Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_yaJ_oOHfWEIj7r-IKdfRhGCxTE.roa
File: _yaJ_oOHfWEIj7r-IKdfRhGCxTE.roa (raw, json)
Hash identifier: BNQ7RuUXS1mB5VXbJym2Lf0UGir7CgJq5dfjMFaWjX8=
Subject key identifier: FF:26:89:FE:83:87:7D:61:08:8F:BA:FE:20:A7:5F:46:11:82:C5:31
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F7DB13CD10DB98691E377BCC931D9CABC
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_yaJ_oOHfWEIj7r-IKdfRhGCxTE.roa
Signing time: Mon 20 Jul 2026 04:03:14 +0000
ROA not before: Mon 20 Jul 2026 04:03:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62904
IP address blocks: 5.175.212.0/24 maxlen: 24
5.231.110.0/24 maxlen: 24
5.231.124.0/24 maxlen: 24
5.231.241.0/24 maxlen: 24
89.106.87.0/24 maxlen: 24
89.144.40.0/24 maxlen: 24
94.249.181.0/24 maxlen: 24
94.249.226.0/24 maxlen: 24
94.249.243.0/24 maxlen: 24
178.18.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7d:b1:3c:d1:0d:b9:86:91:e3:77:bc:c9:31:d9:ca:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 20 04:03:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff2689fe83877d61088fbafe20a75f461182c531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9c:8e:14:df:38:47:2b:5b:12:1c:3f:9a:60:
d1:b8:a3:25:09:83:58:38:9c:c3:22:76:3a:92:bc:
47:3f:21:3f:eb:37:21:41:36:55:a0:e9:a2:48:91:
74:da:87:8c:0e:9a:a0:7b:dd:aa:06:bc:d3:b1:09:
cc:a8:78:0d:cb:e8:53:9e:ca:5f:99:2a:07:df:8d:
78:9e:e6:ca:c3:f1:24:44:ff:4e:37:c0:6f:54:12:
90:38:bf:33:c6:9f:5c:59:35:ed:10:f3:f2:f8:72:
dd:f4:ab:4c:60:13:07:c7:eb:34:5f:c6:b2:b6:8f:
40:d0:98:fb:7c:df:92:53:3b:e5:d0:99:15:88:88:
60:aa:a9:d7:d4:e4:b1:02:2b:8f:86:d4:1d:26:21:
2a:3c:a0:5b:ec:6c:cd:3c:d3:28:ae:2d:ab:b6:ad:
cd:53:c3:69:47:f1:d6:27:2a:9b:a5:1e:07:3d:de:
b7:e2:fd:1a:0e:14:a4:ec:c9:bf:44:ea:d4:00:cd:
aa:d9:e9:3f:6e:df:e6:bc:a9:1f:9e:10:93:b0:dd:
3f:c1:d1:f2:83:7c:35:a9:2b:7e:a6:5d:0b:c8:cf:
f3:6d:9b:86:de:00:45:31:f5:8c:03:0e:fc:20:dd:
e7:d3:59:bb:6b:65:8d:6d:61:1c:c1:a7:b0:07:9a:
45:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:26:89:FE:83:87:7D:61:08:8F:BA:FE:20:A7:5F:46:11:82:C5:31
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_yaJ_oOHfWEIj7r-IKdfRhGCxTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.212.0/24
5.231.110.0/24
5.231.124.0/24
5.231.241.0/24
89.106.87.0/24
89.144.40.0/24
94.249.181.0/24
94.249.226.0/24
94.249.243.0/24
178.18.149.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:77:3a:e7:ad:65:0b:07:f1:39:ab:e2:fc:19:da:72:da:a5:
cd:72:5f:f2:72:9f:b2:f6:76:f2:d0:b6:10:ed:66:86:d6:1a:
79:60:99:47:85:5f:a9:aa:98:0c:92:55:94:35:7c:48:e4:b9:
e9:56:5e:ba:cf:64:2c:24:94:95:a4:19:8b:f2:e9:db:95:61:
75:72:ba:e0:11:b5:44:07:36:0a:aa:9b:f6:aa:04:14:b0:ba:
68:a5:c1:82:08:18:53:8e:5d:50:07:0c:28:ad:d3:2d:34:51:
fa:6a:6b:7e:85:f1:35:fa:45:20:6f:b7:9d:7d:bd:d9:11:fc:
cc:7d:c6:f3:48:85:27:be:1d:05:63:1b:21:8c:7d:71:f5:3d:
71:af:14:30:17:29:3a:68:28:97:d3:09:b1:01:f7:6a:47:ca:
74:32:08:ee:01:c8:2c:3d:f9:e5:88:35:dc:e7:23:1f:83:3e:
d6:d7:89:b1:e1:06:16:38:e3:96:0d:2c:54:f1:5c:be:f7:7b:
36:cf:db:da:e0:6b:b6:74:3b:15:5b:e9:0f:dc:87:f3:09:63:
6c:e7:5b:75:3c:1a:56:bd:67:2b:bc:61:75:aa:f6:a3:1b:21:
51:cf:ea:b8:e3:ac:c2:fb:07:dc:b6:37:c1:6c:4b:60:9a:32:
2a:6f:d3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:53:03 2026 by rpki-client