Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/Ytj0U6XkrheA-ulyRiwoygUy2PE.roa
File: Ytj0U6XkrheA-ulyRiwoygUy2PE.roa (raw, json)
Hash identifier: kTvsXh5scJZT1sBb1vEyZPTtitPkJZHzzOBVXCq/ERw=
Subject key identifier: 62:D8:F4:53:A5:E4:AE:17:80:FA:E9:72:46:2C:28:CA:05:32:D8:F1
Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Certificate serial: 01A0A09755D57E56F49449DB709DE7F94C28
Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/Ytj0U6XkrheA-ulyRiwoygUy2PE.roa
Signing time: Mon 14 Sep 2026 15:44:27 +0000
ROA not before: Mon 14 Sep 2026 15:44:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 95.170.12.0/24 maxlen: 24
95.170.19.0/24 maxlen: 24
95.170.20.0/24 maxlen: 24
95.170.27.0/24 maxlen: 24
95.170.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a0:97:55:d5:7e:56:f4:94:49:db:70:9d:e7:f9:4c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Validity
Not Before: Sep 14 15:44:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62d8f453a5e4ae1780fae972462c28ca0532d8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:07:4d:4d:df:4d:f8:22:fe:c0:18:49:67:77:
d9:da:5c:70:0c:07:60:93:b8:14:45:f7:9f:14:84:
82:a7:b1:87:a9:e9:a0:bf:b7:b2:e8:bc:95:6b:4e:
25:56:ff:f3:4d:f6:e9:32:ea:d5:0d:71:e3:3b:71:
b3:50:99:4c:39:ce:a2:0e:51:6b:80:53:e1:74:9c:
2f:ce:6b:32:c5:9b:af:88:3f:bc:c2:b6:8b:b4:ef:
09:97:80:25:b8:65:e7:04:e5:ad:50:39:16:56:9d:
5e:25:4f:c6:8c:db:3e:d9:ea:19:be:d9:0f:13:9e:
24:7c:56:cc:da:06:b7:61:5b:22:6d:01:be:ac:18:
c7:95:63:eb:74:13:61:ff:d6:dc:a1:ef:b1:b4:90:
25:b6:ab:21:13:f0:7e:ac:93:94:f7:fc:ed:3f:f3:
62:0c:d3:b3:91:fa:36:5a:ee:4e:32:aa:7d:32:7a:
ec:ed:b3:91:54:d6:72:94:17:58:f7:0c:16:e3:ef:
96:c1:46:54:e9:1e:83:b5:a7:55:ce:9d:94:0e:bb:
63:ff:da:54:7f:5b:91:37:52:0b:73:d0:aa:d8:38:
ef:71:4d:b7:92:25:0f:82:56:18:de:5c:d3:3e:7e:
8c:81:31:2e:8b:b7:ed:a7:3b:81:f7:4e:a9:e9:5b:
68:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D8:F4:53:A5:E4:AE:17:80:FA:E9:72:46:2C:28:CA:05:32:D8:F1
X509v3 Authority Key Identifier:
keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/Ytj0U6XkrheA-ulyRiwoygUy2PE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.170.12.0/24
95.170.19.0-95.170.20.255
95.170.27.0-95.170.28.255
Signature Algorithm: sha256WithRSAEncryption
12:c6:48:e3:92:bc:23:7c:30:54:8b:df:ea:f7:f2:51:9d:d6:
c1:10:c4:91:0e:05:71:a3:f9:9d:19:b4:dc:0d:73:c2:4b:4a:
9a:c1:8c:95:47:16:ca:0d:78:e9:fa:69:e2:40:c5:47:df:4c:
58:3f:11:53:c5:c6:db:e4:8d:1a:24:14:c9:0e:57:d5:6d:38:
29:31:9d:aa:54:05:fc:9e:07:db:cd:38:43:40:c8:4b:21:ce:
58:0a:94:74:ca:56:1b:31:01:0e:05:d9:22:83:89:2e:88:62:
b3:d0:41:3a:14:ca:7d:e3:dd:86:c2:ae:0f:9f:86:aa:42:26:
6f:f6:b7:7d:ce:45:bf:cf:22:19:b1:a3:0c:99:a4:10:aa:5b:
02:3d:fa:2c:05:87:ec:05:4a:24:94:62:87:27:34:cb:ce:17:
6e:ca:4a:a3:b9:3b:fa:ba:38:ea:15:1d:a8:83:1d:4e:5a:5f:
81:be:d7:0e:76:1d:2c:2a:03:e5:a6:f8:2d:6d:09:0e:c2:12:
0d:26:1e:54:a4:ff:b9:8f:ee:4b:be:04:65:a9:d6:eb:ef:21:
ab:91:95:3c:f9:13:e9:66:9d:f1:e1:e6:84:ff:e1:14:06:33:
86:b7:8f:d3:10:d0:3c:31:5d:ea:9e:cd:bc:f9:ad:0c:5b:df:
55:28:47:7a
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaCgl1XVflb0lEnbcJ3n+UwoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZTQyNWEzMmI2MmQzOTgxOGM0Y2JiMDA4MTA3NTY4NmZj
NGM4ZTgwHhcNMjYwOTE0MTU0NDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MmQ4ZjQ1M2E1ZTRhZTE3ODBmYWU5NzI0NjJjMjhjYTA1MzJkOGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQdNTd9N+CL+wBhJZ3fZ2lxwDAdg
k7gURfefFISCp7GHqemgv7ey6LyVa04lVv/zTfbpMurVDXHjO3GzUJlMOc6iDlFr
gFPhdJwvzmsyxZuviD+8wraLtO8Jl4AluGXnBOWtUDkWVp1eJU/GjNs+2eoZvtkP
E54kfFbM2ga3YVsibQG+rBjHlWPrdBNh/9bcoe+xtJAltqshE/B+rJOU9/ztP/Ni
DNOzkfo2Wu5OMqp9Mnrs7bORVNZylBdY9wwW4++WwUZU6R6DtadVzp2UDrtj/9pU
f1uRN1ILc9Cq2DjvcU23kiUPglYY3lzTPn6MgTEui7ftpzuB906p6VtonQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFGLY9FOl5K4XgPrpckYsKMoFMtjxMB8GA1UdIwQY
MBaAFCDkJaMrYtOYGMTLsAgQdWhvxMjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGIt
ZWNkMjk2NWNiN2U3LzEvWXRqMFU2WGtyaGVBLXVseVJpd295Z1V5MlBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGItZWNkMjk2NWNiN2U3
LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQAX6oMMAwD
BABfqhMDBABfqhQwDAMEAF+qGwMEAF+qHDANBgkqhkiG9w0BAQsFAAOCAQEAEsZI
45K8I3wwVIvf6vfyUZ3WwRDEkQ4FcaP5nRm03A1zwktKmsGMlUcWyg146fpp4kDF
R99MWD8RU8XG2+SNGiQUyQ5X1W04KTGdqlQF/J4H2804Q0DISyHOWAqUdMpWGzEB
DgXZIoOJLohis9BBOhTKfePdhsKuD5+GqkImb/a3fc5Fv88iGbGjDJmkEKpbAj36
LAWH7AVKJJRihyc0y84XbspKo7k7+ro46hUdqIMdTlpfgb7XDnYdLCoD5ab4LW0J
DsISDSYeVKT/uY/uS74EZanW6+8hq5GVPPkT6Wad8eHmhP/hFAYzhreP0xDQPDFd
6p7NvPmtDFvfVShHeg==
-----END CERTIFICATE-----
Generated at Fri Sep 18 20:11:29 2026 by rpki-client