Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/Y6vuMNkzIPJWRuJg5TuMbsi1FcM.roa
File: Y6vuMNkzIPJWRuJg5TuMbsi1FcM.roa (raw, json)
Hash identifier: 3aMZ5jo10sNTG4r9ibdunWoGNfpF0gSMyVHFFSZbv+I=
Subject key identifier: 63:AB:EE:30:D9:33:20:F2:56:46:E2:60:E5:3B:8C:6E:C8:B5:15:C3
Certificate issuer: /CN=68da108bce4fb56556246b315726f5f634585ef1
Certificate serial: 019F23688206C076139AA9B7EA4A3BB554D4
Authority key identifier: 68:DA:10:8B:CE:4F:B5:65:56:24:6B:31:57:26:F5:F6:34:58:5E:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/Y6vuMNkzIPJWRuJg5TuMbsi1FcM.roa
Signing time: Thu 02 Jul 2026 15:17:59 +0000
ROA not before: Thu 02 Jul 2026 15:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201917
IP address blocks: 37.25.128.0/17 maxlen: 24
45.144.96.0/22 maxlen: 24
46.108.0.0/16 maxlen: 24
46.190.128.0/17 maxlen: 24
47.73.0.0/16 maxlen: 24
47.73.25.0/24 maxlen: 24
47.73.31.0/24 maxlen: 24
47.73.81.0/24 maxlen: 24
47.73.85.0/24 maxlen: 24
47.73.86.0/24 maxlen: 24
47.73.114.0/24 maxlen: 24
47.73.146.0/24 maxlen: 24
47.73.214.0/24 maxlen: 24
47.73.250.0/24 maxlen: 24
139.47.160.0/19 maxlen: 24
139.47.192.0/18 maxlen: 24
195.232.128.0/17 maxlen: 24
195.233.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 18:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:82:06:c0:76:13:9a:a9:b7:ea:4a:3b:b5:54:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68da108bce4fb56556246b315726f5f634585ef1
Validity
Not Before: Jul 2 15:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63abee30d93320f25646e260e53b8c6ec8b515c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:61:2d:3b:87:da:dc:d6:b8:b1:8b:12:4c:29:
c7:08:f1:8a:5a:d7:1e:fb:cd:28:3b:5c:82:87:a8:
2f:ab:f4:c9:a5:82:6b:50:27:0c:ef:e8:b8:d4:1c:
65:35:88:d1:76:83:5d:8d:2d:0a:96:d9:55:dd:75:
73:65:7e:b4:d8:e3:ad:04:3c:ac:96:82:4f:92:99:
7d:cd:e6:4c:2b:74:24:be:0e:17:b6:f5:a0:c7:94:
16:8d:62:a7:a4:d5:1d:39:da:dd:97:99:b0:5c:11:
16:8e:d0:35:1c:d3:40:3f:29:b9:35:aa:68:01:4b:
a7:34:b7:b0:49:bb:5c:eb:6a:06:92:d0:9c:c2:53:
bd:41:40:98:95:ec:c2:62:13:5c:9c:a7:bc:08:fb:
f6:4a:36:e9:94:1f:bb:97:aa:08:f1:d4:58:2c:f6:
d1:6e:18:07:28:e9:a0:88:fb:ae:54:23:b5:09:67:
46:7b:75:60:64:86:46:79:2c:ef:c3:fa:1c:ed:fd:
af:89:2f:d5:a6:49:df:83:c3:04:3d:bb:77:65:17:
40:0f:58:7a:b1:28:cf:5d:dc:e7:a0:a5:74:41:70:
c5:dc:c9:6f:44:ad:b2:aa:7d:6e:bc:da:4d:e3:7c:
61:4e:bc:6d:11:24:ae:5b:32:60:1d:42:b5:99:b9:
c0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AB:EE:30:D9:33:20:F2:56:46:E2:60:E5:3B:8C:6E:C8:B5:15:C3
X509v3 Authority Key Identifier:
keyid:68:DA:10:8B:CE:4F:B5:65:56:24:6B:31:57:26:F5:F6:34:58:5E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/Y6vuMNkzIPJWRuJg5TuMbsi1FcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.25.128.0/17
45.144.96.0/22
46.108.0.0/16
46.190.128.0/17
47.73.0.0/16
139.47.160.0-139.47.255.255
195.232.128.0-195.233.255.255
Signature Algorithm: sha256WithRSAEncryption
42:50:01:cc:36:1c:59:11:a8:4d:0c:1e:58:62:f8:d3:dc:1a:
c9:25:09:cf:e7:d4:eb:40:a3:1a:65:2b:11:05:3b:b2:f8:f0:
c3:d2:51:ba:f9:d3:ce:dc:40:13:16:f1:db:29:a9:6b:93:04:
97:b4:22:3d:1b:8e:55:b6:a3:69:ec:0f:5c:d8:59:70:d5:d7:
1f:ad:f2:03:4a:c3:44:09:c4:10:a9:91:57:8a:10:da:3d:ca:
2e:54:f6:62:ca:52:05:53:e6:8d:37:aa:69:6d:be:3c:75:75:
1c:7b:d7:d1:a6:2e:ca:14:bb:7a:d9:69:a8:21:91:ae:f3:87:
4d:cf:9b:25:88:b2:d7:10:ea:be:38:9e:b8:a4:aa:6c:dc:8e:
49:9b:e9:d8:20:a2:97:7e:77:17:73:bf:34:9e:0d:e9:94:e7:
55:a2:19:19:8d:e5:86:ea:d0:18:15:63:d6:79:6a:65:cc:0f:
5c:c5:1a:0b:be:76:ed:19:dd:b0:f8:e4:61:c2:5f:26:79:8d:
f8:61:f9:d3:ce:20:fd:bf:bb:68:e2:be:26:c5:38:46:33:54:
6e:e5:98:be:00:a3:c6:ce:22:05:e9:cd:af:63:84:fe:94:b1:
2c:cc:a4:c4:86:5f:53:5e:c8:45:12:2a:27:55:2d:1a:94:46:
f4:9d:d0:17
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZ8jaIIGwHYTmqm36ko7tVTUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZGExMDhiY2U0ZmI1NjU1NjI0NmIzMTU3MjZmNWY2MzQ1
ODVlZjEwHhcNMjYwNzAyMTUxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2M2FiZWUzMGQ5MzMyMGYyNTY0NmUyNjBlNTNiOGM2ZWM4YjUxNWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGEtO4fa3Na4sYsSTCnHCPGKWtce
+80oO1yCh6gvq/TJpYJrUCcM7+i41BxlNYjRdoNdjS0KltlV3XVzZX602OOtBDys
loJPkpl9zeZMK3Qkvg4XtvWgx5QWjWKnpNUdOdrdl5mwXBEWjtA1HNNAPym5Napo
AUunNLewSbtc62oGktCcwlO9QUCYlezCYhNcnKe8CPv2SjbplB+7l6oI8dRYLPbR
bhgHKOmgiPuuVCO1CWdGe3VgZIZGeSzvw/oc7f2viS/Vpknfg8MEPbt3ZRdAD1h6
sSjPXdznoKV0QXDF3MlvRK2yqn1uvNpN43xhTrxtESSuWzJgHUK1mbnAQQIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFGOr7jDZMyDyVkbiYOU7jG7ItRXDMB8GA1UdIwQY
MBaAFGjaEIvOT7VlViRrMVcm9fY0WF7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU5vUWk4NVB0V1ZXSkdzeFZ5YjE5alJZWHZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAt
ZWVjNWQ1MGVmYTk0LzEvWTZ2dU1Oa3pJUEpXUnVKZzVUdU1ic2kxRmNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAtZWVjNWQ1MGVmYTk0
LzEvYU5vUWk4NVB0V1ZXSkdzeFZ5YjE5alJZWHZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQHJRmAAwQC
LZBgAwMALmwDBAcuvoADAwAvSTALAwQFiy+gAwMEiyAwCwMEB8PogAMDAcPoMA0G
CSqGSIb3DQEBCwUAA4IBAQBCUAHMNhxZEahNDB5YYvjT3BrJJQnP59TrQKMaZSsR
BTuy+PDD0lG6+dPO3EATFvHbKalrkwSXtCI9G45VtqNp7A9c2Flw1dcfrfIDSsNE
CcQQqZFXihDaPcouVPZiylIFU+aNN6ppbb48dXUce9fRpi7KFLt62WmoIZGu84dN
z5sliLLXEOq+OJ64pKps3I5Jm+nYIKKXfncXc780ng3plOdVohkZjeWG6tAYFWPW
eWplzA9cxRoLvnbtGd2w+ORhwl8meY34YfnTziD9v7to4r4mxThGM1Ru5Zi+AKPG
ziIF6c2vY4T+lLEszKTEhl9TXshFEionVS0alEb0ndAX
-----END CERTIFICATE-----
Generated at Wed Jul 22 02:02:17 2026 by rpki-client