Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/y_OK4hMWFZKEgLbNp1R7lfr7Hxw.roa
File: y_OK4hMWFZKEgLbNp1R7lfr7Hxw.roa (raw, json)
Hash identifier: LCWNxMVx3MM+Nt6fJ/4bEyJPikK5rJ9oVL//9ht1gi4=
Subject key identifier: CB:F3:8A:E2:13:16:15:92:84:80:B6:CD:A7:54:7B:95:FA:FB:1F:1C
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01A183CCD1C24F6BA1A5FE486060DA646F75
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/y_OK4hMWFZKEgLbNp1R7lfr7Hxw.roa
Signing time: Wed 28 Oct 2026 18:36:40 +0000
ROA not before: Wed 28 Oct 2026 18:36:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62206
IP address blocks: 5.181.84.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
45.13.189.0/24 maxlen: 24
45.13.190.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
45.138.182.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
194.242.96.0/24 maxlen: 24
194.242.98.0/24 maxlen: 24
194.242.99.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.211.188.0/24 maxlen: 24
195.211.189.0/24 maxlen: 24
195.211.191.0/24 maxlen: 24
2a01:7120::/32 maxlen: 32
2a01:7120:7::/48 maxlen: 48
2a07:9200::/29 maxlen: 29
2a11:2a80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:cc:d1:c2:4f:6b:a1:a5:fe:48:60:60:da:64:6f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 28 18:36:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cbf38ae2131615928480b6cda7547b95fafb1f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4f:fa:b4:30:a3:37:e1:1f:b3:b7:76:18:00:
91:5f:86:6b:ce:42:02:41:31:7c:3d:96:fb:17:70:
a1:8d:a0:ce:1e:8d:52:f9:b6:9e:88:bd:18:4b:5d:
73:9d:4e:98:42:28:ee:77:b2:08:a4:74:bf:9a:6b:
ce:ae:19:19:74:95:6b:d6:5e:a7:74:7a:d7:70:f7:
e6:c1:2a:06:3a:7c:f4:1f:ae:26:75:67:b7:ee:27:
f1:a7:4d:33:86:8f:a4:a1:54:a6:53:9e:d5:37:f6:
e0:c0:d8:49:5a:98:ca:c8:30:05:02:88:d0:2b:47:
7c:75:82:54:09:b2:d1:d1:c0:86:8d:dc:bf:da:6c:
0d:ba:94:da:4d:f3:27:00:09:2e:42:d3:2c:85:c7:
a4:21:da:30:51:34:0f:cb:17:6a:52:1c:f0:88:29:
e4:7f:41:1f:b5:e0:d9:23:7a:a4:9f:95:c2:d3:50:
82:73:e4:ac:6d:f8:a1:a6:e6:b7:80:9e:cb:bd:2c:
41:0b:20:44:a1:02:1f:ba:cc:8c:8d:36:0b:b8:24:
ea:1c:ca:06:16:8f:00:6f:c7:ed:d3:97:88:4f:46:
dd:67:38:4c:f8:20:96:ba:bf:b4:28:91:39:28:29:
2c:6d:b3:99:c7:42:70:b8:a7:7c:24:0d:58:bb:1a:
48:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F3:8A:E2:13:16:15:92:84:80:B6:CD:A7:54:7B:95:FA:FB:1F:1C
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/y_OK4hMWFZKEgLbNp1R7lfr7Hxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.84.0/24
45.9.29.0/24
45.13.189.0-45.13.190.255
45.94.171.0/24
45.138.182.0/24
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/24
193.30.242.0/23
193.57.43.0/24
194.242.96.0/24
194.242.98.0/23
195.177.92.0/24
195.177.94.0/23
195.211.188.0/23
195.211.191.0/24
IPv6:
2a01:7120::/32
2a07:9200::/29
2a11:2a80::/32
Signature Algorithm: sha256WithRSAEncryption
72:24:ab:71:fc:e7:09:c1:58:c2:a6:ec:d0:e5:21:10:0a:8a:
d5:fd:a0:a0:38:2d:ba:4b:02:a5:d7:45:3a:4c:1b:7d:1a:00:
7d:6b:05:d2:46:48:5d:df:54:db:d7:1b:fb:ac:51:33:bd:20:
a6:1f:1f:15:b7:46:3f:45:51:94:8c:f9:4c:44:40:bc:a3:38:
e8:c5:62:f7:be:ae:81:37:22:e9:99:17:9e:4f:a5:13:ae:79:
eb:ed:0b:66:56:d8:1e:4e:e4:53:e9:58:14:bd:44:9c:14:b2:
31:d9:23:f7:7c:b7:95:94:c1:01:b5:24:c9:f6:3c:c6:4d:3f:
7d:44:0e:11:ab:7c:90:f4:55:bd:18:c5:a8:07:b0:15:1e:be:
ed:6b:14:7c:9a:9f:76:2b:42:79:4d:93:4a:f9:66:5c:b2:2a:
00:f0:73:66:f7:15:89:83:b9:46:f1:e0:36:b7:a1:3d:a5:d9:
20:68:f9:9d:5c:a3:65:03:05:f7:47:c2:78:a0:03:3d:fc:bd:
17:ac:7a:2d:9a:c5:2b:91:9e:d3:10:09:6e:ef:9b:a4:92:0e:
64:5e:68:04:cf:bc:3c:e4:fc:5b:8e:c0:af:6a:b1:6c:36:c1:
fb:e7:d6:f2:fc:eb:c9:ab:1e:82:ce:6c:be:8d:03:0f:85:93:
1e:c1:ef:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 21:31:57 2026 by rpki-client