Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/1yQrs5HP9XIaoTvb72_pfqznw5g.roa
File: 1yQrs5HP9XIaoTvb72_pfqznw5g.roa (raw, json)
Hash identifier: yz35x7CqiZJ94ld5AFj0y0ZNW6s7eAQtnm0UEs/oenI=
Subject key identifier: D7:24:2B:B3:91:CF:F5:72:1A:A1:3B:DB:EF:6F:E9:7E:AC:E7:C3:98
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 01A016943991C638F5449651D908C734EA28
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/1yQrs5HP9XIaoTvb72_pfqznw5g.roa
Signing time: Tue 18 Aug 2026 20:33:27 +0000
ROA not before: Tue 18 Aug 2026 20:33:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215540
IP address blocks: 2.59.162.0/24 maxlen: 24
2.59.163.0/24 maxlen: 24
45.87.152.0/24 maxlen: 24
45.93.10.0/24 maxlen: 24
45.93.11.0/24 maxlen: 24
62.133.60.0/24 maxlen: 24
62.133.61.0/24 maxlen: 24
62.133.62.0/24 maxlen: 24
62.133.63.0/24 maxlen: 24
81.177.214.0/24 maxlen: 24
81.177.215.0/24 maxlen: 24
91.231.180.0/24 maxlen: 24
141.98.170.0/24 maxlen: 24
188.119.121.0/24 maxlen: 24
194.156.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:16:94:39:91:c6:38:f5:44:96:51:d9:08:c7:34:ea:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Aug 18 20:33:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7242bb391cff5721aa13bdbef6fe97eace7c398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ab:a5:7a:f3:89:99:bb:2c:74:1c:5e:43:89:
1d:fc:ac:42:0e:34:d3:d5:71:bd:a8:a1:09:2f:77:
e5:3a:58:e3:35:33:55:e1:4d:a9:5a:d6:12:a2:2f:
be:92:fa:4b:5c:77:5c:28:6e:94:d5:9f:ba:04:40:
48:a9:5f:58:b7:a0:8e:44:95:95:4a:61:e0:58:5e:
47:13:04:56:3b:cf:ef:85:32:fb:42:e3:2c:e4:82:
c6:04:33:12:7f:f7:c6:49:7b:9c:c8:19:f8:1c:b9:
27:91:28:e1:de:76:49:c1:64:b2:3b:30:60:63:db:
df:29:41:9d:74:f8:78:1a:d1:29:23:53:38:b6:68:
d2:a1:8e:27:cb:20:a8:05:c4:77:ee:4a:d5:15:88:
50:af:f0:fb:04:ca:b7:47:59:c0:ac:a8:a8:60:b0:
bc:c4:c4:8c:0a:07:c8:34:a6:27:2c:55:53:34:05:
4b:32:64:6a:44:c9:f0:61:49:49:7e:28:c0:2d:95:
d0:85:42:e8:20:80:d5:a4:70:73:b2:f6:6d:3f:3f:
8f:3b:77:68:47:91:3d:8e:7b:d3:33:a6:49:d5:3b:
10:d5:de:f5:8e:c0:2c:5e:ac:e9:8d:ac:99:0c:94:
70:54:bf:bb:63:ef:eb:09:67:66:0b:94:26:0a:6a:
60:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:24:2B:B3:91:CF:F5:72:1A:A1:3B:DB:EF:6F:E9:7E:AC:E7:C3:98
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/1yQrs5HP9XIaoTvb72_pfqznw5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.162.0/23
45.87.152.0/24
45.93.10.0/23
62.133.60.0/22
81.177.214.0/23
91.231.180.0/24
141.98.170.0/24
188.119.121.0/24
194.156.102.0/24
Signature Algorithm: sha256WithRSAEncryption
51:00:a3:28:71:d7:2f:64:cf:6b:ea:cf:96:a6:64:72:fb:d9:
80:2b:e8:21:ff:ce:51:00:17:1b:81:c0:23:ba:54:4d:47:11:
dd:93:7d:7d:49:86:1d:1f:c5:6a:83:13:87:bd:b4:fe:85:ce:
74:4f:d0:ae:db:f0:50:ba:ce:4a:0b:37:51:26:6a:54:ab:c5:
57:76:11:b5:cf:44:a3:b6:8e:98:df:36:f9:ca:8f:68:15:ec:
2a:60:40:bb:cc:9f:24:2d:9e:be:8d:e2:96:5f:dc:58:d6:20:
c2:41:fb:43:5e:a7:11:f9:08:d1:4e:ee:42:eb:ec:9c:6e:6d:
2e:4c:18:b7:5a:4d:92:3c:76:1a:74:f2:e2:61:31:e4:e7:6a:
f5:c5:63:e9:cf:94:f0:03:6b:5b:e8:e5:19:ee:55:ff:03:d2:
33:2d:1e:b9:64:78:c7:f7:8e:fa:69:09:1a:85:c8:42:b1:43:
b9:bb:f4:c9:28:8f:77:e6:f6:ca:49:33:34:18:cb:55:51:e7:
08:5c:19:16:56:e8:ae:12:c8:06:93:03:c9:87:d6:2a:79:3f:
69:5d:d9:6a:43:27:6d:b2:54:f0:29:13:09:b5:1f:b9:a6:9d:
b4:ae:14:ba:d5:e4:b2:dc:a4:35:a5:fc:b7:8a:59:b6:a1:d4:
a9:46:c0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:56:18 2026 by rpki-client