Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/yFF6AlpmTYCarMNPxFu2T6kqfGM.roa
File: yFF6AlpmTYCarMNPxFu2T6kqfGM.roa (raw, json)
Hash identifier: v01rTquh188QwoYQffMgTqG01fJUQiiv/q2LsdOVEic=
Subject key identifier: C8:51:7A:02:5A:66:4D:80:9A:AC:C3:4F:C4:5B:B6:4F:A9:2A:7C:63
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A05D92218D88E5BF78707EFA526B770F7E
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/yFF6AlpmTYCarMNPxFu2T6kqfGM.roa
Signing time: Tue 01 Sep 2026 15:24:12 +0000
ROA not before: Tue 01 Sep 2026 15:24:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 89.149.148.0/24 maxlen: 24
194.77.208.0/21 maxlen: 24
194.77.235.0/24 maxlen: 24
212.189.62.0/23 maxlen: 23
212.189.70.0/23 maxlen: 24
217.8.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 13:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:92:21:8d:88:e5:bf:78:70:7e:fa:52:6b:77:0f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 1 15:24:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8517a025a664d809aacc34fc45bb64fa92a7c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:36:f0:66:c6:28:23:dc:0f:f2:6e:00:72:f6:
00:43:58:4a:60:8e:66:ae:1b:0d:9d:25:11:53:5b:
9f:59:b1:a3:ce:e4:da:80:d5:fc:7e:42:bb:28:ff:
d1:fb:1e:a9:d6:8f:ff:8f:24:93:82:1e:81:09:21:
5b:ed:a9:6f:0b:02:9c:d1:32:ed:92:bb:8a:e8:ff:
0a:51:bd:42:68:9b:c1:d7:13:07:00:f1:dc:f1:52:
d7:3e:2e:e8:6e:b9:69:17:6a:cb:54:90:1c:98:ff:
d4:e3:f9:b4:a7:27:ef:0f:c7:dd:e9:21:48:2b:96:
7a:b3:0a:31:a2:2a:3c:3c:e5:3c:ae:83:8a:7b:d4:
35:bb:66:70:cb:1e:2e:ae:6e:a3:37:49:f4:97:9c:
ce:10:80:61:88:77:90:0c:07:78:51:9c:a1:ff:06:
0d:50:16:1b:02:8e:ae:ef:32:4f:47:2d:a1:fb:81:
d6:57:6b:4d:f6:fb:c0:bb:7b:d8:46:57:4c:f3:14:
6f:00:b9:d9:62:c3:1c:4f:e9:00:fd:08:b6:df:5c:
b4:76:43:2b:ae:19:09:3f:9c:b0:2e:9d:6a:b5:3b:
32:41:e7:e6:78:ac:b2:3f:2c:35:c1:24:8b:84:74:
26:4f:04:f1:f6:3f:21:5a:c9:4e:48:2e:b0:01:07:
1d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:51:7A:02:5A:66:4D:80:9A:AC:C3:4F:C4:5B:B6:4F:A9:2A:7C:63
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/yFF6AlpmTYCarMNPxFu2T6kqfGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.149.148.0/24
194.77.208.0/21
194.77.235.0/24
212.189.62.0/23
212.189.70.0/23
217.8.196.0/24
Signature Algorithm: sha256WithRSAEncryption
29:6d:b9:30:dc:e6:72:b7:c6:43:51:1d:0a:3c:75:96:a7:0c:
c9:7b:8f:8a:56:04:de:9f:6e:81:8a:4b:d8:09:7b:e5:64:54:
d9:ea:59:c4:a2:59:f8:9b:50:39:63:9c:0d:53:aa:47:c8:5a:
70:a2:31:6d:0f:3e:f3:a7:f6:61:c4:ff:6e:7c:82:98:0a:29:
18:8a:d8:17:e7:4f:96:31:ba:87:37:0d:a1:82:16:e5:cd:1c:
10:5c:e7:bb:ab:c7:c7:b1:27:d5:e6:51:e2:48:41:82:7f:8f:
09:0c:8f:52:2f:56:79:86:85:bf:52:8c:01:9f:1e:1e:62:71:
92:52:64:9d:7b:97:91:08:e2:63:91:75:f2:1a:95:12:a7:7d:
c7:fe:9e:76:d9:3c:5c:a7:37:78:9d:1d:2e:14:59:69:20:6f:
1c:c3:88:5c:57:f5:8d:a2:1c:d0:6f:fb:10:e6:3c:53:99:75:
a6:22:2e:0c:06:cc:cf:57:98:91:6d:5a:cf:12:e5:ae:f9:75:
36:77:e6:7d:a9:56:e9:d4:89:52:97:b9:ed:4c:74:73:cf:07:
99:99:fc:82:80:2a:56:b4:06:3b:70:ef:40:0e:a4:8b:df:f1:
7f:f6:d6:d4:c7:cd:36:4e:89:fa:e7:96:5a:06:2e:2f:23:7b:
48:44:7f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 17:26:51 2026 by rpki-client