Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/yXua7TJXBD60LJFMCJknq_wF7ks.roa
File: yXua7TJXBD60LJFMCJknq_wF7ks.roa (raw, json)
Hash identifier: NlCLBspwOrofrAd3bw8GAtuiLYNcp/MexJpxkBP0so0=
Subject key identifier: C9:7B:9A:ED:32:57:04:3E:B4:2C:91:4C:08:99:27:AB:FC:05:EE:4B
Certificate issuer: /CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Certificate serial: 019DD5A899AE6A8F53B5D9CC7150BB5153FD
Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/yXua7TJXBD60LJFMCJknq_wF7ks.roa
Signing time: Tue 28 Apr 2026 19:54:49 +0000
ROA not before: Tue 28 Apr 2026 19:54:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198605
IP address blocks: 95.142.112.0/24 maxlen: 24
95.142.115.0/24 maxlen: 24
95.142.116.0/24 maxlen: 24
95.142.118.0/24 maxlen: 24
95.142.121.0/24 maxlen: 24
95.142.124.0/24 maxlen: 24
159.242.227.0/24 maxlen: 24
159.242.234.0/24 maxlen: 24
159.242.239.0/24 maxlen: 24
185.54.230.0/24 maxlen: 24
194.99.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d5:a8:99:ae:6a:8f:53:b5:d9:cc:71:50:bb:51:53:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Validity
Not Before: Apr 28 19:54:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c97b9aed3257043eb42c914c089927abfc05ee4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e1:33:d6:20:6e:53:b7:a0:68:8b:8b:72:14:
23:a2:77:d7:c5:86:57:86:3f:a1:c9:78:e5:ba:12:
b5:66:74:4e:4d:e6:56:2d:09:de:69:01:a9:4a:6a:
63:82:64:86:7c:02:65:cb:d6:ce:e0:f1:f6:67:35:
60:77:63:80:62:e8:52:00:19:0f:e9:00:5e:ac:ae:
aa:a7:74:18:f4:df:e0:ae:2a:12:65:8c:0c:26:62:
08:1d:1c:17:0f:11:95:2b:59:03:6d:57:ee:08:b5:
ae:2f:b1:dd:17:2e:63:93:d1:e6:29:c7:55:9c:b0:
d2:57:ec:c6:2e:b8:9e:3f:eb:ae:22:f0:73:78:2c:
07:9a:87:e3:98:b8:58:1a:3c:91:44:6e:54:90:8b:
90:8d:14:1a:56:df:eb:61:34:7a:24:f2:4a:37:6c:
0e:ec:22:b6:e7:a0:7b:c0:7d:36:4e:6b:d7:5c:9e:
e6:25:3a:2e:f1:a9:a7:4c:e2:2b:f8:bf:ed:d4:ff:
7f:b4:76:f4:6d:d4:82:a4:35:c3:a3:71:7e:ae:ef:
fc:90:0c:d2:db:23:19:3d:57:54:af:93:6e:41:80:
ed:81:82:2e:79:9a:77:d9:69:76:a1:45:2f:5a:3d:
1f:cb:06:78:b0:cb:5d:a0:79:f5:03:f6:92:07:9a:
ae:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7B:9A:ED:32:57:04:3E:B4:2C:91:4C:08:99:27:AB:FC:05:EE:4B
X509v3 Authority Key Identifier:
keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/yXua7TJXBD60LJFMCJknq_wF7ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.142.112.0/24
95.142.115.0-95.142.116.255
95.142.118.0/24
95.142.121.0/24
95.142.124.0/24
159.242.227.0/24
159.242.234.0/24
159.242.239.0/24
185.54.230.0/24
194.99.28.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:b7:8a:83:c0:73:5e:f3:a1:d3:2f:fc:27:f1:1b:e9:9e:54:
29:10:89:bb:77:1b:1a:96:53:a6:95:aa:04:b9:fb:a3:09:3c:
69:b8:14:6d:84:2b:8e:5e:59:56:40:af:97:6b:86:aa:b6:b9:
75:e5:62:fe:a1:9e:d2:d3:f5:0d:12:3a:54:de:a3:d5:00:2c:
e9:8f:82:8e:73:9d:df:d1:18:82:9c:60:79:36:9a:04:f8:ff:
9c:99:22:55:0a:1b:7e:c0:90:3b:2a:04:00:8a:d9:9a:ad:16:
7e:b9:1c:bb:7b:42:2b:e6:77:de:73:da:58:25:11:6d:92:b4:
c1:d0:24:f1:52:61:d8:2d:6d:62:5b:b5:52:2d:f5:56:d5:55:
db:1a:27:76:3c:42:e7:29:e4:af:16:e5:6d:8d:1d:b3:d2:0f:
cd:1a:85:c9:e6:c4:a4:17:6e:d4:28:64:a2:f5:c9:a3:5f:11:
27:3f:84:ba:89:b6:75:c5:41:53:ae:46:b3:a4:29:90:46:14:
d4:4f:2b:2e:55:cd:18:07:ee:a7:cc:5a:b2:04:b8:85:75:77:
57:cc:8a:02:c0:71:b0:21:0c:bd:ac:7e:50:bf:2f:aa:7e:b5:
e8:ce:e2:ff:f4:0e:a8:f8:fc:6f:c8:73:47:ba:cb:11:0d:c1:
6d:38:ad:0c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 6 01:09:10 2026 by rpki-client