Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/YppKO07tkq4sJ9jcBGcV0vaXir0.roa
File: YppKO07tkq4sJ9jcBGcV0vaXir0.roa (raw, json)
Hash identifier: i948M4KE7ccbGmz5+A3PqrBaYPHp5KQjWfPunrj1ftY=
Subject key identifier: 62:9A:4A:3B:4E:ED:92:AE:2C:27:D8:DC:04:67:15:D2:F6:97:8A:BD
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01A042A959ACD3C314A55F0FE0B862A06972
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/YppKO07tkq4sJ9jcBGcV0vaXir0.roa
Signing time: Thu 27 Aug 2026 09:59:49 +0000
ROA not before: Thu 27 Aug 2026 09:59:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215314
IP address blocks: 45.93.22.0/24 maxlen: 24
91.188.212.0/22 maxlen: 22
91.188.212.0/24 maxlen: 24
91.188.213.0/24 maxlen: 24
91.188.214.0/24 maxlen: 24
91.188.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Aug 2026 11:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:a9:59:ac:d3:c3:14:a5:5f:0f:e0:b8:62:a0:69:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Aug 27 09:59:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=629a4a3b4eed92ae2c27d8dc046715d2f6978abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ce:bf:a2:57:2b:09:78:29:94:d1:d8:a8:98:
78:7a:db:69:52:c8:38:9e:cc:de:38:46:e8:dd:75:
bf:1e:6a:25:a6:02:e8:ac:af:87:8e:9c:f6:29:b7:
55:05:e0:70:86:bd:23:52:da:20:25:c0:38:ba:2f:
1e:e3:c6:eb:ac:84:79:80:b7:fb:38:ab:b0:03:8c:
4e:4d:5a:7a:28:fd:3c:ab:b5:6f:5b:e7:5c:d0:23:
0c:5f:1f:4f:eb:4b:e7:2d:ac:d8:5c:0d:33:9d:e9:
1d:de:be:85:1e:bc:50:56:3f:c8:dd:36:a1:a2:76:
c5:1e:e5:84:8b:1f:43:d0:83:15:77:67:e8:46:91:
bc:44:0a:7d:7c:3d:11:b5:f3:71:b8:c2:49:dc:d5:
ab:69:81:7f:4b:ce:ba:b7:09:64:5a:3f:00:2f:d2:
f5:11:3b:8d:c4:49:44:c6:9f:a2:31:86:7b:b9:17:
c3:23:8a:b9:83:46:b2:16:9d:fa:00:80:4c:6d:8f:
70:91:0a:93:af:34:46:3e:35:ee:59:47:f5:ba:af:
f0:13:73:93:33:6d:d7:f0:88:8d:1a:ea:36:1c:69:
d2:70:49:de:2c:cd:b3:dd:43:94:2c:da:17:f5:10:
de:08:49:5f:74:23:40:1a:a8:23:f0:0b:57:ff:d5:
70:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9A:4A:3B:4E:ED:92:AE:2C:27:D8:DC:04:67:15:D2:F6:97:8A:BD
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/YppKO07tkq4sJ9jcBGcV0vaXir0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.22.0/24
91.188.212.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:5d:3e:f8:88:e6:81:6f:a3:31:10:82:26:56:07:08:82:9e:
d4:ad:60:0e:0b:99:46:5b:e9:68:a4:5b:6e:59:2a:c5:ad:1e:
8a:24:82:0d:33:82:c0:9c:08:b3:bf:b1:a8:23:fd:c4:58:5f:
2e:11:de:c5:93:f1:e2:63:98:f0:bb:26:a5:e0:e6:89:80:e9:
bc:4c:9a:eb:3d:b2:01:96:a0:05:70:8b:f2:e6:82:64:74:3b:
90:b6:6e:6d:e2:bb:3e:65:0e:21:22:ed:83:e2:eb:b4:c1:2d:
06:0b:06:35:85:97:85:d9:51:d4:c7:03:90:a2:d6:57:89:70:
11:63:9c:75:a6:e3:3c:1c:71:c8:55:c9:07:5c:d4:f0:4c:f3:
e4:f0:a8:11:96:cb:45:f5:4d:24:4b:13:16:ba:66:a1:31:06:
05:72:7a:39:ee:ee:33:1b:77:4e:20:db:d3:bd:6c:20:f6:54:
65:31:7d:de:30:16:a3:17:b5:ac:3d:19:e4:e4:8a:88:b5:f1:
f7:23:f0:54:3f:10:f5:4d:2a:9e:2e:d0:44:0a:10:e0:70:e4:
b6:8b:8f:06:f7:6c:cb:d4:44:1f:8b:f8:46:61:21:6d:09:fd:
0f:d6:85:72:d9:66:e4:a7:0c:9c:c7:7c:de:29:d9:17:4f:85:
3a:8e:f1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 19:55:13 2026 by rpki-client