Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/yyAxnEh6_3NWGodqmlTxCI-R3c4.roa
File: yyAxnEh6_3NWGodqmlTxCI-R3c4.roa (raw, json)
Hash identifier: TNs1c3nR7fwqaGF1HrlI6nC1Ch8RtIxv2Jsj8r7yEUI=
Subject key identifier: CB:20:31:9C:48:7A:FF:73:56:1A:87:6A:9A:54:F1:08:8F:91:DD:CE
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A03323A292D3A8F5F8344518E2C651DE04
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/yyAxnEh6_3NWGodqmlTxCI-R3c4.roa
Signing time: Mon 24 Aug 2026 09:39:28 +0000
ROA not before: Mon 24 Aug 2026 09:39:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13537
IP address blocks: 62.105.197.0/24 maxlen: 24
62.105.199.0/24 maxlen: 24
77.67.32.0/24 maxlen: 24
194.77.198.0/24 maxlen: 24
194.122.81.0/24 maxlen: 24
195.21.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 13:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:23:a2:92:d3:a8:f5:f8:34:45:18:e2:c6:51:de:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 24 09:39:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb20319c487aff73561a876a9a54f1088f91ddce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a2:f1:89:94:90:5f:69:e1:3e:77:91:85:c9:
f9:19:78:f8:ec:dd:6a:f2:af:69:12:ad:6b:02:09:
90:40:d2:b0:bc:a6:7d:06:bf:36:0f:19:82:81:09:
5b:f6:51:82:d0:88:d7:8d:68:a9:14:1d:60:bf:57:
4b:0b:5f:94:72:b1:e7:e2:54:e0:7c:de:81:e3:be:
63:be:55:87:e0:de:f7:da:f1:64:e8:e6:27:0e:3a:
67:f6:98:c5:f7:25:a0:f3:22:56:c4:91:37:6c:ca:
b6:fa:4f:6b:4f:80:ad:4b:d8:05:8c:8d:32:6f:2b:
77:3e:e7:44:e7:2c:ae:95:be:f0:76:a6:c2:58:83:
53:1b:40:50:93:19:b0:c0:2d:d4:79:7c:6f:7b:ca:
62:23:5a:e1:45:35:6e:8e:3d:ab:81:97:d4:e5:2b:
33:a6:b4:94:84:a1:ba:bc:d2:fd:67:34:7d:4f:a4:
39:33:6d:3d:37:9e:42:35:9b:9d:f8:f4:92:d6:e4:
82:8b:02:2a:50:06:e8:e2:c8:86:83:18:20:b6:fe:
3e:b2:55:0e:66:14:9b:2d:a5:c1:b3:3f:b4:e4:a9:
cf:cc:02:02:56:5c:35:d0:8a:5f:88:d7:dd:89:25:
2d:20:a7:07:2e:3c:d6:97:dd:ed:00:fc:79:16:fb:
e9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:20:31:9C:48:7A:FF:73:56:1A:87:6A:9A:54:F1:08:8F:91:DD:CE
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/yyAxnEh6_3NWGodqmlTxCI-R3c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.105.197.0/24
62.105.199.0/24
77.67.32.0/24
194.77.198.0/24
194.122.81.0/24
195.21.131.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:02:bd:d9:9b:ef:d1:05:c3:16:72:83:7d:68:1e:9b:d8:c5:
44:11:2b:48:2e:3b:c2:15:38:10:52:25:eb:17:0c:2b:77:45:
a5:ab:17:4e:56:1f:e3:6e:90:eb:bb:89:bc:14:a0:15:34:1d:
a2:54:e5:75:03:54:f5:7f:3e:61:d4:30:d1:4a:20:d8:ba:db:
f2:ac:7b:35:fb:2e:0d:9c:34:70:cb:b8:c0:13:dd:e0:31:5f:
ab:76:61:b0:48:ca:ba:22:93:eb:47:e9:65:37:64:35:a8:16:
75:2b:11:74:96:cf:8a:b0:68:d6:95:51:99:3e:82:cc:b9:b0:
c2:3a:28:f5:2c:ff:a1:72:46:1b:ac:dd:56:f3:bd:ac:97:07:
ab:ba:3b:6e:48:1e:13:06:53:1a:88:e1:ea:c3:f3:0a:f6:3d:
36:d6:bb:69:c1:14:47:dc:91:b7:77:11:54:2b:34:0d:1a:ab:
20:24:35:1a:97:9d:8d:e8:e9:99:f5:cc:10:1e:b7:8b:fb:91:
d3:a4:41:f9:d6:a8:04:99:b8:2b:49:11:7c:8a:d1:74:60:c8:
2a:74:c3:5d:5e:85:ac:5b:7d:99:3b:2e:47:49:80:8e:f3:28:
0d:01:33:e5:a8:82:86:ef:62:69:64:fa:ad:9e:86:61:89:06:
58:26:88:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 17:26:48 2026 by rpki-client