Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/Y1HfzpAsLv_Gy6z8bYLhgDfLNfw.roa
File: Y1HfzpAsLv_Gy6z8bYLhgDfLNfw.roa (raw, json)
Hash identifier: 8SevxboFZJ0p5ZhUpEIWrPfG/SVniCuIz2yGCMQ1mLs=
Subject key identifier: 63:51:DF:CE:90:2C:2E:FF:C6:CB:AC:FC:6D:82:E1:80:37:CB:35:FC
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 019F0DEC970517E6B87E51D61BB95A41D418
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/Y1HfzpAsLv_Gy6z8bYLhgDfLNfw.roa
Signing time: Sun 28 Jun 2026 11:10:36 +0000
ROA not before: Sun 28 Jun 2026 11:10:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 89.249.192.0/21 maxlen: 24
89.249.203.0/24 maxlen: 24
89.249.205.0/24 maxlen: 24
89.249.206.0/23 maxlen: 24
89.249.206.0/24 maxlen: 24
185.21.252.0/24 maxlen: 24
212.42.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0d:ec:97:05:17:e6:b8:7e:51:d6:1b:b9:5a:41:d4:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Jun 28 11:10:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6351dfce902c2effc6cbacfc6d82e18037cb35fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:30:ae:8a:d0:68:e9:c2:f9:b7:5a:ea:96:3c:
d4:29:cf:ee:d3:64:9c:5d:4e:ff:6b:c8:c2:2d:0e:
dc:cd:68:e3:83:ef:bd:7c:28:c1:a1:43:3d:56:5f:
0a:b5:5f:2a:8d:cf:45:48:18:c6:b4:b3:1e:c2:3b:
23:4f:a2:06:33:20:c7:a9:f3:6d:c3:ea:90:c4:8a:
ac:df:7f:f8:5a:07:e6:78:b8:6e:d3:93:55:1d:9d:
db:56:f9:c4:1d:7f:80:73:3c:08:d7:00:1e:c1:ef:
00:b4:f0:be:94:ba:8c:9f:d9:1b:8d:c7:95:f5:cb:
3d:a8:e7:6e:ce:32:2d:46:98:5b:4e:8b:84:b6:67:
5c:f4:b7:91:7e:34:bf:f2:35:9e:f5:92:3b:89:be:
a0:63:70:74:fc:eb:38:30:78:3b:7b:d2:82:de:ee:
b1:20:f0:ad:38:e0:1b:a0:e2:d6:a8:56:64:32:8e:
be:53:cd:e8:36:18:b8:5f:dd:db:89:f6:3a:14:4b:
f4:20:1e:a6:b3:56:7f:d7:6f:d6:5e:29:ae:c2:d5:
46:ed:f9:20:52:29:81:12:94:de:1c:cd:ad:bb:ea:
ce:a6:1b:61:10:e9:db:85:9a:2f:2d:40:fb:f0:70:
96:8a:b7:3a:c2:16:04:09:2a:90:4e:38:d3:52:30:
cb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:51:DF:CE:90:2C:2E:FF:C6:CB:AC:FC:6D:82:E1:80:37:CB:35:FC
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/Y1HfzpAsLv_Gy6z8bYLhgDfLNfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.192.0/21
89.249.203.0/24
89.249.205.0-89.249.207.255
185.21.252.0/24
212.42.192.0/20
Signature Algorithm: sha256WithRSAEncryption
74:21:fd:a0:00:b4:bd:69:8f:d2:57:84:49:f3:54:b6:de:f4:
1c:36:0a:1a:3d:48:31:2e:aa:6a:31:ba:86:09:dc:22:94:05:
20:fb:e8:79:3a:81:b3:3b:ec:8d:d9:9e:73:f3:34:ff:5b:59:
75:49:9c:07:b4:cf:2e:65:0b:c5:25:99:75:c7:69:28:84:be:
ee:b5:a9:5d:f3:3f:f3:02:bb:33:49:c6:e6:2c:63:ca:3f:99:
0f:aa:c7:7b:98:cc:9b:2a:8c:7b:da:01:39:03:57:49:c6:30:
06:df:3f:f6:c0:9c:db:3a:57:40:aa:c9:88:d6:51:12:39:b5:
d8:20:18:6a:ed:c4:cd:d0:ff:16:fd:1c:28:3d:fb:bf:6a:95:
27:8b:07:91:30:26:83:d8:66:37:65:1b:9a:17:29:d8:9f:bc:
fb:b6:90:30:34:b1:95:27:37:60:3f:52:e8:70:b0:14:e9:a7:
4c:b6:ff:86:2e:d1:c2:07:bf:26:44:d9:37:6f:1c:f9:2e:89:
a4:fe:e5:a3:5d:59:0e:e2:99:45:20:33:47:d9:dc:c9:d6:07:
15:30:84:b5:dd:85:60:c4:b9:98:47:af:bc:77:0a:8f:5e:5d:
88:a8:fd:7f:bf:4c:9e:20:80:4c:b1:1d:cc:8e:01:3e:96:01:
ef:3a:20:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:00:18 2026 by rpki-client