Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/_YzfgCtw44lkg9uMHew6EGlq2GQ.roa
File: _YzfgCtw44lkg9uMHew6EGlq2GQ.roa (raw, json)
Hash identifier: N9mDPJNnLWD1opaddAFqBbLOocoDLHKf3viOpQeA0Xg=
Subject key identifier: FD:8C:DF:80:2B:70:E3:89:64:83:DB:8C:1D:EC:3A:10:69:6A:D8:64
Certificate issuer: /CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
Certificate serial: 01A115432D772E5F3087A93EC7D7C095938E
Authority key identifier: DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/_YzfgCtw44lkg9uMHew6EGlq2GQ.roa
Signing time: Wed 07 Oct 2026 07:28:06 +0000
ROA not before: Wed 07 Oct 2026 07:28:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215273
IP address blocks: 87.232.225.0/24 maxlen: 24
194.104.94.0/24 maxlen: 24
2a14:2640::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:43:2d:77:2e:5f:30:87:a9:3e:c7:d7:c0:95:93:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbecec96a0371a3ae62d7aa6dd7d9e43ac55d025
Validity
Not Before: Oct 7 07:28:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd8cdf802b70e3896483db8c1dec3a10696ad864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:99:08:4d:a2:b1:64:83:7d:04:ba:a6:21:aa:
66:5f:50:b3:46:a9:8a:45:c8:47:94:04:03:b7:62:
76:c1:38:68:45:10:fe:06:88:68:a0:e6:1a:43:6b:
bc:c3:d2:a1:26:1f:16:37:f5:5a:75:8e:de:ef:ec:
d9:16:5d:38:54:60:1f:dc:d7:b7:a0:3a:dd:4b:c6:
a9:8b:e6:5b:27:83:60:b7:04:70:ff:ce:15:d9:b6:
48:1d:33:04:8a:27:9f:41:f0:04:8c:5a:c9:c3:f4:
fd:0f:1a:1c:23:6e:7e:d7:2a:30:83:57:a2:8e:50:
a2:d9:cc:a7:7b:ff:f0:69:35:1e:23:2b:56:a5:0a:
0e:b9:10:67:82:0e:9e:f7:bf:39:4b:4e:a4:3a:fa:
68:85:c0:a8:2b:c4:34:e4:ab:66:85:7e:79:e4:27:
6b:4f:36:1f:1a:54:fa:2e:92:de:6f:26:cc:7a:1a:
44:61:1a:eb:01:18:de:f9:51:c5:60:e5:be:fd:a8:
db:6a:32:eb:c4:01:fe:d9:b7:f1:e0:ed:10:4d:09:
8e:1e:15:03:5d:54:53:c1:7e:0e:52:31:45:f8:40:
88:2e:9e:24:a6:dc:08:cf:76:c7:d0:e7:af:f1:bb:
11:a0:41:06:dc:c6:d2:89:c9:a3:f0:b2:0d:7e:95:
59:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8C:DF:80:2B:70:E3:89:64:83:DB:8C:1D:EC:3A:10:69:6A:D8:64
X509v3 Authority Key Identifier:
keyid:DB:EC:EC:96:A0:37:1A:3A:E6:2D:7A:A6:DD:7D:9E:43:AC:55:D0:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-zslqA3GjrmLXqm3X2eQ6xV0CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/_YzfgCtw44lkg9uMHew6EGlq2GQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/134f0c-d911-4887-96b7-a8766520fea2/1/2-zslqA3GjrmLXqm3X2eQ6xV0CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.225.0/24
194.104.94.0/24
IPv6:
2a14:2640::/29
Signature Algorithm: sha256WithRSAEncryption
85:c4:b1:71:0f:b4:1e:c0:28:e5:b2:14:05:73:dd:cf:bd:bc:
2f:5d:7c:bb:a6:4b:07:0b:7e:da:05:c0:ca:8d:07:50:e7:4f:
9b:0c:96:fb:cd:ad:a3:88:eb:4a:0c:4a:7d:61:2d:f7:64:0a:
26:27:b6:92:80:77:9b:09:e6:14:57:62:13:98:93:6a:a5:bd:
14:91:99:72:21:fb:50:b5:72:d6:0e:2c:28:69:13:7a:e6:14:
61:97:c4:c7:dd:63:05:31:cb:6e:62:80:20:b8:e9:87:f1:33:
4f:c9:80:ac:15:15:40:93:b8:9b:d9:b7:3b:2b:06:9f:5e:2a:
97:83:d2:2a:93:0e:99:2e:13:ba:f7:7c:99:40:88:b3:26:3e:
d3:a3:78:e4:85:be:0e:59:59:67:31:31:b0:96:f4:75:25:ce:
a3:e3:37:3d:ab:3f:8b:bb:06:16:33:63:f9:32:52:70:d7:66:
99:e9:a2:36:a3:ef:d6:f5:31:1f:99:86:85:42:f3:42:0c:a2:
8f:6d:ee:9d:dd:00:57:2b:c3:f3:ab:61:d9:62:64:93:83:92:
4f:3d:73:99:97:27:d2:99:6e:a4:66:e7:28:14:02:70:aa:e3:
98:2b:f6:ae:a1:66:0b:bc:74:34:63:e3:0a:48:b3:8a:7a:7c:
76:76:bc:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 16:26:58 2026 by rpki-client