Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/YQNtFtvvqMYE-Ept4Jt-1X-D8GU.roa
File: YQNtFtvvqMYE-Ept4Jt-1X-D8GU.roa (raw, json)
Hash identifier: 7bQB5C7qCud/5lMim5zbAwJfTKkakqQnQnxe4JCmZNM=
Subject key identifier: 61:03:6D:16:DB:EF:A8:C6:04:F8:4A:6D:E0:9B:7E:D5:7F:83:F0:65
Certificate issuer: /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Certificate serial: 01A0F2FE7DFCE43E019401994521C7666904
Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/YQNtFtvvqMYE-Ept4Jt-1X-D8GU.roa
Signing time: Wed 30 Sep 2026 15:45:59 +0000
ROA not before: Wed 30 Sep 2026 15:45:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 5.144.155.0/24 maxlen: 24
78.143.252.0/24 maxlen: 24
78.143.253.0/24 maxlen: 24
79.135.100.0/23 maxlen: 23
79.135.102.0/23 maxlen: 24
194.33.150.0/24 maxlen: 24
194.33.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 21:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:fe:7d:fc:e4:3e:01:94:01:99:45:21:c7:66:69:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Validity
Not Before: Sep 30 15:45:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61036d16dbefa8c604f84a6de09b7ed57f83f065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:62:0b:63:0a:b3:80:0b:c4:b4:5e:b4:27:33:
9d:92:02:6e:e3:6b:24:21:ef:b5:68:24:4f:4f:35:
07:7b:f3:52:83:43:4d:cf:24:f3:d6:ab:51:12:d6:
2f:82:c8:c2:3d:7f:ea:dc:bb:5d:bf:03:6f:86:ae:
4f:18:8f:13:e1:2d:82:d0:9a:1e:09:e6:a6:67:8a:
95:c6:fc:b7:11:2e:f5:d2:f0:b0:99:5c:04:fe:c7:
c3:91:fb:2a:4a:ab:74:b0:0b:1e:56:ed:06:17:ef:
54:83:38:f6:ce:e9:b7:fe:af:34:de:d1:ea:33:2c:
d8:0f:3c:00:55:4e:da:cd:d4:58:94:6d:4e:db:61:
71:f6:44:ff:ce:bf:ea:e4:bf:4e:80:d8:71:0b:df:
f6:89:9b:17:55:21:7d:e8:b6:ed:85:49:08:2e:55:
a1:44:d8:9e:49:42:fd:b4:ea:c6:fb:44:5d:bf:4f:
97:e7:2b:55:99:f2:42:e3:76:ab:1a:db:ea:7a:d7:
a7:80:c9:78:dd:2e:17:ba:75:56:2b:5b:e1:4e:18:
25:93:1d:80:85:d2:93:a7:bb:00:49:ed:eb:82:8b:
62:12:1d:ce:f0:1a:88:d6:46:8b:47:68:04:fc:2b:
48:dd:17:51:26:c2:d9:af:98:d8:43:60:16:34:9d:
3e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:03:6D:16:DB:EF:A8:C6:04:F8:4A:6D:E0:9B:7E:D5:7F:83:F0:65
X509v3 Authority Key Identifier:
keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/YQNtFtvvqMYE-Ept4Jt-1X-D8GU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.155.0/24
78.143.252.0/23
79.135.100.0/22
194.33.150.0/23
Signature Algorithm: sha256WithRSAEncryption
39:d4:14:a1:39:b9:ec:0f:28:03:6b:2c:6e:b4:bc:5c:a1:1c:
60:8c:4d:54:13:be:1f:86:48:f0:a3:aa:83:64:b9:da:df:c2:
9d:32:be:cb:94:9a:b8:27:d6:e6:c5:d0:d1:77:e3:53:ea:3e:
25:7e:ee:9f:dc:54:a6:15:51:82:bd:3a:99:c7:b1:75:d9:20:
7b:0c:6b:4e:7c:31:36:6f:55:33:5a:6f:e8:d4:f3:5a:de:60:
2d:14:e6:c6:58:60:b3:ba:8a:d0:43:01:d5:e9:f3:07:f9:cf:
73:97:0c:cf:c9:b1:c4:48:af:fd:3c:68:40:a0:0d:98:ef:e8:
82:bc:45:38:37:36:30:8e:57:71:a1:1b:19:a5:2a:63:51:98:
e3:c1:b4:5f:78:c5:1b:b9:8c:a0:e2:24:6c:a1:a0:c8:71:3d:
a8:3a:d0:28:15:3f:ae:30:49:df:8c:51:af:7c:1d:3c:ce:fb:
a4:68:fb:b4:f2:d9:1a:3d:69:af:4d:72:ca:ce:88:e9:bf:e2:
2d:64:20:af:ff:f0:bb:49:94:72:e8:a1:1a:a7:d1:5a:ef:8e:
ad:d3:9c:5b:6d:45:92:8b:70:c0:75:ea:bd:8e:67:22:81:54:
12:1f:1c:01:b4:cd:82:60:22:ce:67:06:63:65:1b:7d:fb:b8:
10:3b:cd:4b
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaDy/n385D4BlAGZRSHHZmkEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMmEwZmEyMDM4MzMzMmEzZjQxNGYwNTQ3NTNhMGI2MGIy
NWJhMTAwHhcNMjYwOTMwMTU0NTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTAzNmQxNmRiZWZhOGM2MDRmODRhNmRlMDliN2VkNTdmODNmMDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2ILYwqzgAvEtF60JzOdkgJu42sk
Ie+1aCRPTzUHe/NSg0NNzyTz1qtREtYvgsjCPX/q3LtdvwNvhq5PGI8T4S2C0Joe
CeamZ4qVxvy3ES710vCwmVwE/sfDkfsqSqt0sAseVu0GF+9Ugzj2zum3/q803tHq
MyzYDzwAVU7azdRYlG1O22Fx9kT/zr/q5L9OgNhxC9/2iZsXVSF96LbthUkILlWh
RNieSUL9tOrG+0Rdv0+X5ytVmfJC43arGtvqetengMl43S4XunVWK1vhThglkx2A
hdKTp7sASe3rgotiEh3O8BqI1kaLR2gE/CtI3RdRJsLZr5jYQ2AWNJ0+cwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFGEDbRbb76jGBPhKbeCbftV/g/BlMB8GA1UdIwQY
MBaAFC8qD6IDgzMqP0FPBUdToLYLJboQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kNmQzMGItMGI5Yi00MjllLTg0MTMt
NTVhOTMwZmMwYzcxLzEvWVFOdEZ0dnZxTVlFLUVwdDRKdC0xWC1EOEdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9kNmQzMGItMGI5Yi00MjllLTg0MTMtNTVhOTMwZmMwYzcx
LzEvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABZCbAwQB
To/8AwQCT4dkAwQBwiGWMA0GCSqGSIb3DQEBCwUAA4IBAQA51BShObnsDygDayxu
tLxcoRxgjE1UE74fhkjwo6qDZLna38KdMr7LlJq4J9bmxdDRd+NT6j4lfu6f3FSm
FVGCvTqZx7F12SB7DGtOfDE2b1UzWm/o1PNa3mAtFObGWGCzuorQQwHV6fMH+c9z
lwzPybHESK/9PGhAoA2Y7+iCvEU4NzYwjldxoRsZpSpjUZjjwbRfeMUbuYyg4iRs
oaDIcT2oOtAoFT+uMEnfjFGvfB08zvukaPu08tkaPWmvTXLKzojpv+ItZCCv//C7
SZRy6KEap9Fa746t05xbbUWSi3DAdeq9jmcigVQSHxwBtM2CYCLOZwZjZRt9+7gQ
O81L
-----END CERTIFICATE-----
Generated at Fri Oct 30 06:37:49 2026 by rpki-client