cc:00:
22:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9E:01:A5:B1:B7:96:BA:33:94:A3:7D:6F:05:60:6C:84:52:C7:C9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YJ4BpbG3lrozlKN9bwVgbIRSx8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.62.0/24
Signature Algorithm: sha256WithRSAEncryption
57:49:f7:6b:c5:7a:a8:d5:2b:2c:47:79:c0:cb:fe:fa:14:16:
bc:8e:fa:60:b3:10:e7:c7:78:f8:8a:70:55:ad:b4:49:2f:b0:
92:44:21:a9:43:9d:0e:d9:0b:0c:6e:44:e3:3d:f5:ef:f3:a0:
8a:78:a0:c4:ee:ac:e8:fa:9d:57:5e:d5:d2:41:02:40:dc:e9:
74:11:16:e7:69:8a:93:cd:b8:8e:17:d3:7a:70:35:10:1c:c5:
3e:30:d6:35:ee:de:cf:0d:db:dc:d2:07:f0:42:ea:ba:b9:03:
60:73:b1:c7:d0:3a:48:ee:14:bb:20:d5:ce:59:54:f8:a1:f5:
47:e5:5f:d9:2e:29:99:0d:90:c2:f0:89:b4:33:8b:18:67:12:
9b:b2:5f:50:61:71:63:cd:3c:a9:91:38:24:ac:93:4c:af:ce:
b6:8f:2c:dc:5e:ef:52:0f:d7:6b:a2:5f:60:03:5d:b1:9e:39:
64:4c:79:9c:48:ac:2d:6d:48:e1:9f:d9:5f:21:ce:c1:7d:cf:
a7:ce:7c:ac:4b:26:d2:db:f2:c2:2e:1f:b7:5d:32:65:11:58:
05:c4:b9:68:7a:f9:35:b7:b5:58:3c:0c:11:b1:7f:44:9b:32:
9d:e0:7c:75:4e:a6:36:b7:d4:89:02:c2:39:b7:b7:00:1c:a7:
cd:42:0f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:02:55 2026 by rpki-client