Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/jy9vqTkbifn4fqhCmmiOuybdiuI.roa
File: jy9vqTkbifn4fqhCmmiOuybdiuI.roa (raw, json)
Hash identifier: T5UDlp0R5kTRg3nCqn967Jf+poMh13cYAkRHHYTNxKk=
Subject key identifier: 8F:2F:6F:A9:39:1B:89:F9:F8:7E:A8:42:9A:68:8E:BB:26:DD:8A:E2
Certificate issuer: /CN=043d2c8da83f5c3c94ae940a0efd2a7714ff90e2
Certificate serial: 01A134D4E9F72D18C124A0FB65F5C781BDD6
Authority key identifier: 04:3D:2C:8D:A8:3F:5C:3C:94:AE:94:0A:0E:FD:2A:77:14:FF:90:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/jy9vqTkbifn4fqhCmmiOuybdiuI.roa
Signing time: Tue 13 Oct 2026 10:35:31 +0000
ROA not before: Tue 13 Oct 2026 10:35:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48988
IP address blocks: 5.253.228.0/23 maxlen: 24
88.218.68.0/22 maxlen: 24
108.174.78.0/24 maxlen: 24
111.88.140.0/22 maxlen: 24
141.133.134.0/23 maxlen: 24
141.133.142.0/23 maxlen: 24
141.133.160.0/21 maxlen: 24
141.133.168.0/22 maxlen: 24
153.80.192.0/20 maxlen: 24
153.80.212.0/22 maxlen: 24
153.80.216.0/21 maxlen: 24
198.13.184.0/21 maxlen: 24
206.210.32.0/19 maxlen: 24
213.148.0.0/20 maxlen: 24
213.148.24.0/22 maxlen: 24
2a13:8280::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:d4:e9:f7:2d:18:c1:24:a0:fb:65:f5:c7:81:bd:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=043d2c8da83f5c3c94ae940a0efd2a7714ff90e2
Validity
Not Before: Oct 13 10:35:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f2f6fa9391b89f9f87ea8429a688ebb26dd8ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8e:be:86:78:2a:d1:7d:dc:8d:47:9c:66:10:
a3:13:64:1a:31:c5:b2:a1:b0:78:a4:fe:a0:7c:df:
5e:51:5a:aa:ff:01:92:a3:63:5b:77:c8:21:dd:de:
77:43:e2:5e:cb:65:9f:13:ed:80:68:48:8f:92:a7:
06:a3:06:ce:60:c6:03:d1:f5:83:34:5f:00:5e:7b:
ef:d5:88:d9:58:d7:50:94:0c:b0:26:41:a1:24:7c:
92:a4:11:3e:e1:09:80:b3:ee:84:0c:28:bf:28:12:
2c:5c:17:19:b7:bc:6a:b3:f6:db:dc:25:c6:2d:84:
96:44:96:01:7a:38:eb:a4:18:75:cb:60:ba:ce:0f:
9b:40:ba:f9:7f:34:74:19:24:fa:67:a7:a0:e6:57:
1c:34:d6:cc:29:35:55:e4:ba:f8:48:35:8a:dc:24:
85:6a:4c:3f:6d:00:9a:ee:db:ec:f3:c0:0f:2d:5f:
84:54:f0:23:ff:23:70:26:fd:64:f0:f5:cf:12:32:
8b:c4:47:41:49:38:c3:fc:cb:aa:83:8b:e5:f6:31:
83:93:11:ca:b8:bd:09:12:c9:ce:a8:9c:ce:07:e8:
39:0b:9a:17:f6:6c:4f:6a:5c:89:89:93:a4:9e:9f:
83:57:f9:72:5f:7b:0e:aa:30:59:1c:29:0e:ca:ae:
4f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2F:6F:A9:39:1B:89:F9:F8:7E:A8:42:9A:68:8E:BB:26:DD:8A:E2
X509v3 Authority Key Identifier:
keyid:04:3D:2C:8D:A8:3F:5C:3C:94:AE:94:0A:0E:FD:2A:77:14:FF:90:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/jy9vqTkbifn4fqhCmmiOuybdiuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.228.0/23
88.218.68.0/22
108.174.78.0/24
111.88.140.0/22
141.133.134.0/23
141.133.142.0/23
141.133.160.0-141.133.171.255
153.80.192.0/20
153.80.212.0-153.80.223.255
198.13.184.0/21
206.210.32.0/19
213.148.0.0/20
213.148.24.0/22
IPv6:
2a13:8280::/32
Signature Algorithm: sha256WithRSAEncryption
a7:02:d3:c3:d0:ac:e0:85:ce:a4:60:d4:c5:ec:ff:1d:5b:99:
55:e5:f5:04:bd:7b:9e:18:a1:4a:f8:38:12:b2:43:9f:ca:04:
1a:4d:95:b3:4e:17:a3:03:e8:f1:2b:f3:ca:7f:fe:98:0e:b0:
d0:9e:94:3e:f9:f1:a6:e9:cd:3b:b5:52:d7:25:9b:ae:6c:5a:
f9:ed:ca:1f:5d:f8:22:da:b7:a8:06:2a:81:74:d6:41:36:13:
10:12:57:79:2b:98:44:1c:b6:89:6a:e7:0d:04:05:dc:df:23:
bf:b1:9e:a5:b7:82:87:24:ca:91:f9:30:ea:14:f1:86:ce:f0:
ce:75:56:62:64:e6:8c:4b:5d:69:d8:3f:2d:37:53:6f:ee:3f:
13:a1:93:6a:c7:45:89:05:9a:6f:18:aa:60:36:eb:33:4e:b6:
b5:31:6b:43:70:58:29:6a:3c:b3:b0:e6:90:26:18:c7:08:89:
ac:d3:56:9f:7d:31:09:f7:78:36:fd:36:c2:e3:20:57:65:95:
0a:a7:ad:44:ba:fc:9e:08:88:94:e1:c8:c6:b4:b3:9c:4f:2f:
60:50:e9:49:9d:ee:e6:fb:77:f5:f3:7a:45:38:40:60:d8:2f:
1a:be:56:15:34:5f:ff:9e:0e:d1:49:c7:e3:28:2e:d9:1c:8b:
5d:91:56:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:34:08 2026 by rpki-client