Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/YkkSPOLb7OP2rfjXqX-8lCsAG6k.roa
File: YkkSPOLb7OP2rfjXqX-8lCsAG6k.roa (raw, json)
Hash identifier: fUz9wXd7CTbwt95RK6+d/Ly3JKkAW+XPFyaRUjNT/4w=
Subject key identifier: 62:49:12:3C:E2:DB:EC:E3:F6:AD:F8:D7:A9:7F:BC:94:2B:00:1B:A9
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A19C2248506E2AED668D707432003D1537
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/YkkSPOLb7OP2rfjXqX-8lCsAG6k.roa
Signing time: Mon 02 Nov 2026 12:00:54 +0000
ROA not before: Mon 02 Nov 2026 12:00:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 62.41.37.0/24 maxlen: 24
62.93.164.0/22 maxlen: 24
62.93.176.0/22 maxlen: 24
62.105.208.0/23 maxlen: 23
77.67.2.0/23 maxlen: 23
84.20.4.0/22 maxlen: 24
84.20.16.0/22 maxlen: 24
84.20.24.0/22 maxlen: 24
92.71.34.0/23 maxlen: 24
92.71.40.0/22 maxlen: 24
92.71.44.0/23 maxlen: 24
92.71.66.0/23 maxlen: 24
92.71.98.0/23 maxlen: 24
92.71.124.0/23 maxlen: 24
134.222.24.0/22 maxlen: 22
134.222.28.0/23 maxlen: 23
134.222.30.0/23 maxlen: 23
134.222.52.0/23 maxlen: 23
134.222.56.0/23 maxlen: 23
134.222.76.0/24 maxlen: 24
134.222.77.0/24 maxlen: 24
134.222.124.0/23 maxlen: 23
134.222.148.0/22 maxlen: 22
134.222.196.0/22 maxlen: 22
134.222.220.0/23 maxlen: 23
134.222.232.0/22 maxlen: 22
134.222.240.0/20 maxlen: 24
135.196.21.0/24 maxlen: 24
135.196.106.0/24 maxlen: 24
135.196.180.0/23 maxlen: 23
135.196.185.0/24 maxlen: 24
185.160.40.0/22 maxlen: 22
193.141.140.0/23 maxlen: 23
194.45.47.0/24 maxlen: 24
194.77.192.0/24 maxlen: 24
194.121.52.0/22 maxlen: 22
194.122.87.0/24 maxlen: 24
195.81.76.0/24 maxlen: 24
195.81.92.0/24 maxlen: 24
195.81.101.0/24 maxlen: 24
195.81.109.0/24 maxlen: 24
195.81.110.0/24 maxlen: 24
195.81.113.0/24 maxlen: 24
195.81.114.0/24 maxlen: 24
195.81.117.0/24 maxlen: 24
195.81.126.0/24 maxlen: 24
195.81.132.0/24 maxlen: 24
195.81.136.0/24 maxlen: 24
195.81.138.0/24 maxlen: 24
195.81.148.0/24 maxlen: 24
195.81.150.0/24 maxlen: 24
195.81.154.0/24 maxlen: 24
195.81.171.0/24 maxlen: 24
195.81.181.0/24 maxlen: 24
195.81.191.0/24 maxlen: 24
195.81.211.0/24 maxlen: 24
195.81.231.0/24 maxlen: 24
195.81.243.0/24 maxlen: 24
195.81.249.0/24 maxlen: 24
195.81.255.0/24 maxlen: 24
195.86.208.0/24 maxlen: 24
195.86.223.0/24 maxlen: 24
212.189.105.0/24 maxlen: 24
212.222.168.0/24 maxlen: 24
213.139.8.0/22 maxlen: 24
213.169.206.0/23 maxlen: 23
213.201.134.0/24 maxlen: 24
213.201.242.0/23 maxlen: 24
213.201.252.0/23 maxlen: 24
217.8.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 01:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9c:22:48:50:6e:2a:ed:66:8d:70:74:32:00:3d:15:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Nov 2 12:00:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6249123ce2dbece3f6adf8d7a97fbc942b001ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:64:cb:eb:b2:bb:2d:ac:93:7c:9a:3d:7f:88:
58:b4:fc:3f:25:f8:fe:3d:4c:23:2a:01:13:ec:53:
f9:be:16:46:8a:d1:d3:24:63:27:e8:a0:07:8c:f5:
e1:53:23:61:b8:1c:c0:c1:39:86:36:38:a8:7c:aa:
57:3b:77:4d:6e:e9:f8:8d:14:2f:94:1a:8b:35:c3:
8b:21:f0:d0:da:e3:9e:9f:15:a4:cf:bf:d7:4b:91:
93:57:21:3a:6e:b6:70:58:83:29:47:b5:40:ee:09:
c5:ee:6d:ba:fe:18:45:e9:6b:2b:5e:38:02:90:71:
fd:e7:b0:94:a8:f2:a7:6c:89:c7:86:b7:08:19:fd:
51:ab:41:34:c1:8c:0c:69:67:94:9a:94:16:3f:f4:
88:40:0f:c5:f6:82:de:0e:ec:cf:65:78:dd:ae:7c:
c8:1f:97:13:4c:2d:37:14:74:02:91:87:c6:d7:2b:
c5:c6:74:31:f5:b9:52:5e:0e:93:c1:6c:71:35:a9:
d2:41:3f:2a:a1:85:35:7a:25:2f:61:3d:4f:9b:4f:
fa:ed:55:69:6a:25:b5:48:08:0f:be:b8:f1:4f:76:
55:49:01:7b:86:7f:ea:6a:4c:a5:f8:cf:0b:35:8c:
bd:42:1a:6f:cd:8d:f1:b9:a4:f6:da:2c:35:11:e5:
4e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:49:12:3C:E2:DB:EC:E3:F6:AD:F8:D7:A9:7F:BC:94:2B:00:1B:A9
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/YkkSPOLb7OP2rfjXqX-8lCsAG6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.41.37.0/24
62.93.164.0/22
62.93.176.0/22
62.105.208.0/23
77.67.2.0/23
84.20.4.0/22
84.20.16.0/22
84.20.24.0/22
92.71.34.0/23
92.71.40.0-92.71.45.255
92.71.66.0/23
92.71.98.0/23
92.71.124.0/23
134.222.24.0/21
134.222.52.0/23
134.222.56.0/23
134.222.76.0/23
134.222.124.0/23
134.222.148.0/22
134.222.196.0/22
134.222.220.0/23
134.222.232.0/22
134.222.240.0/20
135.196.21.0/24
135.196.106.0/24
135.196.180.0/23
135.196.185.0/24
185.160.40.0/22
193.141.140.0/23
194.45.47.0/24
194.77.192.0/24
194.121.52.0/22
194.122.87.0/24
195.81.76.0/24
195.81.92.0/24
195.81.101.0/24
195.81.109.0-195.81.110.255
195.81.113.0-195.81.114.255
195.81.117.0/24
195.81.126.0/24
195.81.132.0/24
195.81.136.0/24
195.81.138.0/24
195.81.148.0/24
195.81.150.0/24
195.81.154.0/24
195.81.171.0/24
195.81.181.0/24
195.81.191.0/24
195.81.211.0/24
195.81.231.0/24
195.81.243.0/24
195.81.249.0/24
195.81.255.0/24
195.86.208.0/24
195.86.223.0/24
212.189.105.0/24
212.222.168.0/24
213.139.8.0/22
213.169.206.0/23
213.201.134.0/24
213.201.242.0/23
213.201.252.0/23
217.8.195.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:17:f8:ae:92:44:11:2e:7c:a5:d2:e8:82:13:64:95:69:94:
8a:1b:94:b0:93:77:60:12:a1:32:78:2a:ae:14:26:95:da:98:
5c:54:21:d9:3f:8f:0d:36:3f:17:1a:01:a5:32:e0:84:ed:d8:
f3:c5:7b:24:ee:77:6d:6a:30:30:fe:5e:d9:70:51:64:36:d7:
f2:dd:3e:f1:4c:5f:7c:24:0c:9f:be:d4:33:3a:fc:34:26:93:
e6:a7:a7:2c:4a:b8:9b:bc:d5:d7:0e:e9:06:cc:23:4c:e3:1e:
89:49:c1:e9:43:9f:69:b3:3b:04:bd:56:d3:ed:aa:df:93:6e:
82:eb:1f:76:55:93:81:e6:1e:16:ae:51:53:5e:3d:f3:73:ab:
75:49:e9:3c:9c:d7:72:20:cf:08:d4:fc:99:fe:e0:fe:61:01:
43:b7:34:3b:18:da:04:8d:62:f9:04:9c:32:3f:f3:e8:9b:b4:
a3:ea:70:08:95:9c:e2:e1:69:80:24:4f:69:13:e0:b8:30:e5:
5e:90:0a:de:c9:e4:e2:15:33:bf:d5:02:41:4e:72:f7:a1:49:
cb:b7:91:48:a2:ff:3e:59:43:a9:23:c9:b0:62:92:81:c9:c5:
a9:90:f8:33:fe:8e:8c:57:89:2a:a2:d7:b9:0a:62:77:6a:a2:
b2:cc:10:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 11:12:15 2026 by rpki-client