Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/U-YaffIdqjM8ao7iu8ml3KJEpQE.roa
File: U-YaffIdqjM8ao7iu8ml3KJEpQE.roa (raw, json)
Hash identifier: +rfakhDJ7qcCYQrYnyU+1fDD2lEl4ZH8IPe71Bp+jNg=
Subject key identifier: 53:E6:1A:7D:F2:1D:AA:33:3C:6A:8E:E2:BB:C9:A5:DC:A2:44:A5:01
Certificate issuer: /CN=6d7eee355779634e02a14b39220367f3b34e5b95
Certificate serial: 01A0FCFF154E65C8F3A015A07A759766FD63
Authority key identifier: 6D:7E:EE:35:57:79:63:4E:02:A1:4B:39:22:03:67:F3:B3:4E:5B:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bX7uNVd5Y04CoUs5IgNn87NOW5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/U-YaffIdqjM8ao7iu8ml3KJEpQE.roa
Signing time: Fri 02 Oct 2026 14:22:50 +0000
ROA not before: Fri 02 Oct 2026 14:22:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15626
IP address blocks: 5.34.182.0/24 maxlen: 24
5.34.183.0/24 maxlen: 24
82.118.17.0/24 maxlen: 24
193.238.152.0/23 maxlen: 23
217.12.192.0/23 maxlen: 23
217.12.195.0/24 maxlen: 24
217.12.196.0/23 maxlen: 23
217.12.198.0/24 maxlen: 24
217.12.205.0/24 maxlen: 24
217.12.210.0/24 maxlen: 24
217.12.211.0/24 maxlen: 24
217.12.212.0/23 maxlen: 23
217.12.214.0/24 maxlen: 24
217.12.216.0/23 maxlen: 23
217.12.221.0/24 maxlen: 24
217.12.222.0/24 maxlen: 24
217.12.223.0/24 maxlen: 24
2a02:27a8::/32 maxlen: 32
2a02:27a8:1::/48 maxlen: 48
2a02:27a8:feed::/48 maxlen: 48
2a02:27ad::/32 maxlen: 32
2a05:9407::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/bX7uNVd5Y04CoUs5IgNn87NOW5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/bX7uNVd5Y04CoUs5IgNn87NOW5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bX7uNVd5Y04CoUs5IgNn87NOW5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:ff:15:4e:65:c8:f3:a0:15:a0:7a:75:97:66:fd:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7eee355779634e02a14b39220367f3b34e5b95
Validity
Not Before: Oct 2 14:22:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53e61a7df21daa333c6a8ee2bbc9a5dca244a501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f2:12:e8:c0:e8:ac:da:c6:15:52:f9:3e:67:
a6:60:88:f6:ff:8d:f8:24:44:f0:e2:29:24:3f:0c:
2a:8f:d0:34:67:1a:ee:c5:25:46:74:b5:3c:09:37:
bf:87:c6:dd:a0:f4:6c:9c:d8:7a:4e:b1:d5:d9:22:
f7:fc:0f:e8:ef:19:69:d2:f4:a8:67:fc:48:db:46:
72:22:51:c6:ef:d0:ec:3b:a5:97:b2:45:c0:ff:64:
cc:fa:0f:6a:a0:2e:be:b1:73:7c:9f:e3:93:7c:4a:
4a:db:1c:61:db:3f:53:a6:da:76:c1:b9:cc:55:a8:
78:cc:eb:91:5c:70:cb:26:23:ba:97:52:0c:1b:84:
4d:08:88:02:6c:3b:61:7d:9b:5f:d1:d0:89:4d:67:
f7:c0:3d:2d:36:1a:0e:d4:9e:77:9a:7d:11:25:59:
d3:91:39:14:9a:a4:27:ef:3c:90:e4:fe:b0:76:07:
b6:11:cd:28:28:20:66:3b:5d:92:60:34:8b:b5:9d:
86:2a:f5:63:03:e5:7d:8f:d9:d5:cb:ef:57:97:66:
f7:7b:e6:eb:d7:54:e4:c0:c0:e5:18:52:aa:b6:7b:
aa:f6:b2:ee:49:c1:41:cb:b9:57:a0:1d:e2:82:51:
48:cf:9e:f0:14:4d:03:f6:40:37:3f:41:19:19:8b:
24:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E6:1A:7D:F2:1D:AA:33:3C:6A:8E:E2:BB:C9:A5:DC:A2:44:A5:01
X509v3 Authority Key Identifier:
keyid:6D:7E:EE:35:57:79:63:4E:02:A1:4B:39:22:03:67:F3:B3:4E:5B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bX7uNVd5Y04CoUs5IgNn87NOW5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/U-YaffIdqjM8ao7iu8ml3KJEpQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/bX7uNVd5Y04CoUs5IgNn87NOW5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.182.0/23
82.118.17.0/24
193.238.152.0/23
217.12.192.0/23
217.12.195.0-217.12.198.255
217.12.205.0/24
217.12.210.0-217.12.214.255
217.12.216.0/23
217.12.221.0-217.12.223.255
IPv6:
2a02:27a8::/32
2a02:27ad::/32
2a05:9407::/32
Signature Algorithm: sha256WithRSAEncryption
86:8e:57:d9:87:bb:77:41:b5:ef:85:40:87:9b:b2:23:09:94:
b4:10:76:11:d7:ee:5d:83:cc:c3:09:00:43:c2:4a:ca:ce:63:
2d:8c:69:9b:9d:5a:0e:ae:b8:e8:ff:24:74:33:85:99:9f:19:
1b:82:2d:1d:f6:4f:a1:7a:c3:37:41:56:ca:1f:9b:a0:4f:da:
62:ec:3f:9d:0d:d6:6e:15:cf:76:e3:36:73:4b:91:c7:e8:47:
d0:08:0a:64:72:13:cc:5c:eb:d0:7b:53:d6:d4:ec:26:eb:35:
6b:6b:6e:e8:ec:9c:43:dd:37:42:92:46:d6:3e:fe:2b:ef:94:
5e:3e:8b:6b:fe:d7:34:ff:15:07:52:26:02:ac:27:c5:2a:aa:
c1:8c:90:eb:bc:68:42:93:71:5f:c4:79:da:66:bc:37:97:94:
52:99:9d:99:eb:ce:02:98:19:c0:8a:00:57:6a:96:ae:68:2f:
21:b9:cb:59:d1:03:d5:c9:d5:2e:ad:68:f7:9f:ba:ed:65:91:
12:0f:21:5c:5a:48:69:93:aa:5b:26:61:e5:87:1a:b5:3c:09:
3d:40:69:77:b7:d0:39:a5:0a:c7:a3:d1:a8:a0:06:6d:ce:55:
f6:08:4b:73:37:77:3a:c5:24:99:45:8e:17:bd:b4:da:fa:26:
99:93:66:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:40:21 2026 by rpki-client