Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/YwPRZNc30MUKEtXEMZMozQckpHs.roa
File: YwPRZNc30MUKEtXEMZMozQckpHs.roa (raw, json)
Hash identifier: VKxyqQ6A43/siOTGviZ3VHuSFKN1OGNrTT25graeSAo=
Subject key identifier: 63:03:D1:64:D7:37:D0:C5:0A:12:D5:C4:31:93:28:CD:07:24:A4:7B
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 019FFB20A49F3D53AB8A610C76132036A8E4
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/YwPRZNc30MUKEtXEMZMozQckpHs.roa
Signing time: Thu 13 Aug 2026 12:37:28 +0000
ROA not before: Thu 13 Aug 2026 12:37:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149513
IP address blocks: 109.229.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Aug 2026 10:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:20:a4:9f:3d:53:ab:8a:61:0c:76:13:20:36:a8:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Aug 13 12:37:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6303d164d737d0c50a12d5c4319328cd0724a47b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0e:a8:90:0c:2c:ec:0c:15:d7:ab:de:c2:96:
47:12:3b:84:c4:23:d7:50:01:59:29:b1:69:4c:41:
81:c0:88:7b:dd:d2:85:ac:34:ff:96:ac:f5:fc:04:
c3:63:ee:f0:1a:4e:41:3a:89:3a:e2:01:7f:6a:23:
7f:69:ca:d2:8e:b4:a0:f2:27:7f:bb:33:30:ba:7d:
49:33:19:cd:7c:a1:4f:69:8e:03:4d:d1:29:9a:e6:
8d:4d:2b:72:b7:a7:18:fc:d3:21:f8:7f:57:00:ec:
6c:90:f9:a2:ac:33:08:5d:6e:bd:35:6d:ac:4e:af:
0e:e1:2f:af:9a:85:06:64:27:e6:2a:39:30:b5:77:
27:30:89:83:a8:6f:f0:27:35:78:6c:55:70:49:60:
a2:db:c6:2d:bc:6e:56:86:8d:98:77:c4:05:47:52:
5f:19:44:e5:8d:1f:e0:fa:31:fa:ea:52:24:9a:9b:
38:d6:51:3e:d6:2f:6c:97:6b:f8:35:1a:43:5a:4a:
3b:2f:cd:c1:f2:73:eb:0f:c4:80:3c:0e:13:34:48:
d1:ef:0c:94:33:4d:b2:83:91:31:ae:71:25:e6:87:
3b:be:1b:54:a8:12:20:eb:51:78:8f:8e:e1:d9:35:
3e:04:28:84:51:c1:2a:d7:e6:0d:57:ec:e8:b9:53:
47:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:03:D1:64:D7:37:D0:C5:0A:12:D5:C4:31:93:28:CD:07:24:A4:7B
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/YwPRZNc30MUKEtXEMZMozQckpHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.229.216.0/23
Signature Algorithm: sha256WithRSAEncryption
53:db:1b:82:3c:d4:47:34:60:d1:99:26:28:f2:85:d6:04:bd:
53:18:c5:45:52:97:94:7f:ef:64:19:27:2a:21:25:c1:6f:26:
c0:ed:2d:6f:85:e0:29:6d:c0:04:65:87:e3:5b:d8:10:d8:15:
bb:e1:42:3c:e2:f9:98:54:fa:6a:69:ca:9a:94:e0:ff:09:03:
47:1f:67:e4:ca:b5:3c:28:46:4d:a6:58:64:7f:3d:6d:8c:f9:
2e:fc:09:9f:b6:15:07:09:a9:86:bb:fa:a8:96:64:34:ee:4b:
30:62:48:52:00:88:5f:5b:3e:10:56:93:d3:0a:c9:92:be:7e:
48:b8:0d:f5:db:85:c7:eb:6a:5d:28:e0:81:f7:5f:f2:da:94:
9a:2a:71:ae:d5:97:ad:78:8f:dc:24:30:85:e3:bf:f8:29:bc:
f4:6e:dc:92:b0:62:45:4a:f7:32:5e:6e:37:ce:06:06:0b:80:
34:fd:b9:1b:36:82:ca:bb:9b:83:7d:9a:9b:f7:63:4c:45:01:
c8:ec:8a:24:0a:ec:cc:2a:44:61:18:5c:19:59:79:73:12:8b:
75:f6:18:9c:4f:9f:e9:2a:af:c3:42:87:0d:c9:83:ca:ed:cd:
c6:5d:41:b7:bc:05:a6:44:be:6c:e6:2d:72:a1:f5:b9:71:3d:
85:5d:9b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:48:45 2026 by rpki-client