Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/f4de90-a312-47c2-a28b-3eb5f06b9717/1/__YpSLH2Xqco35XcXMKupV9A4Uk.roa
File: __YpSLH2Xqco35XcXMKupV9A4Uk.roa (raw, json)
Hash identifier: 5aqzq4DscaIZrphVysDe9rPinFOuHPMH2uHk2M7EKis=
Subject key identifier: FF:F6:29:48:B1:F6:5E:A7:28:DF:95:DC:5C:C2:AE:A5:5F:40:E1:49
Certificate issuer: /CN=5df7fb39e201eba634d0203c4f28de5ae0795a88
Certificate serial: 01A1368D479C58A9FBA0C96FCBA1611FC735
Authority key identifier: 5D:F7:FB:39:E2:01:EB:A6:34:D0:20:3C:4F:28:DE:5A:E0:79:5A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xff7OeIB66Y00CA8TyjeWuB5Wog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f4de90-a312-47c2-a28b-3eb5f06b9717/1/__YpSLH2Xqco35XcXMKupV9A4Uk.roa
Signing time: Tue 13 Oct 2026 18:36:30 +0000
ROA not before: Tue 13 Oct 2026 18:36:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219466
IP address blocks: 109.68.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f4de90-a312-47c2-a28b-3eb5f06b9717/1/Xff7OeIB66Y00CA8TyjeWuB5Wog.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/f4de90-a312-47c2-a28b-3eb5f06b9717/1/Xff7OeIB66Y00CA8TyjeWuB5Wog.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xff7OeIB66Y00CA8TyjeWuB5Wog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 09:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:8d:47:9c:58:a9:fb:a0:c9:6f:cb:a1:61:1f:c7:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df7fb39e201eba634d0203c4f28de5ae0795a88
Validity
Not Before: Oct 13 18:36:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fff62948b1f65ea728df95dc5cc2aea55f40e149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b7:f7:88:0a:79:98:88:cc:7a:93:4e:3b:c9:
b1:ab:cb:e2:eb:91:5e:dd:5b:88:9f:dd:4b:00:ae:
45:8a:f8:15:e5:41:36:de:04:10:7b:da:6b:0e:a8:
7d:86:4d:75:45:1b:12:1e:0d:0a:a7:29:b2:13:32:
8a:6a:1c:a9:cc:a3:6c:a7:81:f4:bc:13:37:fb:8d:
ca:17:9b:af:b4:f3:02:32:c3:4d:75:01:f3:b2:c3:
f1:6b:05:dd:ac:83:48:6b:39:ab:d3:f8:42:36:49:
62:d4:35:31:d2:37:91:97:9b:13:9c:31:fd:b6:36:
56:f7:7a:3b:f4:f8:33:c1:97:8c:cb:d7:88:c4:49:
b1:b0:e4:58:fd:b7:39:a8:12:8b:1c:7b:1f:77:87:
9d:89:80:74:4a:f4:67:8e:0f:b2:fb:f9:f4:22:1e:
f9:13:ba:7b:5d:02:82:8e:32:90:0a:58:70:c8:1c:
03:9e:7b:d7:82:d1:69:b7:53:d7:fe:23:7a:80:16:
2e:42:7d:c8:b0:3f:e2:60:c2:dd:c5:5b:f9:15:c9:
99:af:7d:82:3e:17:20:39:c7:40:76:1f:72:b0:e4:
10:27:17:cd:d7:57:8e:a6:6f:b4:3e:94:e9:10:12:
98:fd:9c:7b:58:f4:1f:05:e7:78:fd:1c:c8:99:c0:
ea:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F6:29:48:B1:F6:5E:A7:28:DF:95:DC:5C:C2:AE:A5:5F:40:E1:49
X509v3 Authority Key Identifier:
keyid:5D:F7:FB:39:E2:01:EB:A6:34:D0:20:3C:4F:28:DE:5A:E0:79:5A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xff7OeIB66Y00CA8TyjeWuB5Wog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4de90-a312-47c2-a28b-3eb5f06b9717/1/__YpSLH2Xqco35XcXMKupV9A4Uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4de90-a312-47c2-a28b-3eb5f06b9717/1/Xff7OeIB66Y00CA8TyjeWuB5Wog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.68.217.0/24
Signature Algorithm: sha256WithRSAEncryption
88:23:b6:d6:55:c0:8f:e5:f6:96:45:8c:c4:0f:e2:97:2c:2b:
3d:63:59:d8:1e:ba:7d:86:54:40:cf:9d:4a:69:46:01:03:66:
a4:14:a2:90:61:d3:38:a1:62:55:ac:f0:85:1c:bf:54:7f:e6:
68:fe:91:f3:61:a8:95:f2:e3:4a:29:ea:8b:a6:84:66:a3:12:
b6:ac:48:e9:ed:84:4a:ff:24:10:2d:12:b7:66:df:94:06:5e:
9e:69:5a:dc:83:f9:40:e1:88:6a:33:77:59:e8:a2:cc:47:1a:
c3:5d:0e:dd:99:af:bf:66:13:ff:66:6f:a2:cf:23:c3:a9:0c:
5d:1a:91:fe:11:6f:46:9b:89:0b:1b:e4:1d:0f:bf:f9:d4:8c:
0c:74:ed:ac:f1:43:54:68:fb:5c:7f:6c:86:f6:7f:b1:2d:8a:
f2:8c:45:94:27:d5:02:c8:0e:93:05:a8:b0:f3:e4:23:53:9d:
95:69:63:51:fa:31:66:57:74:f9:74:18:97:ad:8f:15:f1:32:
fa:59:03:fb:af:ad:be:d0:85:86:a5:12:3a:3f:e7:47:43:67:
5d:e9:a7:8f:d5:af:0a:c5:ff:2f:1a:ef:96:21:25:62:05:cd:
48:01:ae:be:0e:9c:ea:2e:c2:67:9b:cf:e9:79:35:95:af:24:
38:b8:24:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:41:19 2026 by rpki-client