Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/YvN3c5C0gSI56HIngcHs4vkpuog.roa
File: YvN3c5C0gSI56HIngcHs4vkpuog.roa (raw, json)
Hash identifier: ubAaTn/otWbgsyxFV8W1AJNCfa/GAwIx9VFNuKh67dU=
Subject key identifier: 62:F3:77:73:90:B4:81:22:39:E8:72:27:81:C1:EC:E2:F9:29:BA:88
Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7
Certificate serial: 01A177ACA34F3E94A4E21FA42D924A01AB76
Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/YvN3c5C0gSI56HIngcHs4vkpuog.roa
Signing time: Mon 26 Oct 2026 10:06:05 +0000
ROA not before: Mon 26 Oct 2026 10:06:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8342
IP address blocks: 45.129.185.0/24 maxlen: 24
45.153.74.0/23 maxlen: 23
93.188.207.0/24 maxlen: 24
130.49.212.0/24 maxlen: 24
185.66.12.0/22 maxlen: 22
185.80.148.0/22 maxlen: 22
185.126.84.0/23 maxlen: 23
185.126.86.0/23 maxlen: 23
195.158.224.0/23 maxlen: 23
195.190.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:ac:a3:4f:3e:94:a4:e2:1f:a4:2d:92:4a:01:ab:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7
Validity
Not Before: Oct 26 10:06:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62f3777390b4812239e8722781c1ece2f929ba88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:11:58:63:4c:fc:63:79:13:96:21:a7:9e:9d:
a0:bb:d4:4c:75:58:ee:af:af:11:06:c1:bc:ca:d0:
66:d2:f6:1f:5b:00:ed:2c:2b:91:ef:ec:b2:56:25:
58:3b:3f:83:cd:ad:1c:09:6e:6c:61:d1:b0:6c:fd:
64:57:72:37:de:00:3b:66:bd:18:b3:91:e1:a1:37:
86:fd:ac:f5:bd:a6:4a:49:6c:47:0b:8b:e6:7f:0f:
05:6d:b3:9a:98:25:f3:82:8f:b0:43:79:41:ab:7e:
fc:09:05:21:c5:39:b0:33:9b:47:e7:8b:51:00:88:
6e:0b:9c:79:15:fd:9e:ea:38:02:41:99:eb:2e:ff:
8f:5b:be:1d:89:6e:5b:bd:63:76:fc:87:d6:fb:c7:
6d:8f:9c:fe:2f:9e:08:21:0e:30:61:de:c1:09:8f:
43:5b:30:82:fd:97:93:c6:98:36:63:45:ae:00:bb:
8b:b2:b6:ab:f0:e2:6f:f2:d8:f7:f3:0f:01:94:0d:
fb:6f:6a:59:97:5c:71:06:1a:68:38:02:d6:49:76:
d6:63:66:24:0c:49:21:14:ae:d4:2b:a1:b7:9e:46:
43:bc:b0:d9:c6:ef:0f:43:85:a3:46:89:71:10:45:
40:5c:63:8a:67:93:02:d6:01:13:57:8c:a4:99:2b:
7f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F3:77:73:90:B4:81:22:39:E8:72:27:81:C1:EC:E2:F9:29:BA:88
X509v3 Authority Key Identifier:
keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/YvN3c5C0gSI56HIngcHs4vkpuog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.185.0/24
45.153.74.0/23
93.188.207.0/24
130.49.212.0/24
185.66.12.0/22
185.80.148.0/22
185.126.84.0/22
195.158.224.0/23
195.190.12.0/24
Signature Algorithm: sha256WithRSAEncryption
56:ed:29:00:62:48:c6:60:63:c7:fd:b0:3c:1e:c6:20:4c:30:
c0:40:e5:f7:fb:a6:02:65:b4:c5:99:d6:5d:bc:12:d4:f5:9b:
ee:88:88:84:51:c6:12:3f:ac:86:33:79:c1:7e:13:b0:f3:8e:
30:f1:49:32:2d:2b:e3:ce:9f:05:9f:90:8a:2a:05:70:66:02:
2b:ab:3b:7d:19:76:d8:fe:0d:5f:54:98:08:3b:8d:cc:48:4c:
bd:32:29:97:6c:33:39:f8:87:62:20:45:41:cf:88:28:ea:6f:
db:2f:b0:c3:44:2c:95:f0:b1:b4:68:8b:20:44:c8:d6:da:da:
bc:09:63:af:b6:04:25:e2:69:1e:6e:10:69:8a:3f:61:f6:9c:
5e:4f:18:f4:5c:22:48:77:69:b2:78:2f:7e:f5:a4:c0:f1:db:
c9:be:d1:ea:49:b8:47:af:10:53:d9:79:3e:a5:28:03:79:74:
dd:12:41:e0:95:b1:6c:fd:e7:ab:a5:68:3e:98:47:29:b4:21:
42:73:f4:f7:d6:87:38:46:af:74:b1:d6:6b:19:61:21:fb:d2:
fe:b6:ad:58:5f:dd:2a:4d:bb:60:f1:f3:81:7b:8c:b5:00:56:
59:43:9b:00:78:d6:f2:2c:4e:c7:cf:bc:ac:38:e1:1e:d2:71:
e8:9e:17:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:49:52 2026 by rpki-client