Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YQHVSVKWR9J8uLSvR_aSxeqnfvY.roa
File: YQHVSVKWR9J8uLSvR_aSxeqnfvY.roa (raw, json)
Hash identifier: NV7kSQ2jKNhHXV+q7ncF1Hi8+liSraZyT266S0GIbsY=
Subject key identifier: 61:01:D5:49:52:96:47:D2:7C:B8:B4:AF:47:F6:92:C5:EA:A7:7E:F6
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019EA316A6706190A62818202E3ECBC66A1C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YQHVSVKWR9J8uLSvR_aSxeqnfvY.roa
Signing time: Sun 07 Jun 2026 17:17:11 +0000
ROA not before: Sun 07 Jun 2026 17:17:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210644
IP address blocks: 5.253.56.0/24 maxlen: 24
85.31.46.0/24 maxlen: 24
87.121.216.0/24 maxlen: 24
185.207.15.0/24 maxlen: 24
193.47.61.0/24 maxlen: 24
193.148.56.0/24 maxlen: 24
193.148.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Jun 2026 12:28:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a3:16:a6:70:61:90:a6:28:18:20:2e:3e:cb:c6:6a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 7 17:17:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6101d549529647d27cb8b4af47f692c5eaa77ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:21:6b:b1:b1:21:37:b7:65:c3:6f:09:36:09:
7d:9b:70:a9:1d:33:ea:d0:04:03:35:b9:65:79:66:
47:0c:db:2b:d2:cb:12:2a:6e:a0:b2:b8:96:60:71:
ee:d6:77:b8:e5:c4:fc:ba:f6:c1:76:7b:63:c4:94:
a2:df:95:46:33:61:3e:be:66:2c:d0:57:1e:4d:70:
32:f1:a4:90:da:f0:91:f0:a8:a4:4c:bf:8d:b6:b0:
38:69:99:f7:c5:04:a8:5b:95:8e:45:80:95:a1:92:
87:0d:38:e5:25:91:a0:c1:89:c2:5e:d4:3b:e5:a9:
ec:92:3e:aa:a0:f4:14:11:4c:a6:b7:2a:f6:96:9b:
9b:a4:3c:82:c0:ac:d2:e1:96:08:bd:0a:5a:31:c9:
42:d4:52:c9:9d:fa:82:8e:95:f8:a3:c2:2c:ba:2b:
46:97:cd:e8:b2:30:3b:f0:77:ea:7a:a5:79:e6:4b:
3c:a6:75:3e:65:2e:42:f6:37:19:51:d3:5b:21:52:
56:f4:d5:f8:66:45:ac:4f:96:5d:80:80:b7:ed:46:
dc:7b:d8:a2:11:7e:dc:86:2e:60:3a:82:b0:6d:ae:
70:9d:64:15:f4:64:7d:cd:da:9c:18:74:f0:6f:f7:
df:2a:71:2d:71:06:5d:92:4e:44:39:89:d5:d8:97:
77:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:01:D5:49:52:96:47:D2:7C:B8:B4:AF:47:F6:92:C5:EA:A7:7E:F6
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YQHVSVKWR9J8uLSvR_aSxeqnfvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.56.0/24
85.31.46.0/24
87.121.216.0/24
185.207.15.0/24
193.47.61.0/24
193.148.56.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:a8:8c:d1:64:fd:f4:8e:dc:40:aa:12:e3:72:6e:b4:b1:cc:
7e:99:93:a3:24:24:07:61:0f:fe:f2:1e:f7:ca:51:16:bf:e6:
5d:a4:ec:fb:ed:79:f8:16:e5:48:55:24:11:1d:9b:f7:df:0a:
13:98:7b:78:3c:32:67:b3:81:ff:e6:b9:7d:df:ea:07:bf:40:
aa:99:9b:99:20:1b:47:e8:09:c6:a3:af:1e:d7:a4:b3:a9:c0:
a2:6a:78:32:b4:4f:d7:62:28:2a:47:92:48:9e:62:8e:2b:1b:
8c:b6:88:0c:5e:84:12:86:49:e8:f3:ec:b0:b0:3d:50:2a:dc:
51:ae:4e:54:78:04:77:f3:1b:a4:75:af:55:45:f4:eb:3b:87:
e5:b2:c5:12:ab:c6:f5:5a:c1:a2:9e:6a:f9:2c:98:3d:4b:6f:
95:e7:1b:e0:25:15:9e:c1:9a:59:49:af:12:e6:98:86:39:08:
53:c1:33:a6:b8:15:b8:61:6c:85:b3:c6:12:ca:b9:5c:ca:21:
cd:60:da:54:2c:7f:91:40:1b:0d:bf:cd:e1:e8:13:a2:07:92:
25:3f:c9:ec:e7:5f:32:0c:11:e0:d3:20:e3:2a:0f:82:b7:14:
cb:bd:6f:fb:8e:14:22:bf:3b:99:09:9b:99:ec:89:f3:ec:80:
ab:e3:dd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 7 20:29:53 2026 by rpki-client