Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/y30i-bTM-2qoblFhqBBAe9ul310.roa
File: y30i-bTM-2qoblFhqBBAe9ul310.roa (raw, json)
Hash identifier: VSrKRNqpStfrax2Fv8Y8tuF7RlQyE1r/jQmHGDdOng8=
Subject key identifier: CB:7D:22:F9:B4:CC:FB:6A:A8:6E:51:61:A8:10:40:7B:DB:A5:DF:5D
Certificate issuer: /CN=6f8b79810cebc5ba2a52f7a08d5196d33e8cdce7
Certificate serial: 019FCBDF47A2525AA402DC489F824C067252
Authority key identifier: 6F:8B:79:81:0C:EB:C5:BA:2A:52:F7:A0:8D:51:96:D3:3E:8C:DC:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4t5gQzrxboqUvegjVGW0z6M3Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/y30i-bTM-2qoblFhqBBAe9ul310.roa
Signing time: Tue 04 Aug 2026 08:23:55 +0000
ROA not before: Tue 04 Aug 2026 08:23:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6908
IP address blocks: 85.118.155.0/24 maxlen: 24
85.118.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4t5gQzrxboqUvegjVGW0z6M3Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 05:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:df:47:a2:52:5a:a4:02:dc:48:9f:82:4c:06:72:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f8b79810cebc5ba2a52f7a08d5196d33e8cdce7
Validity
Not Before: Aug 4 08:23:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb7d22f9b4ccfb6aa86e5161a810407bdba5df5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b1:ec:dc:cb:a3:00:2f:c9:e7:1a:bf:21:3c:
ec:f4:a6:6c:80:5d:03:54:91:73:47:d8:5e:25:e2:
42:dd:18:fb:49:aa:2d:f8:84:37:e9:f7:7c:8f:de:
44:ed:2e:de:34:2c:a0:19:55:6c:08:27:e9:0f:be:
d8:c4:6e:87:07:11:86:2f:04:41:d1:f6:32:b2:2b:
3f:05:ff:c6:2a:fb:a7:9b:ab:d1:4a:3f:9e:7f:43:
97:c9:53:5e:82:16:eb:bd:e3:bf:27:fa:82:dc:b3:
43:61:10:4e:35:ed:4a:1f:ed:06:0e:a5:56:14:26:
c1:33:2d:ec:33:54:c5:62:8e:1c:aa:6c:39:ff:5e:
8d:20:6f:25:35:57:ea:1d:82:96:e5:74:d7:a1:f5:
22:2d:09:a9:b8:0d:4e:9e:4a:56:59:56:33:e6:cd:
db:36:3e:2f:4f:c1:b8:ce:9f:7d:9a:17:04:d2:c0:
de:19:9f:d7:7e:42:71:16:4f:5b:86:27:00:90:44:
54:a2:7c:22:d7:f9:53:cb:a3:75:1d:bd:98:7a:90:
04:6e:90:ef:96:0e:10:a3:ff:f5:82:18:a3:90:d7:
13:2a:2a:80:0f:01:c3:02:3d:14:aa:eb:0e:9e:34:
71:3f:08:32:37:22:68:a0:8e:e5:4c:7a:14:e2:c1:
7e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7D:22:F9:B4:CC:FB:6A:A8:6E:51:61:A8:10:40:7B:DB:A5:DF:5D
X509v3 Authority Key Identifier:
keyid:6F:8B:79:81:0C:EB:C5:BA:2A:52:F7:A0:8D:51:96:D3:3E:8C:DC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4t5gQzrxboqUvegjVGW0z6M3Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/y30i-bTM-2qoblFhqBBAe9ul310.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.118.155.0-85.118.156.255
Signature Algorithm: sha256WithRSAEncryption
20:5e:d8:f0:be:6e:b6:82:3d:d2:bb:38:61:cb:d9:bb:5b:02:
81:17:0d:45:b1:fb:25:eb:ce:86:57:9b:4d:de:6e:2f:ee:1a:
e6:62:00:4a:34:b4:89:6d:c1:61:a0:32:f9:2d:ca:b7:bf:52:
64:8b:d2:51:1a:9f:7e:8e:a3:0a:5b:cd:a8:9a:45:1f:dd:c8:
79:1a:71:4f:43:29:9c:13:9e:b4:4b:6f:22:36:31:ec:6d:db:
03:e9:62:02:3c:17:a0:16:0c:cb:52:65:1b:b6:25:ed:85:3f:
12:f3:16:a0:49:70:a6:7c:68:e1:e5:0e:e8:dc:ae:e4:e8:7f:
9e:cb:a4:dd:3f:4f:15:e4:25:73:a4:02:96:ad:ec:65:e9:61:
8c:36:c9:cc:31:2b:ee:d3:77:56:18:a6:6e:52:fd:a7:f0:fc:
22:3d:8d:2d:1a:61:59:10:25:5c:ea:44:61:e9:93:57:39:33:
c7:fa:8a:cb:ec:8e:ad:43:91:a5:79:97:00:73:de:2f:2f:c0:
e8:15:de:24:6e:e2:71:53:5f:0d:73:2c:8f:24:1b:2f:07:bf:
5b:86:8b:d3:37:ab:da:b8:3f:fe:fc:4b:9a:f8:90:84:6f:c8:
48:df:1b:ba:64:e8:c9:31:9f:e3:90:f0:8b:74:89:31:43:73:
11:01:0f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 14:35:59 2026 by rpki-client