Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/YhRc3Mf3n7-3iGrExyD5C7CZBFw.roa
File: YhRc3Mf3n7-3iGrExyD5C7CZBFw.roa (raw, json)
Hash identifier: ksdLqMhtmV2T8m4tl86Qc23Jw/2ULQtET80utRAIjT4=
Subject key identifier: 62:14:5C:DC:C7:F7:9F:BF:B7:88:6A:C4:C7:20:F9:0B:B0:99:04:5C
Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Certificate serial: 01A01A73BD610EB6E015E9A6654671CE3DA4
Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/YhRc3Mf3n7-3iGrExyD5C7CZBFw.roa
Signing time: Wed 19 Aug 2026 14:36:27 +0000
ROA not before: Wed 19 Aug 2026 14:36:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63119
IP address blocks: 23.92.116.0/24 maxlen: 24
23.92.117.0/24 maxlen: 24
23.92.118.0/24 maxlen: 24
23.92.119.0/24 maxlen: 24
23.92.120.0/24 maxlen: 24
23.92.121.0/24 maxlen: 24
23.92.122.0/24 maxlen: 24
23.92.123.0/24 maxlen: 24
23.92.124.0/24 maxlen: 24
23.92.125.0/24 maxlen: 24
104.160.1.0/24 maxlen: 24
104.160.3.0/24 maxlen: 24
104.160.7.0/24 maxlen: 24
104.160.11.0/24 maxlen: 24
104.160.14.0/24 maxlen: 24
104.160.15.0/24 maxlen: 24
104.160.28.0/22 maxlen: 22
104.160.28.0/24 maxlen: 24
104.160.29.0/24 maxlen: 24
104.160.30.0/24 maxlen: 24
104.160.31.0/24 maxlen: 24
107.150.66.0/24 maxlen: 24
107.150.68.0/24 maxlen: 24
107.150.72.0/24 maxlen: 24
107.150.73.0/24 maxlen: 24
107.150.74.0/24 maxlen: 24
107.150.76.0/22 maxlen: 22
107.150.76.0/24 maxlen: 24
107.150.77.0/24 maxlen: 24
107.150.78.0/24 maxlen: 24
107.150.79.0/24 maxlen: 24
107.150.81.0/24 maxlen: 24
107.150.82.0/23 maxlen: 23
107.150.83.0/24 maxlen: 24
107.150.84.0/22 maxlen: 22
107.150.84.0/24 maxlen: 24
107.150.85.0/24 maxlen: 24
107.150.86.0/24 maxlen: 24
107.150.87.0/24 maxlen: 24
158.222.0.0/24 maxlen: 24
158.222.1.0/24 maxlen: 24
158.222.2.0/24 maxlen: 24
158.222.4.0/24 maxlen: 24
158.222.6.0/24 maxlen: 24
158.222.8.0/24 maxlen: 24
158.222.9.0/24 maxlen: 24
158.222.10.0/24 maxlen: 24
158.222.11.0/24 maxlen: 24
158.222.12.0/24 maxlen: 24
158.222.13.0/24 maxlen: 24
158.222.14.0/24 maxlen: 24
158.222.15.0/24 maxlen: 24
192.40.90.0/24 maxlen: 24
192.40.91.0/24 maxlen: 24
192.40.92.0/23 maxlen: 23
192.40.92.0/24 maxlen: 24
192.40.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 23:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1a:73:bd:61:0e:b6:e0:15:e9:a6:65:46:71:ce:3d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Validity
Not Before: Aug 19 14:36:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62145cdcc7f79fbfb7886ac4c720f90bb099045c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ab:a3:8c:fb:03:e3:98:68:f6:4b:da:b3:94:
4d:3b:59:4f:9e:4b:b6:f9:a8:51:d6:a5:cd:01:47:
8b:22:ed:2f:70:7c:86:fc:d3:22:3f:23:47:74:cc:
34:7c:aa:91:86:6f:ea:9f:25:13:6d:47:67:d5:15:
32:d1:71:8b:b4:9e:70:5f:bf:83:02:0e:81:ed:24:
af:14:76:56:71:b8:f2:fb:7b:ea:ec:1d:11:84:51:
09:f7:0d:51:33:d1:fa:9b:fb:b8:b6:e6:9f:66:28:
1d:fb:73:a6:20:d7:77:2e:39:f9:86:81:f5:7c:e5:
8a:fb:57:41:5e:24:9c:4f:45:7e:f8:b4:89:b1:09:
33:5b:eb:e6:18:f7:1e:b7:95:3d:5f:9d:4a:8f:34:
44:0c:1e:ed:6c:27:8a:8a:77:4e:f8:29:b7:72:b0:
71:66:a3:77:57:df:49:de:74:37:01:17:01:c6:43:
22:50:13:b1:5f:09:27:ce:66:70:3e:a7:a4:43:89:
bf:73:68:91:81:af:fa:1c:03:19:85:58:9b:9f:79:
72:19:22:7c:1d:70:20:57:4a:4f:5f:ec:32:62:66:
c9:14:5a:a1:3d:11:06:3c:5f:41:a7:30:a7:8c:06:
e5:60:de:86:2b:a5:a2:f6:32:15:99:a3:fb:8e:09:
33:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:14:5C:DC:C7:F7:9F:BF:B7:88:6A:C4:C7:20:F9:0B:B0:99:04:5C
X509v3 Authority Key Identifier:
keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/YhRc3Mf3n7-3iGrExyD5C7CZBFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.92.116.0-23.92.125.255
104.160.1.0/24
104.160.3.0/24
104.160.7.0/24
104.160.11.0/24
104.160.14.0/23
104.160.28.0/22
107.150.66.0/24
107.150.68.0/24
107.150.72.0-107.150.74.255
107.150.76.0/22
107.150.81.0-107.150.87.255
158.222.0.0-158.222.2.255
158.222.4.0/24
158.222.6.0/24
158.222.8.0/21
192.40.90.0-192.40.93.255
Signature Algorithm: sha256WithRSAEncryption
00:bb:e9:ca:b6:ca:27:77:ef:f0:92:b1:d0:3d:6a:91:74:09:
4d:ea:96:b6:6c:8f:48:43:c5:dc:40:24:68:b5:da:dc:49:7b:
38:76:d5:92:6e:fb:c2:65:6d:ea:eb:79:a2:87:f7:82:9a:ae:
b2:f3:80:e6:b4:1c:8d:74:98:22:2b:e2:cc:bb:69:1a:8a:b3:
87:7e:3b:66:b2:01:23:0d:33:a4:90:aa:12:e0:73:ca:a3:7d:
67:5a:fb:be:9e:6c:91:89:e8:5d:e0:20:5e:67:8c:89:bd:75:
7a:20:37:1e:2e:28:3c:f0:1f:52:21:6f:ba:d7:be:69:a7:91:
22:dc:8d:c1:ea:d8:50:fb:ad:80:84:67:ee:cf:1e:9a:ee:de:
a1:e7:94:e6:ef:44:2b:da:f5:a9:84:28:87:ed:6e:20:b2:bc:
d3:55:9c:4d:2c:d2:04:24:c8:d9:80:1d:96:60:bb:d3:f2:01:
18:a2:b7:f9:43:2d:ec:03:1a:6c:95:6e:56:4e:f4:56:78:2a:
67:4f:8d:69:50:88:2f:93:53:c6:81:e9:c1:0a:c9:2c:70:fd:
ca:04:62:50:50:bc:a5:1d:1b:12:c9:1e:5d:bb:b7:f7:06:74:
0b:0c:15:86:77:a8:cf:2a:a4:67:22:c4:9f:01:15:1f:7b:d1:
9b:10:88:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 08:41:14 2026 by rpki-client