Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ybShg7rF4txJa4V4QuVpOBX1TDs.roa
File: ybShg7rF4txJa4V4QuVpOBX1TDs.roa (raw, json)
Hash identifier: ynArG2JRU8qP9eaocpB2byIjeyA+kk+nakZJu5P+nV8=
Subject key identifier: C9:B4:A1:83:BA:C5:E2:DC:49:6B:85:78:42:E5:69:38:15:F5:4C:3B
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 01A13DB8D4F9C4234E55634C3B3F7D036B41
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ybShg7rF4txJa4V4QuVpOBX1TDs.roa
Signing time: Thu 15 Oct 2026 04:01:25 +0000
ROA not before: Thu 15 Oct 2026 04:01:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209767
IP address blocks: 31.132.192.0/22 maxlen: 22
31.132.196.0/22 maxlen: 22
46.174.204.0/22 maxlen: 22
91.224.213.0/24 maxlen: 24
91.226.52.0/23 maxlen: 23
91.226.54.0/23 maxlen: 23
91.229.30.0/24 maxlen: 24
91.239.179.0/24 maxlen: 24
91.239.224.0/24 maxlen: 24
91.246.204.0/22 maxlen: 22
91.246.216.0/24 maxlen: 24
109.207.133.0/24 maxlen: 24
109.207.142.0/24 maxlen: 24
109.207.143.0/24 maxlen: 24
176.116.229.0/24 maxlen: 24
176.116.237.0/24 maxlen: 24
178.213.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 09:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:d4:f9:c4:23:4e:55:63:4c:3b:3f:7d:03:6b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Oct 15 04:01:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c9b4a183bac5e2dc496b857842e5693815f54c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:69:93:a1:3b:a3:0d:d1:b5:fa:d7:d3:90:ea:
a0:d1:60:f4:8d:fc:a7:e9:ca:c7:79:6b:c3:43:84:
0a:ae:d5:e7:d4:f8:ce:a6:fe:f9:39:32:71:61:19:
db:c5:76:eb:80:5f:2b:6a:7b:2b:7f:ef:7f:10:7a:
60:7f:2c:be:99:ad:71:e5:8d:e6:9f:65:5f:49:25:
07:5b:e0:eb:8d:97:ce:0a:8b:77:25:4f:c9:fe:15:
9b:2c:8c:0d:6d:5d:20:41:d4:d8:de:db:71:3b:31:
7e:64:bb:1e:e0:64:0c:e6:78:b7:dd:02:d2:38:56:
b6:3c:87:8b:76:b7:0c:89:8b:d5:ac:c1:13:3c:80:
3b:73:4e:31:c2:22:17:cb:87:bf:e4:5f:29:77:19:
b2:02:26:ee:17:ed:5d:ca:78:f5:2e:d8:7e:92:47:
95:c7:ab:1f:05:5d:7b:b2:68:26:60:5e:20:47:e3:
29:61:a0:50:37:40:45:e3:2e:f0:e8:f0:1b:f5:8c:
ce:47:a3:45:f4:fb:33:aa:75:12:c9:30:36:b6:6e:
ff:db:8f:5b:f4:0a:c5:bd:b3:08:c7:0a:cc:5e:05:
aa:b4:57:49:ae:bc:c6:ea:b7:52:55:17:88:17:a2:
4f:84:a7:6b:00:f1:25:17:3c:b3:51:a6:3e:86:5e:
43:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B4:A1:83:BA:C5:E2:DC:49:6B:85:78:42:E5:69:38:15:F5:4C:3B
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/ybShg7rF4txJa4V4QuVpOBX1TDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.132.192.0/21
46.174.204.0/22
91.224.213.0/24
91.226.52.0/22
91.229.30.0/24
91.239.179.0/24
91.239.224.0/24
91.246.204.0/22
91.246.216.0/24
109.207.133.0/24
109.207.142.0/23
176.116.229.0/24
176.116.237.0/24
178.213.176.0/22
Signature Algorithm: sha256WithRSAEncryption
97:da:e6:a2:3a:02:f4:06:d6:b0:c6:a3:21:b5:db:f0:1d:45:
45:42:81:e3:a7:d9:7e:b1:e4:23:11:2a:62:3d:3c:4a:9f:81:
e1:3b:ac:54:04:c9:14:75:fc:a0:42:13:4b:82:fc:2d:60:2d:
6a:f3:cb:ce:ce:96:b6:cb:6a:cb:b7:77:79:eb:bc:08:d7:aa:
e6:41:e5:c2:5c:95:d5:27:80:1a:de:ed:7d:70:30:b1:ae:48:
be:16:21:b5:cc:bc:e7:f8:4e:09:90:fc:ef:de:50:76:7c:d6:
a7:ff:1c:6e:b1:b7:e5:69:45:cb:47:b4:91:6c:48:f6:3b:f1:
87:39:3b:8a:ac:c4:87:a7:87:1e:0c:f6:77:17:22:49:13:37:
d0:bb:19:7c:87:b8:1a:67:e8:e2:16:01:6c:95:fa:dc:f2:56:
aa:d1:bc:1c:f2:32:d7:d6:13:3e:6c:42:60:71:b8:91:49:63:
91:80:ea:cd:18:ec:1c:be:c1:96:fd:84:48:0b:33:7c:28:f3:
00:1c:98:04:28:ef:f4:89:d2:40:9c:0e:b2:e9:f9:fe:a7:f1:
89:45:b3:b9:7b:7d:59:1d:db:56:47:e3:0e:a4:44:1f:83:52:
bb:6b:94:04:7d:bb:ab:fb:2d:47:22:a1:11:35:10:dc:f2:62:
dd:ef:1f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:11:25 2026 by rpki-client