Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/y-d3f0TIT6eEszQ6nh-DpDG7jfg.roa
File: y-d3f0TIT6eEszQ6nh-DpDG7jfg.roa (raw, json)
Hash identifier: NyeFFiis7mpUATZ9x1j1XmtiD5ab32p5NGEA6jhcTNU=
Subject key identifier: CB:E7:77:7F:44:C8:4F:A7:84:B3:34:3A:9E:1F:83:A4:31:BB:8D:F8
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 019E463323D892EEB72AB540F45B08F91D7F
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/y-d3f0TIT6eEszQ6nh-DpDG7jfg.roa
Signing time: Wed 20 May 2026 16:23:37 +0000
ROA not before: Wed 20 May 2026 16:23:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6830
IP address blocks: 88.148.21.0/24 maxlen: 24
88.148.104.0/24 maxlen: 24
89.32.163.0/24 maxlen: 24
89.32.167.0/24 maxlen: 24
93.115.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:46:33:23:d8:92:ee:b7:2a:b5:40:f4:5b:08:f9:1d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: May 20 16:23:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cbe7777f44c84fa784b3343a9e1f83a431bb8df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:48:75:3f:83:d2:62:2e:06:d0:99:e6:7c:25:
a4:1b:be:bd:05:ef:96:14:80:8a:58:d7:32:63:59:
bb:bb:c1:c3:51:6f:61:2d:c6:1a:18:2a:a9:87:e3:
36:2a:3e:1d:53:bb:e3:e5:cf:13:04:0c:f8:96:8d:
27:6d:ec:60:c8:a6:09:dd:07:50:4d:7e:28:11:aa:
ac:b0:1a:c4:bb:f4:5b:17:9a:98:5b:dc:ed:99:e7:
3c:48:37:e2:64:45:74:03:75:79:79:9e:ab:ed:c4:
a3:00:53:9b:cf:b2:4a:80:08:87:d1:4c:1a:22:1d:
f5:78:4b:38:8e:77:17:b2:23:e3:98:23:da:00:3e:
8e:42:32:6e:40:6d:57:d5:cb:3f:0e:71:81:0f:11:
f8:44:c7:97:fb:4a:85:38:0b:e3:03:9f:26:7f:20:
08:67:43:88:95:0b:a7:03:4e:2d:f1:25:f3:56:f8:
87:5f:0e:a9:74:ee:46:f5:4e:e6:b7:59:94:48:02:
17:23:99:9c:c6:65:84:74:f7:87:1f:4c:d7:b3:ab:
d0:f7:02:23:3d:3c:14:28:57:a0:ed:4d:3a:6a:39:
78:f2:12:21:d3:a3:c2:ef:22:94:57:30:d5:7c:db:
82:bd:4e:b0:83:df:75:3d:ba:46:94:d7:cb:92:ca:
7e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E7:77:7F:44:C8:4F:A7:84:B3:34:3A:9E:1F:83:A4:31:BB:8D:F8
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/y-d3f0TIT6eEszQ6nh-DpDG7jfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.148.21.0/24
88.148.104.0/24
89.32.163.0/24
89.32.167.0/24
93.115.157.0/24
Signature Algorithm: sha256WithRSAEncryption
98:2d:a4:48:64:ca:27:ea:46:6e:8b:24:d9:fe:47:86:21:36:
68:66:f0:4a:81:f2:e3:67:11:63:13:13:db:b9:6e:ba:47:76:
9c:e3:30:0e:f3:ba:76:82:60:4c:ea:b9:9b:b6:48:ee:49:ea:
37:db:41:bf:33:aa:e5:d6:06:f1:17:6c:47:c2:c7:60:91:08:
5d:c2:ef:ed:29:d0:33:b8:c5:14:08:b3:f1:64:81:48:64:05:
94:d7:4f:27:74:52:f9:2a:25:91:d5:43:ee:d0:15:2c:0f:87:
a8:11:88:b0:65:0b:a8:42:69:af:40:68:cc:92:b0:6b:44:a6:
a4:10:75:24:fc:30:86:43:03:e8:5d:b5:c1:44:5c:c7:bc:9d:
e1:e8:ae:2d:54:bb:42:7b:ec:6d:8c:9e:a9:ae:a9:ba:ec:ec:
c9:91:7f:e1:1a:c5:8a:86:40:a3:d7:ff:9c:0c:4f:03:8b:53:
d6:79:40:4a:61:9a:71:7e:d5:50:0e:87:55:71:b9:af:61:60:
90:57:af:0a:37:1a:84:ad:e6:ff:7d:8e:d3:85:a8:eb:2d:f0:
26:e2:6a:90:c4:4d:61:1d:68:31:5c:69:1f:e2:f2:24:c3:90:
d6:e8:90:a0:68:bc:76:61:2c:8c:cc:64:44:b8:bb:b8:0d:b6:
2b:d3:8a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 05:21:55 2026 by rpki-client