Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/B2WOyvGsgmz5tXxbNKHUVRX-g4k.roa
File: B2WOyvGsgmz5tXxbNKHUVRX-g4k.roa (raw, json)
Hash identifier: 6dvtIux5uxXOuzt5Rk/pRpxU+xdQ5w03+/E0YuyrnEA=
Subject key identifier: 07:65:8E:CA:F1:AC:82:6C:F9:B5:7C:5B:34:A1:D4:55:15:FE:83:89
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 01A135283A0DCBD4887A5329F70E64D7329F
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/B2WOyvGsgmz5tXxbNKHUVRX-g4k.roa
Signing time: Tue 13 Oct 2026 12:06:31 +0000
ROA not before: Tue 13 Oct 2026 12:06:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 138.226.234.0/24 maxlen: 24
138.226.238.0/24 maxlen: 24
153.79.172.0/24 maxlen: 24
153.79.173.0/24 maxlen: 24
153.79.174.0/24 maxlen: 24
204.62.121.0/24 maxlen: 24
204.62.122.0/24 maxlen: 24
207.89.22.0/24 maxlen: 24
207.89.23.0/24 maxlen: 24
216.163.179.0/24 maxlen: 24
2a14:a087::/48 maxlen: 48
2a14:a087:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:28:3a:0d:cb:d4:88:7a:53:29:f7:0e:64:d7:32:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Oct 13 12:06:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07658ecaf1ac826cf9b57c5b34a1d45515fe8389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3f:6f:d9:1b:85:34:8d:19:8e:a5:12:e3:35:
37:a7:b7:47:63:77:c7:5d:aa:75:b5:3f:e4:36:a4:
7f:c2:d5:86:ff:ad:bb:06:a3:91:cc:a5:4a:e9:44:
da:18:fd:2c:57:fb:44:47:92:c1:2b:a3:7f:bc:79:
36:a6:ec:5d:ca:1b:b7:76:b1:e5:ac:21:29:bb:90:
4b:4a:af:1f:08:4c:e0:a3:ba:11:07:99:de:25:f4:
70:6d:c3:41:83:b4:16:01:6d:7b:53:fc:97:17:aa:
55:fd:76:ce:2f:0d:92:2f:7a:5a:92:3e:42:29:ec:
29:b7:27:c7:4a:33:3a:ba:d4:a7:29:d5:8d:67:6e:
b3:86:56:8c:c6:71:21:f9:76:ef:5e:54:b8:6a:6e:
a3:9c:f9:04:4a:18:ce:c7:16:12:b7:18:28:af:9c:
3c:67:d0:17:97:a9:90:e4:e7:45:2e:0e:41:01:87:
3d:ee:13:db:df:a0:84:60:c2:e4:cc:8d:2c:b9:87:
02:d8:c7:f8:5e:46:25:9b:d5:87:da:5e:27:c4:dd:
2c:df:3a:9f:37:20:1c:98:0b:6e:00:0f:51:86:e5:
e3:0f:15:b2:82:9f:ca:2c:cc:c8:54:8b:6e:cf:fb:
1a:69:a0:f1:db:60:cc:08:63:44:cd:9b:a4:2a:6b:
10:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:65:8E:CA:F1:AC:82:6C:F9:B5:7C:5B:34:A1:D4:55:15:FE:83:89
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/B2WOyvGsgmz5tXxbNKHUVRX-g4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.226.234.0/24
138.226.238.0/24
153.79.172.0-153.79.174.255
204.62.121.0-204.62.122.255
207.89.22.0/23
216.163.179.0/24
IPv6:
2a14:a087::/47
Signature Algorithm: sha256WithRSAEncryption
09:4b:12:72:9b:1b:a1:ad:fe:a9:24:c9:ad:56:00:8e:bf:32:
b7:9a:c2:ca:1f:33:e4:21:cf:48:a7:96:49:e6:91:15:9b:b1:
18:f9:e3:50:f1:e4:cd:a9:55:9c:42:77:ef:b8:9e:e4:3e:87:
27:d2:0c:8f:1c:eb:7b:92:73:bc:5a:26:87:aa:99:3d:bb:be:
b8:a7:d1:d1:0d:0a:87:4b:2b:4c:7a:30:85:86:93:e1:28:45:
45:93:f5:86:cf:7e:56:24:78:32:5b:c3:20:74:a1:96:32:32:
c5:b4:5b:2d:c7:87:ba:08:ec:56:d5:06:49:5f:47:7f:7b:94:
f8:a1:4e:5f:55:61:98:cd:eb:d3:87:68:53:7b:87:5b:6b:b6:
6e:11:5b:71:5f:d6:82:26:67:3c:2c:eb:a9:5f:dd:82:56:f0:
09:25:ca:d7:cb:b4:79:ab:93:8b:ac:f0:58:44:82:61:61:b4:
a8:8c:20:16:4c:3b:c5:15:2d:be:27:52:56:1d:1b:74:54:89:
d4:3e:61:ac:4c:29:45:c4:97:e3:9c:df:61:f4:d8:f5:ae:9d:
fa:2a:91:45:47:ea:78:91:f6:ac:1c:ca:b2:3c:41:e6:eb:8d:
88:19:3a:23:d6:5e:79:2d:54:2d:bf:60:fd:57:0e:82:72:38:
1c:5d:8c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:33:01 2026 by rpki-client