Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/hy0L33f4XYPJIFw4uTmXJiUPFo8.roa
File: hy0L33f4XYPJIFw4uTmXJiUPFo8.roa (raw, json)
Hash identifier: XB4hQn9qah0YMaucNvWe5oAHXy3OWMVyQoyP7siUAZo=
Subject key identifier: 87:2D:0B:DF:77:F8:5D:83:C9:20:5C:38:B9:39:97:26:25:0F:16:8F
Certificate issuer: /CN=ea8b2cd11f85987898547450c9217811fcdea28b
Certificate serial: 019FCC46BBAFC66E6E0E22A40862D1046C19
Authority key identifier: EA:8B:2C:D1:1F:85:98:78:98:54:74:50:C9:21:78:11:FC:DE:A2:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/hy0L33f4XYPJIFw4uTmXJiUPFo8.roa
Signing time: Tue 04 Aug 2026 10:16:55 +0000
ROA not before: Tue 04 Aug 2026 10:16:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15935
IP address blocks: 45.146.108.0/22 maxlen: 22
81.30.224.0/19 maxlen: 19
81.30.229.0/24 maxlen: 24
81.30.246.0/23 maxlen: 23
93.185.48.0/20 maxlen: 20
95.173.64.0/19 maxlen: 19
95.173.64.0/23 maxlen: 23
95.173.68.0/23 maxlen: 23
109.238.32.0/20 maxlen: 20
213.195.192.0/18 maxlen: 18
217.66.160.0/19 maxlen: 19
217.66.160.0/24 maxlen: 24
217.66.166.0/24 maxlen: 24
217.66.178.0/24 maxlen: 24
217.66.179.0/24 maxlen: 24
217.66.188.0/23 maxlen: 23
217.66.190.0/24 maxlen: 24
217.66.191.0/24 maxlen: 24
2a02:570::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft
rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:46:bb:af:c6:6e:6e:0e:22:a4:08:62:d1:04:6c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea8b2cd11f85987898547450c9217811fcdea28b
Validity
Not Before: Aug 4 10:16:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=872d0bdf77f85d83c9205c38b9399726250f168f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:db:c9:93:0f:1c:9a:52:4d:9a:4f:17:7f:41:
f7:45:db:49:d7:85:db:c2:69:11:30:97:35:88:ac:
ba:61:25:eb:74:67:67:8d:bc:af:f6:60:3f:23:97:
fc:bc:29:f4:68:6a:c4:2b:a7:50:ad:0b:17:70:5b:
85:e2:d4:81:86:f1:a1:79:e2:ba:32:7c:23:37:ef:
a8:eb:81:4d:47:71:fa:cc:ae:4b:1e:8f:71:07:1b:
f1:8c:5d:2d:00:a7:3c:ee:b4:9f:79:7b:7d:07:aa:
56:e3:61:bf:ba:b9:7b:ce:4c:83:37:81:e7:f8:6b:
2e:19:3f:53:fd:1d:36:55:26:08:84:d6:88:59:8e:
0a:ec:3a:bc:07:f5:a9:d2:2a:c3:31:6a:3a:6d:7b:
63:3c:5b:a7:3a:51:02:e3:f6:8b:65:ac:dd:8d:ca:
bb:5c:32:e3:ca:4c:01:73:e9:c2:26:c3:b0:eb:dd:
76:60:26:d8:f6:24:34:a4:e7:3b:68:da:75:1c:5d:
0d:6b:53:1c:7e:38:79:d3:73:0e:8c:cc:d0:21:0a:
7f:77:12:de:c5:5c:dd:62:39:7e:e0:eb:2a:88:94:
bf:c6:fd:1b:36:2b:8d:79:fd:e8:c7:10:2b:04:96:
06:cf:83:13:ce:4f:27:03:50:2a:b8:4b:64:12:08:
c8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2D:0B:DF:77:F8:5D:83:C9:20:5C:38:B9:39:97:26:25:0F:16:8F
X509v3 Authority Key Identifier:
keyid:EA:8B:2C:D1:1F:85:98:78:98:54:74:50:C9:21:78:11:FC:DE:A2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/hy0L33f4XYPJIFw4uTmXJiUPFo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.108.0/22
81.30.224.0/19
93.185.48.0/20
95.173.64.0/19
109.238.32.0/20
213.195.192.0/18
217.66.160.0/19
IPv6:
2a02:570::/32
Signature Algorithm: sha256WithRSAEncryption
7b:ee:27:1e:b3:4a:16:6c:d8:e6:de:1e:09:a3:93:84:4b:1d:
a4:64:40:3b:7a:73:9b:d1:b3:61:dd:45:c3:a3:14:d8:19:b2:
77:94:64:52:a3:c4:55:d4:f5:fe:ff:6b:c8:90:9a:da:25:ce:
03:fa:e5:c4:25:7c:6d:52:63:0a:cf:a9:3e:9a:fe:5a:49:46:
2b:81:f5:63:53:58:e6:64:8d:98:84:38:3d:40:50:54:fe:63:
38:25:e8:4e:8a:b0:a4:f8:15:53:92:03:8a:9f:43:09:21:78:
6c:f4:74:15:5b:2b:41:be:55:f8:76:f6:de:ba:e1:6e:46:17:
74:d4:68:44:f5:c0:81:1e:fc:0a:66:ab:14:9f:ee:6b:06:97:
52:56:a7:b2:fd:73:24:3e:68:04:f5:ce:33:42:53:11:16:c6:
b9:11:fe:a0:93:90:fb:1c:9e:f8:1d:59:e5:5b:64:ca:03:9d:
64:01:24:33:1a:c1:64:ea:44:f2:7d:2a:5e:73:63:27:9d:c3:
3c:b4:7d:b2:85:30:2a:fd:f5:54:cf:df:57:2f:d6:c0:dc:5c:
65:d6:59:3b:1d:29:6a:41:92:9a:a2:7c:f6:d9:35:5d:7b:3a:
f0:f6:78:10:13:5d:41:c5:f9:39:38:ae:2d:68:50:e6:c3:4b:
15:2f:17:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:08:44 2026 by rpki-client