Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/8Yljs2OB2UpeVswZlK2LB-4Uetw.roa
File: 8Yljs2OB2UpeVswZlK2LB-4Uetw.roa (raw, json)
Hash identifier: NVd9oAXVs6ce0r2uP+rDjBurYnux6ov6QULX0bgTlCc=
Subject key identifier: F1:89:63:B3:63:81:D9:4A:5E:56:CC:19:94:AD:8B:07:EE:14:7A:DC
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 01A0EC864791408D5DAA12E05B25E6F39DBC
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/8Yljs2OB2UpeVswZlK2LB-4Uetw.roa
Signing time: Tue 29 Sep 2026 09:36:58 +0000
ROA not before: Tue 29 Sep 2026 09:36:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31500
IP address blocks: 2.153.248.0/21 maxlen: 21
2.153.248.0/24 maxlen: 24
83.243.69.0/24 maxlen: 24
91.108.40.0/24 maxlen: 24
91.108.50.0/24 maxlen: 24
94.124.180.0/23 maxlen: 23
94.124.182.0/24 maxlen: 24
94.124.183.0/24 maxlen: 24
95.140.80.0/20 maxlen: 20
95.140.80.0/24 maxlen: 32
95.140.81.0/24 maxlen: 24
95.140.82.0/24 maxlen: 24
95.140.83.0/24 maxlen: 24
95.140.88.0/24 maxlen: 24
95.140.89.0/24 maxlen: 24
95.140.90.0/24 maxlen: 24
95.140.91.0/24 maxlen: 24
95.140.93.0/24 maxlen: 24
95.140.95.0/24 maxlen: 24
95.161.98.0/23 maxlen: 23
95.161.128.0/24 maxlen: 24
95.161.240.0/20 maxlen: 24
109.239.128.0/24 maxlen: 24
109.239.129.0/24 maxlen: 24
109.239.130.0/24 maxlen: 24
109.239.130.128/25 maxlen: 25
109.239.131.0/24 maxlen: 24
109.239.132.0/24 maxlen: 24
109.239.133.0/24 maxlen: 24
109.239.134.0/24 maxlen: 24
109.239.135.0/24 maxlen: 24
109.239.136.0/23 maxlen: 23
109.239.138.0/24 maxlen: 24
109.239.139.0/24 maxlen: 24
109.239.140.0/24 maxlen: 24
109.239.141.0/24 maxlen: 24
109.239.142.0/24 maxlen: 24
109.239.143.0/24 maxlen: 24
178.18.228.0/24 maxlen: 24
178.18.229.0/24 maxlen: 24
178.18.231.0/24 maxlen: 24
178.18.232.0/24 maxlen: 24
185.26.75.0/24 maxlen: 24
2001:b28::/32 maxlen: 32
2001:b28:4::/48 maxlen: 48
2001:b28:7b0c::/48 maxlen: 48
2001:b28:9999::/48 maxlen: 48
2001:b28:9a9c::/48 maxlen: 48
2001:b28:a451::/48 maxlen: 48
2001:b28:ffff::/48 maxlen: 48
2a03:5f80::/46 maxlen: 46
2a03:5f80:2:10::/64 maxlen: 64
2a03:5f80:8::/46 maxlen: 46
2a03:5f80:a::/48 maxlen: 48
2a03:5f80:245::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 15:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:86:47:91:40:8d:5d:aa:12:e0:5b:25:e6:f3:9d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Sep 29 09:36:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f18963b36381d94a5e56cc1994ad8b07ee147adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:00:40:6e:28:69:38:5e:68:71:5a:f1:83:59:
e3:85:c0:50:bc:9f:ab:04:18:fc:d9:b2:a1:49:fa:
48:1c:23:de:13:88:bc:7e:b6:53:4d:0d:b6:0d:09:
a6:d3:87:19:32:78:45:f0:9e:dc:cf:76:52:d4:50:
3f:06:81:a7:b2:5d:74:ae:f6:71:4c:2b:d2:c4:a0:
53:d6:21:55:51:1b:af:d0:c9:8c:e6:80:45:78:d2:
4f:0f:6b:04:ee:ff:c3:28:3a:b0:01:df:84:9e:7c:
9b:e9:3c:92:6f:02:bf:e0:bd:43:82:f0:d5:0c:d2:
0a:1e:35:7c:68:6a:2a:31:0e:da:cf:8a:59:39:5f:
25:f8:37:ef:27:b6:33:65:66:05:91:6e:29:55:65:
34:f9:bf:7f:9c:c6:1f:32:d6:df:95:c2:61:48:70:
4b:95:c7:23:cb:a9:f4:44:fa:b5:7a:aa:91:49:55:
dc:01:d6:02:40:f0:a0:61:b3:85:97:ef:f3:35:4e:
82:74:52:a7:1f:11:be:92:9a:4a:09:1d:d7:87:eb:
99:c6:1d:72:dd:f8:26:50:81:28:d1:4a:8d:94:56:
d1:e1:8e:91:c0:4c:99:64:ba:11:5e:13:cf:5e:45:
6c:8e:39:24:51:18:93:67:d4:71:db:d9:aa:91:94:
60:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:89:63:B3:63:81:D9:4A:5E:56:CC:19:94:AD:8B:07:EE:14:7A:DC
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/8Yljs2OB2UpeVswZlK2LB-4Uetw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.153.248.0/21
83.243.69.0/24
91.108.40.0/24
91.108.50.0/24
94.124.180.0/22
95.140.80.0/20
95.161.98.0/23
95.161.128.0/24
95.161.240.0/20
109.239.128.0/20
178.18.228.0/23
178.18.231.0-178.18.232.255
185.26.75.0/24
IPv6:
2001:b28::/32
2a03:5f80::/46
2a03:5f80:8::/46
2a03:5f80:245::/48
Signature Algorithm: sha256WithRSAEncryption
6d:9d:54:cc:e1:b9:1d:5e:28:a0:cc:03:7b:07:ed:48:d7:cc:
1f:6b:26:b9:e2:be:89:99:65:66:d3:4c:8b:ca:54:29:b9:9e:
73:55:f9:da:b6:a4:d9:9c:e7:33:25:2e:0a:8f:e5:8b:c2:31:
ba:27:97:c0:b7:f5:ac:4c:b9:f4:f2:ea:c0:69:e0:a5:32:08:
cb:81:4d:70:93:b1:80:bc:eb:e8:68:99:42:c3:e3:c4:52:95:
76:47:40:80:db:86:23:7a:bc:3b:d1:fc:ef:bc:52:35:b0:30:
17:ef:bf:93:ef:01:ce:5c:f2:ab:35:95:b4:ec:0a:2b:e4:25:
9c:51:dc:68:68:e4:ea:1c:23:eb:1d:a5:5f:3e:89:ba:1b:3d:
87:2b:73:21:88:28:b4:ba:19:5c:2d:eb:58:56:c6:4c:92:12:
73:cc:92:f3:7d:19:08:3f:62:bc:5b:5c:82:69:21:e5:f0:c7:
c6:53:c0:7c:5c:72:d1:b0:e6:47:41:f6:3b:40:14:4e:af:aa:
73:be:90:5f:71:c4:df:08:14:54:0d:49:f0:0a:ca:02:2b:86:
ee:70:55:19:50:7b:6e:6f:42:8b:92:00:52:9f:3b:ad:39:0b:
41:28:33:5b:6d:57:ea:31:7b:6d:53:9b:ae:8a:33:d4:81:15:
d2:fe:df:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:00:52 2026 by rpki-client