Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Yf_qN60i96TEsnwcSfOY_O0nmKQ.roa
File: Yf_qN60i96TEsnwcSfOY_O0nmKQ.roa (raw, json)
Hash identifier: fpg/MNxjzlnzTQca/iybfFH8+ZamTAvUzD57YoORWzg=
Subject key identifier: 61:FF:EA:37:AD:22:F7:A4:C4:B2:7C:1C:49:F3:98:FC:ED:27:98:A4
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019FE2457E0B56E5F26D236D82C31C0CFFEE
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Yf_qN60i96TEsnwcSfOY_O0nmKQ.roa
Signing time: Sat 08 Aug 2026 16:47:12 +0000
ROA not before: Sat 08 Aug 2026 16:47:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208972
IP address blocks: 109.236.49.0/24 maxlen: 24
109.236.51.0/24 maxlen: 24
185.254.28.0/24 maxlen: 24
185.254.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e2:45:7e:0b:56:e5:f2:6d:23:6d:82:c3:1c:0c:ff:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Aug 8 16:47:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61ffea37ad22f7a4c4b27c1c49f398fced2798a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5f:f9:6d:74:dc:fb:48:8a:d5:77:64:8f:69:
42:e9:ee:84:9b:42:88:55:d6:ff:24:5f:4f:d9:43:
3e:bc:d5:56:1c:31:ef:9b:1c:3e:ec:11:5a:ed:4d:
4a:80:03:20:f7:d1:d7:70:a2:c0:2b:a3:22:a3:94:
7c:c7:1a:5c:6c:77:a6:9a:1f:a8:55:ea:07:ae:7a:
d6:60:9c:e2:e0:3b:59:dc:7f:ce:c4:54:62:9e:c8:
2f:46:c5:03:87:07:21:e2:f1:8d:07:72:e3:f9:7f:
ec:b6:df:11:e2:50:12:9a:10:39:3b:c3:41:45:ab:
87:f5:63:cb:28:4e:6e:7b:57:e0:b3:96:62:22:a6:
d9:f2:fe:54:a7:cb:5d:dc:35:94:b3:87:a7:67:d4:
03:d8:93:2b:74:b6:5d:ff:14:d2:6f:a1:59:96:f2:
b0:3b:54:ab:60:f7:c6:0a:97:d1:6c:d4:23:b5:14:
28:6d:a2:9e:09:dc:88:1c:8a:15:11:7f:af:ef:5f:
9c:db:49:4a:a1:ce:e4:3c:1a:b1:49:31:c0:36:e1:
20:b4:28:93:08:7d:3a:52:1f:06:8f:d8:85:44:35:
7d:5d:90:e3:72:c5:45:91:b7:9f:8e:06:b8:85:1c:
86:16:2d:66:3a:92:25:83:c2:f6:fb:de:f2:cc:c1:
32:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:FF:EA:37:AD:22:F7:A4:C4:B2:7C:1C:49:F3:98:FC:ED:27:98:A4
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Yf_qN60i96TEsnwcSfOY_O0nmKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.49.0/24
109.236.51.0/24
185.254.28.0/24
185.254.31.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:ff:46:5a:e4:9f:66:9d:f0:99:ce:aa:ea:86:58:9c:29:a1:
77:94:84:a5:98:b0:3f:a4:72:95:23:9a:8d:eb:95:a9:dc:2c:
10:69:6c:f6:d4:06:62:ee:98:26:a5:8d:70:ee:04:a9:b3:0e:
ec:2e:33:82:ff:ba:0a:38:2a:ee:bb:7a:6a:10:68:1e:85:f9:
aa:c6:6a:ff:ae:4f:b1:0b:13:da:8f:00:f9:3a:a8:a2:02:0d:
b8:09:54:56:43:42:60:10:e7:4b:c9:e1:2f:ab:ea:97:de:c7:
45:27:a8:08:61:f4:1b:dd:f9:d2:db:92:46:79:6b:a7:11:75:
c7:10:a0:dd:c2:3e:b0:b7:12:f4:c8:ca:6f:e2:61:e6:69:80:
42:e6:13:3c:73:da:01:d4:60:c3:e2:0b:ee:eb:7b:10:f9:4b:
00:e5:d6:dd:65:38:0c:30:20:4e:48:a2:13:1e:3a:90:2e:63:
61:fc:83:65:90:b9:6c:fc:fc:18:90:8d:b3:dc:61:99:85:fb:
e2:fb:1b:0a:1e:8f:18:b9:75:37:91:f9:22:de:5b:c0:2d:91:
a6:4f:d3:a5:e9:fb:66:d2:5f:53:65:ee:28:05:9f:45:91:77:
5a:f1:dd:2f:93:3a:14:e0:8d:fb:32:99:93:ff:b1:b9:16:0d:
41:5d:08:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:46 2026 by rpki-client