Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/yOTOYFZOBJCD8F7aAD4JaWGI8bs.roa
File: yOTOYFZOBJCD8F7aAD4JaWGI8bs.roa (raw, json)
Hash identifier: Mwr0TiMMhAgZ1161YyPS/CuXoh9+OAJ4uOrxdXdTYHE=
Subject key identifier: C8:E4:CE:60:56:4E:04:90:83:F0:5E:DA:00:3E:09:69:61:88:F1:BB
Certificate issuer: /CN=b8155ac34b6ec15f226ae9913d6aecfca7a784d4
Certificate serial: 019FC7BFAEE4C9F794EDA6959187600B5683
Authority key identifier: B8:15:5A:C3:4B:6E:C1:5F:22:6A:E9:91:3D:6A:EC:FC:A7:A7:84:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBVaw0tuwV8iaumRPWrs_KenhNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/yOTOYFZOBJCD8F7aAD4JaWGI8bs.roa
Signing time: Mon 03 Aug 2026 13:10:55 +0000
ROA not before: Mon 03 Aug 2026 13:10:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61094
IP address blocks: 185.103.216.0/22 maxlen: 24
185.111.190.0/23 maxlen: 24
185.245.12.0/22 maxlen: 24
185.245.12.0/23 maxlen: 24
185.245.14.0/24 maxlen: 24
185.245.15.0/24 maxlen: 24
2a02:e220::/30 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/uBVaw0tuwV8iaumRPWrs_KenhNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/uBVaw0tuwV8iaumRPWrs_KenhNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uBVaw0tuwV8iaumRPWrs_KenhNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c7:bf:ae:e4:c9:f7:94:ed:a6:95:91:87:60:0b:56:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8155ac34b6ec15f226ae9913d6aecfca7a784d4
Validity
Not Before: Aug 3 13:10:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8e4ce60564e049083f05eda003e09696188f1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:db:7f:ee:9d:d8:14:26:b8:f8:ca:2c:a2:a4:
87:72:2f:c3:f1:f2:3c:b1:c2:65:00:41:01:e5:96:
32:0c:74:d9:ba:78:c9:b4:3b:9b:90:47:4b:8a:d4:
5c:50:40:bf:38:2a:50:e3:bf:77:6c:b3:b7:48:8f:
f5:97:6a:d5:f1:48:a0:82:80:1e:c6:69:ae:63:40:
e8:a2:23:4f:27:29:ce:01:8d:34:2a:11:ea:2e:a1:
b5:9d:81:ff:02:4b:25:9f:98:1e:28:1a:62:58:0a:
39:2e:d0:ad:f8:6d:3e:f1:73:0f:c2:b0:49:47:b0:
8b:23:02:2d:c0:ea:43:61:d7:74:bc:99:9e:b0:e7:
45:d0:b0:df:f6:b8:8f:d5:d2:47:56:36:2b:63:71:
b3:c9:bf:f2:01:00:23:16:7b:3d:68:a0:5b:4c:71:
fc:f6:a7:f4:d2:53:01:fa:d9:ad:ab:b7:af:fc:c9:
77:d4:7e:0c:75:db:ae:7a:e8:bb:ce:57:16:38:ad:
fb:ac:d3:31:71:34:0d:ff:92:06:c5:8d:eb:4e:c6:
26:e2:9d:01:2a:d3:00:6a:77:8e:b9:91:7b:50:e0:
dd:5c:4f:3b:98:ee:8a:1a:0f:c8:9c:b5:cb:10:04:
e6:5d:75:03:74:f3:a8:4a:88:45:7e:e9:d8:a1:40:
b4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E4:CE:60:56:4E:04:90:83:F0:5E:DA:00:3E:09:69:61:88:F1:BB
X509v3 Authority Key Identifier:
keyid:B8:15:5A:C3:4B:6E:C1:5F:22:6A:E9:91:3D:6A:EC:FC:A7:A7:84:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBVaw0tuwV8iaumRPWrs_KenhNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/yOTOYFZOBJCD8F7aAD4JaWGI8bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/uBVaw0tuwV8iaumRPWrs_KenhNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.216.0/22
185.111.190.0/23
185.245.12.0/22
IPv6:
2a02:e220::/30
Signature Algorithm: sha256WithRSAEncryption
54:5f:d6:9c:8f:e1:84:9e:99:43:ce:c8:10:99:c1:59:12:fa:
3c:40:2d:31:7f:f7:8e:4c:7e:71:76:69:b8:9b:46:5c:78:48:
d1:c5:82:27:6a:49:50:41:c6:fc:d7:0b:79:ea:58:48:ea:2b:
b4:33:75:2c:3c:c3:da:74:9f:18:72:04:99:80:bb:08:19:14:
2f:33:79:93:3b:2f:bb:a1:9a:ed:ca:3e:2c:44:e1:03:6f:90:
6d:9e:1a:0c:fc:9b:af:60:d2:8a:6b:d5:57:3e:74:34:5c:ac:
c5:ae:f4:ad:31:c3:a5:4f:ff:46:ff:4c:d4:7a:49:5b:a6:c2:
2d:1b:7b:94:96:d9:32:7b:c6:ad:96:91:68:69:45:4f:0b:8f:
8b:34:ed:09:46:5f:f8:e5:90:26:6b:75:45:e9:21:cf:2c:c5:
2d:8d:b4:28:ce:d6:fe:da:62:df:5f:45:b4:eb:56:4a:50:94:
f9:7f:e2:68:45:16:04:7d:7d:5b:a2:c5:1a:45:c7:b4:da:3c:
8c:4d:a9:97:be:41:c3:f9:98:08:b7:47:c5:cc:63:13:4c:21:
d2:8d:39:21:4d:73:86:57:29:11:08:87:8a:cf:ef:b5:e0:21:
6c:a9:ac:52:b5:79:c8:31:5e:72:8c:fd:d8:1d:f0:1f:db:cc:
e4:ee:e1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:29:02 2026 by rpki-client