Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/ywWOAfJnokSwR-K-2eB1fbrIT_Q.roa
File: ywWOAfJnokSwR-K-2eB1fbrIT_Q.roa (raw, json)
Hash identifier: rWNyxwLYyJrMnau2lvrCQh6TtRL9rs6pgCVykYV95Cc=
Subject key identifier: CB:05:8E:01:F2:67:A2:44:B0:47:E2:BE:D9:E0:75:7D:BA:C8:4F:F4
Certificate issuer: /CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Certificate serial: 019A6D4BD78D52C0D4F6B86C4DC63C5276E7
Authority key identifier: 62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/ywWOAfJnokSwR-K-2eB1fbrIT_Q.roa
Signing time: Mon 10 Nov 2025 10:24:38 +0000
ROA not before: Mon 10 Nov 2025 10:24:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8400
IP address blocks: 62.108.96.0/19 maxlen: 24
62.193.128.0/19 maxlen: 24
91.148.64.0/18 maxlen: 24
91.223.162.0/24 maxlen: 24
178.20.205.0/24 maxlen: 24
185.47.208.0/22 maxlen: 24
194.106.160.0/19 maxlen: 24
195.252.64.0/18 maxlen: 24
213.244.228.0/22 maxlen: 24
213.244.232.0/21 maxlen: 24
217.26.64.0/20 maxlen: 24
2001:8c8::/32 maxlen: 48
2a02:e40::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.mft
rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:6d:4b:d7:8d:52:c0:d4:f6:b8:6c:4d:c6:3c:52:76:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Validity
Not Before: Nov 10 10:24:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb058e01f267a244b047e2bed9e0757dbac84ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fa:fc:87:d5:98:fa:fd:60:b6:00:b0:6d:e5:
a8:3e:3a:04:6e:66:78:f6:fa:ff:6d:57:6a:78:f4:
9b:35:b0:68:af:6f:ae:a3:24:37:c7:66:c4:f7:3a:
32:0f:86:96:87:e6:a1:2c:de:73:9e:59:51:98:f1:
b6:aa:f3:0d:91:18:e3:34:99:b9:6d:f0:4a:a0:1f:
f4:f4:1a:31:20:73:3f:e1:d7:0e:dd:c9:eb:dd:e1:
4c:88:0a:49:e5:7b:cc:b4:1e:ef:41:d1:82:b5:11:
0c:7e:65:cf:dd:2e:3f:e5:3d:47:52:9b:9f:9d:72:
6c:e3:97:1f:fa:a5:7f:d5:d4:d4:50:78:b4:8e:7d:
18:5a:ea:85:3e:72:a2:76:dd:00:80:97:b8:a9:dc:
c4:74:8a:11:3c:69:10:fd:80:d4:d7:3b:69:5c:9b:
49:c4:e0:ba:13:63:8d:8f:8e:d1:27:10:4a:bf:5a:
1c:65:b7:ff:ec:dc:d8:3e:32:17:b9:3e:aa:95:bd:
92:6a:f6:94:98:eb:cb:1f:0c:8c:99:ac:78:d9:1c:
aa:f2:f7:1f:64:4b:40:61:16:5e:07:7d:71:f2:31:
05:6b:0c:27:46:32:3e:b1:49:ab:cb:b4:b5:be:e7:
57:4f:fc:16:c8:b9:c1:0b:7c:b4:d1:96:2d:7a:1a:
87:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:05:8E:01:F2:67:A2:44:B0:47:E2:BE:D9:E0:75:7D:BA:C8:4F:F4
X509v3 Authority Key Identifier:
keyid:62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/ywWOAfJnokSwR-K-2eB1fbrIT_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.108.96.0/19
62.193.128.0/19
91.148.64.0/18
91.223.162.0/24
178.20.205.0/24
185.47.208.0/22
194.106.160.0/19
195.252.64.0/18
213.244.228.0-213.244.239.255
217.26.64.0/20
IPv6:
2001:8c8::/32
2a02:e40::/32
Signature Algorithm: sha256WithRSAEncryption
34:49:22:e2:48:9a:b5:e3:e5:46:d0:7d:c8:ec:b4:f6:51:ba:
4b:88:28:cd:be:4e:8c:00:ac:02:94:1d:fd:65:3d:9c:76:5c:
91:b6:7d:74:c1:5a:0e:6d:59:3d:4d:6f:fb:f9:a2:b6:a9:55:
c9:cb:78:01:a7:5f:a4:9c:cf:bb:b2:88:ed:b4:12:56:2b:27:
b0:3e:89:11:47:5a:ca:92:6d:c7:99:b5:c5:8c:2f:03:77:79:
80:f8:8c:17:6f:50:7e:96:0f:52:e7:60:2a:d3:ea:98:80:ee:
27:16:18:85:25:b6:d4:8f:4c:cf:18:04:0d:30:0b:e7:70:ce:
13:73:b2:3b:98:a3:23:7d:1f:e0:4c:f8:5e:9e:bb:4d:23:fd:
8c:16:0c:b7:7a:25:63:e4:35:c9:2d:9e:77:33:ce:b0:d9:27:
64:78:46:ee:ed:39:ed:ec:f9:9c:33:4a:f0:0c:3e:61:5b:77:
f9:1d:1f:93:c5:b3:e8:b5:ae:89:a6:14:25:9e:f9:13:16:21:
5e:8f:71:7c:98:0f:3b:4f:df:12:64:7d:88:63:58:ff:31:3e:
8f:bd:b9:1e:13:a7:4e:b9:76:89:1f:f1:e0:ae:02:97:71:53:
8b:9f:21:57:ae:93:2b:b8:d2:93:ab:53:db:97:77:0a:29:52:
1e:de:12:d0
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgISAZptS9eNUsDU9rhsTcY8UnbnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNzhhNzY4YzkxMGJhZGNkNWM0YWVmN2MxNzJhOWYwNjE1
NDdlOGMwHhcNMjUxMTEwMTAyNDM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjA1OGUwMWYyNjdhMjQ0YjA0N2UyYmVkOWUwNzU3ZGJhYzg0ZmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fr8h9WY+v1gtgCwbeWoPjoEbmZ4
9vr/bVdqePSbNbBor2+uoyQ3x2bE9zoyD4aWh+ahLN5znllRmPG2qvMNkRjjNJm5
bfBKoB/09BoxIHM/4dcO3cnr3eFMiApJ5XvMtB7vQdGCtREMfmXP3S4/5T1HUpuf
nXJs45cf+qV/1dTUUHi0jn0YWuqFPnKidt0AgJe4qdzEdIoRPGkQ/YDU1ztpXJtJ
xOC6E2ONj47RJxBKv1ocZbf/7NzYPjIXuT6qlb2SavaUmOvLHwyMmax42Ryq8vcf
ZEtAYRZeB31x8jEFawwnRjI+sUmry7S1vudXT/wWyLnBC3y00ZYtehqH0wIDAQAB
o4ICXTCCAlkwHQYDVR0OBBYEFMsFjgHyZ6JEsEfivtngdX26yE/0MB8GA1UdIwQY
MBaAFGJ4p2jJELrc1cSu98FyqfBhVH6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW5pbmFNa1F1dHpWeEs3M3dYS3A4R0ZVZm93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi80MmRmYzAtYTc2NC00ZDVkLWE2MzQt
MzQ1NGY0OTBmZDk2LzEveXdXT0FmSm5va1N3Ui1LLTJlQjFmYnJJVF9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi80MmRmYzAtYTc2NC00ZDVkLWE2MzQtMzQ1NGY0OTBmZDk2
LzEvWW5pbmFNa1F1dHpWeEs3M3dYS3A4R0ZVZm93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBKBAIAATBEAwQFPmxgAwQF
PsGAAwQGW5RAAwQAW9+iAwQAshTNAwQCuS/QAwQFwmqgAwQGw/xAMAwDBALV9OQD
BATV9OADBATZGkAwFAQCAAIwDgMFACABCMgDBQAqAg5AMA0GCSqGSIb3DQEBCwUA
A4IBAQA0SSLiSJq14+VG0H3I7LT2UbpLiCjNvk6MAKwClB39ZT2cdlyRtn10wVoO
bVk9TW/7+aK2qVXJy3gBp1+knM+7sojttBJWKyewPokRR1rKkm3HmbXFjC8Dd3mA
+IwXb1B+lg9S52Aq0+qYgO4nFhiFJbbUj0zPGAQNMAvncM4Tc7I7mKMjfR/gTPhe
nrtNI/2MFgy3eiVj5DXJLZ53M86w2SdkeEbu7Tnt7PmcM0rwDD5hW3f5HR+TxbPo
ta6JphQlnvkTFiFej3F8mA87T98SZH2IY1j/MT6PvbkeE6dOuXaJH/HgrgKXcVOL
nyFXrpMruNKTq1Pbl3cKKVIe3hLQ
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:38:41 2025 by rpki-client