Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/YdCroOEd3Ys-YXVbD8Iw5lLlHrA.roa
File: YdCroOEd3Ys-YXVbD8Iw5lLlHrA.roa (raw, json)
Hash identifier: ipk4axCI4o+5NMx0+V7WAsMbHl8DHusSNHJVo94xLKQ=
Subject key identifier: 61:D0:AB:A0:E1:1D:DD:8B:3E:61:75:5B:0F:C2:30:E6:52:E5:1E:B0
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01A0660D45A9C61345E9E5ACCE27B17F9D28
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/YdCroOEd3Ys-YXVbD8Iw5lLlHrA.roa
Signing time: Thu 03 Sep 2026 06:55:40 +0000
ROA not before: Thu 03 Sep 2026 06:55:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 80.97.54.0/24 maxlen: 24
81.180.173.0/24 maxlen: 24
81.181.172.0/24 maxlen: 24
81.181.175.0/24 maxlen: 24
81.181.236.0/22 maxlen: 22
85.120.128.0/22 maxlen: 22
85.120.132.0/22 maxlen: 22
85.122.176.0/22 maxlen: 22
194.102.122.0/23 maxlen: 23
194.102.217.0/24 maxlen: 24
217.156.29.0/24 maxlen: 24
217.156.57.0/24 maxlen: 24
217.156.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:0d:45:a9:c6:13:45:e9:e5:ac:ce:27:b1:7f:9d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Sep 3 06:55:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61d0aba0e11ddd8b3e61755b0fc230e652e51eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:04:68:d7:ac:fc:d0:68:e2:c2:7c:0e:fc:dc:
fc:9e:2d:09:c6:8b:2c:33:39:8f:bd:87:86:82:97:
01:e1:60:a5:59:94:a9:be:ae:5b:f5:6c:00:d8:64:
c1:38:34:7f:bb:4a:e9:7d:20:7d:ce:3f:54:b8:df:
57:19:5d:37:21:c4:d5:3a:db:9c:4b:c5:2f:bc:4b:
e7:ee:b9:87:72:15:18:33:c1:08:c8:d6:d9:95:e5:
8f:2c:b4:95:c7:bd:f0:22:73:07:3c:67:4a:b4:6d:
24:c5:df:57:2b:c8:46:f1:55:00:e1:4c:64:3b:d0:
0c:8a:cd:6d:e7:bd:8d:e0:1e:98:88:39:f6:42:81:
1d:ab:1b:a8:65:30:5f:14:55:c5:99:8e:c0:3e:7e:
0e:b4:0d:66:54:fb:5c:7a:46:9d:10:e9:86:46:a4:
02:1f:9f:1e:86:ab:b8:d9:25:8e:89:13:b3:36:b2:
67:70:de:c3:7f:e3:5f:5b:9c:38:a9:76:88:39:ae:
aa:34:ac:8c:11:be:81:36:5d:c8:d7:79:2a:96:b9:
aa:0c:10:0f:d3:27:ad:e5:4a:f1:35:bc:b5:be:68:
3c:9f:e4:a2:ac:b8:a6:84:92:5a:d1:86:8e:b9:8b:
c2:d8:17:a9:25:f9:28:bf:b4:6f:6f:b3:69:51:7b:
4f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D0:AB:A0:E1:1D:DD:8B:3E:61:75:5B:0F:C2:30:E6:52:E5:1E:B0
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/YdCroOEd3Ys-YXVbD8Iw5lLlHrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.97.54.0/24
81.180.173.0/24
81.181.172.0/24
81.181.175.0/24
81.181.236.0/22
85.120.128.0/21
85.122.176.0/22
194.102.122.0/23
194.102.217.0/24
217.156.29.0/24
217.156.57.0/24
217.156.112.0/22
Signature Algorithm: sha256WithRSAEncryption
95:3f:35:04:d3:2f:02:7b:32:c3:b1:99:6f:c2:69:1b:e9:a0:
10:e7:81:17:8f:3d:7e:9a:81:3b:55:bc:d1:a6:53:ff:1c:df:
e9:c6:e7:35:50:f6:65:dc:92:08:36:07:d7:4b:66:17:2a:d4:
b4:be:13:fd:5d:26:37:91:2f:59:8a:5e:17:f4:37:a8:87:52:
be:6f:4d:b9:12:b5:9c:48:3b:80:35:93:9c:35:80:ef:23:9f:
e5:59:09:96:ca:f3:2d:2e:48:b1:13:a5:2f:9a:4c:e3:e4:f1:
84:af:da:66:2d:a2:e7:f5:96:ab:35:bf:24:db:c9:f2:0c:b5:
1b:56:b7:e4:93:64:ac:a4:05:01:6a:a1:d2:91:9e:4a:e2:3d:
18:f3:fb:f9:e5:75:7e:58:11:f2:43:73:75:22:11:20:e6:a8:
56:09:30:0f:46:9a:e0:d9:ff:87:49:85:d2:52:0a:a5:97:4e:
ed:68:6c:72:b6:61:45:b0:86:3e:aa:08:40:a5:66:7c:be:4f:
44:b6:40:36:23:3d:a4:83:e8:57:73:6d:ad:5a:61:ec:25:95:
09:4a:51:0e:86:30:25:ce:a0:15:01:e2:ec:c1:6d:67:2c:e7:
b1:eb:25:af:c0:3d:45:f3:bc:29:22:ac:9e:0a:1c:9a:74:ad:
3b:56:a0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:42 2026 by rpki-client