Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/yANucdgEc1d0SNlX9N4mAfLd3FI.roa
File: yANucdgEc1d0SNlX9N4mAfLd3FI.roa (raw, json)
Hash identifier: aYUGTbKXXzJP8D5gN1satw5qfxqKP8FY7aLZMQYHTqY=
Subject key identifier: C8:03:6E:71:D8:04:73:57:74:48:D9:57:F4:DE:26:01:F2:DD:DC:52
Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial: 019FACEC98AAA11899C342B2573C5C532C87
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/yANucdgEc1d0SNlX9N4mAfLd3FI.roa
Signing time: Wed 29 Jul 2026 08:10:14 +0000
ROA not before: Wed 29 Jul 2026 08:10:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24961
IP address blocks: 5.104.104.0/21 maxlen: 24
5.199.128.0/20 maxlen: 24
37.157.248.0/21 maxlen: 24
46.20.32.0/20 maxlen: 24
46.228.192.0/20 maxlen: 24
62.141.32.0/20 maxlen: 24
78.31.64.0/21 maxlen: 24
80.82.208.0/20 maxlen: 24
81.30.144.0/20 maxlen: 24
83.136.80.0/21 maxlen: 24
85.14.192.0/18 maxlen: 24
85.114.128.0/19 maxlen: 24
89.163.128.0/17 maxlen: 24
91.194.84.0/24 maxlen: 24
91.212.153.0/24 maxlen: 24
91.212.159.0/24 maxlen: 24
91.212.163.0/24 maxlen: 24
93.186.192.0/20 maxlen: 24
146.0.32.0/20 maxlen: 24
152.89.92.0/22 maxlen: 24
185.15.244.0/22 maxlen: 24
185.45.248.0/22 maxlen: 24
185.145.196.0/22 maxlen: 24
185.219.208.0/22 maxlen: 24
193.111.198.0/23 maxlen: 24
194.107.129.0/24 maxlen: 24
194.126.198.0/24 maxlen: 24
195.93.242.0/23 maxlen: 24
213.202.192.0/18 maxlen: 24
217.79.176.0/20 maxlen: 24
2001:4ba0::/32 maxlen: 32
2001:4ba1::/32 maxlen: 32
2001:4ba3::/32 maxlen: 32
2001:4ba4::/32 maxlen: 32
2001:4ba6::/32 maxlen: 32
2a00:c320::/32 maxlen: 48
2a01:480::/32 maxlen: 32
2a0a:db80:1000::/36 maxlen: 36
2a0a:db80:2000::/36 maxlen: 36
2a0a:db80:2000::/40 maxlen: 40
2a0a:db80:3000::/36 maxlen: 36
2a0a:db80:4000::/36 maxlen: 36
2a0a:db80:5000::/36 maxlen: 36
2a0a:db80:8000::/36 maxlen: 36
2a0a:db80:8000::/40 maxlen: 40
2a0a:db80:c000::/36 maxlen: 36
2a0c:6b00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ec:98:aa:a1:18:99:c3:42:b2:57:3c:5c:53:2c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Validity
Not Before: Jul 29 08:10:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8036e71d80473577448d957f4de2601f2dddc52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:50:50:8a:d4:c0:71:b4:bf:7c:96:e8:e3:74:
8d:a9:82:9d:bd:5e:4c:e2:f1:2f:ba:d5:43:7c:b8:
f5:ed:d5:f6:93:2c:25:bb:49:3c:23:fe:4b:10:96:
d0:06:1a:f2:ad:aa:d4:89:28:65:15:6c:df:97:84:
db:e2:39:a5:e3:4b:7b:ca:b1:2c:0d:79:a8:33:aa:
fe:ed:20:a2:03:5e:d1:47:27:4f:18:15:a6:91:9c:
4b:ab:8c:12:4b:59:66:50:36:09:0a:4c:d8:17:f9:
56:d4:8a:6b:bb:54:19:c8:e7:9a:95:81:23:40:ca:
d9:0f:41:ca:0e:7d:9b:1f:20:b2:b7:c2:0b:1e:e2:
fe:c7:29:1b:66:6e:4b:c4:b4:2b:a7:4a:84:a5:7e:
82:6a:20:7e:d0:af:79:f7:8a:f4:17:6f:0d:6d:82:
6c:0a:a4:27:65:66:3a:d4:d1:c9:de:ca:a0:49:dd:
b8:44:ca:a9:da:e1:38:ea:41:8b:91:01:f5:1b:f3:
83:d0:95:ff:92:fc:93:59:85:26:65:2d:18:d6:d7:
2d:57:55:9e:fd:bf:3c:e8:11:19:1e:69:e3:56:31:
42:ee:63:2d:5d:da:0a:a5:3e:47:0e:af:84:cb:ba:
1d:d6:0f:2f:7d:db:c9:25:a4:72:2a:a9:d5:ac:0e:
16:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:03:6E:71:D8:04:73:57:74:48:D9:57:F4:DE:26:01:F2:DD:DC:52
X509v3 Authority Key Identifier:
keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/yANucdgEc1d0SNlX9N4mAfLd3FI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.104.0/21
5.199.128.0/20
37.157.248.0/21
46.20.32.0/20
46.228.192.0/20
62.141.32.0/20
78.31.64.0/21
80.82.208.0/20
81.30.144.0/20
83.136.80.0/21
85.14.192.0/18
85.114.128.0/19
89.163.128.0/17
91.194.84.0/24
91.212.153.0/24
91.212.159.0/24
91.212.163.0/24
93.186.192.0/20
146.0.32.0/20
152.89.92.0/22
185.15.244.0/22
185.45.248.0/22
185.145.196.0/22
185.219.208.0/22
193.111.198.0/23
194.107.129.0/24
194.126.198.0/24
195.93.242.0/23
213.202.192.0/18
217.79.176.0/20
IPv6:
2001:4ba0::/31
2001:4ba3::-2001:4ba4:ffff:ffff:ffff:ffff:ffff:ffff
2001:4ba6::/32
2a00:c320::/32
2a01:480::/32
2a0a:db80:1000::-2a0a:db80:5fff:ffff:ffff:ffff:ffff:ffff
2a0a:db80:8000::/36
2a0a:db80:c000::/36
2a0c:6b00::/32
Signature Algorithm: sha256WithRSAEncryption
1d:35:4b:ee:c4:30:3a:8b:64:83:1c:fe:df:b3:f0:e0:02:36:
12:da:ce:7b:29:de:8e:6d:4d:c9:5c:13:4f:5c:a0:c1:3f:2b:
c8:8a:ef:47:11:06:c7:11:09:cc:7a:f5:49:55:c9:ad:bd:9d:
cc:34:df:c8:88:79:1a:fd:15:40:81:6d:af:c7:c8:e8:a6:e6:
96:71:5b:29:bc:20:3e:5b:56:4a:57:6a:03:e8:90:eb:13:a4:
23:89:40:73:d6:7a:ba:e3:e1:e3:95:43:a0:6c:b4:0d:63:57:
ac:0b:fc:80:f2:98:55:40:ae:41:fe:c6:3c:61:12:14:a9:c2:
e7:9d:92:a6:bf:00:5d:63:e0:2f:a1:fc:e0:16:e6:18:56:b1:
86:4c:9a:35:28:61:a4:d9:e4:60:b9:02:f5:80:2f:fe:c1:08:
cb:5d:a9:85:21:18:bb:42:fa:0d:86:9a:68:e7:51:e2:be:da:
71:96:cb:fc:49:9e:84:69:80:b1:d2:e7:7b:41:36:17:6c:06:
09:47:ad:db:6f:c2:c0:3c:10:16:64:d4:17:68:15:a8:84:f5:
ad:52:ef:44:70:b0:56:75:be:0b:4a:5b:8d:34:d2:4f:c3:65:
c2:78:11:90:ca:bd:e7:cf:6b:34:1b:c0:b9:81:25:78:fb:59:
c0:0f:ed:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:30 2026 by rpki-client