Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/RYADyjtwifA4WYffvjYPXDC0tY0.roa
File: RYADyjtwifA4WYffvjYPXDC0tY0.roa (raw, json)
Hash identifier: 1by1zzXISiOupvtCqLE8CpvK3rLnMewUmmcaVpDySL0=
Subject key identifier: 45:80:03:CA:3B:70:89:F0:38:59:87:DF:BE:36:0F:5C:30:B4:B5:8D
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 01A0F61DC02BFBDFB41611BCD718AA235752
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/RYADyjtwifA4WYffvjYPXDC0tY0.roa
Signing time: Thu 01 Oct 2026 06:18:59 +0000
ROA not before: Thu 01 Oct 2026 06:18:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 185.251.80.0/23 maxlen: 24
185.251.82.0/23 maxlen: 24
185.251.83.0/24 maxlen: 24
194.4.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:1d:c0:2b:fb:df:b4:16:11:bc:d7:18:aa:23:57:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Oct 1 06:18:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=458003ca3b7089f0385987dfbe360f5c30b4b58d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1e:9c:f8:ce:66:9d:f8:d0:6b:2f:53:ea:85:
7d:da:23:f2:99:be:52:fb:4b:f8:c0:f9:44:10:12:
8d:f7:e3:f3:4f:78:5e:6b:a4:9a:84:f9:3a:5e:4c:
ee:a1:8c:a5:fe:0e:f2:65:12:13:0d:e5:d1:26:dc:
63:90:86:61:2c:8f:99:3e:f6:15:72:36:61:a0:fe:
fd:9b:08:05:a7:8f:e7:c4:c4:c5:00:25:e9:f9:a2:
f6:0a:b2:1f:de:15:94:15:99:78:b3:b1:27:41:02:
bf:92:b0:0d:2a:d2:43:98:43:02:5f:e9:28:02:50:
f8:66:a4:a9:b2:12:b7:b7:f6:89:65:2a:71:f3:40:
a6:9b:c5:75:d0:80:54:76:6c:82:dc:bb:27:0c:6d:
6c:f3:c7:3c:33:be:b3:0a:c3:b2:fe:65:b8:2e:e5:
cb:16:b1:c1:a8:fd:1b:1a:a5:89:c5:e5:99:68:4d:
30:78:cb:fd:96:48:a7:d2:db:36:ea:16:bb:9b:09:
fc:e3:2c:a4:c9:16:b7:5d:48:05:4a:f7:3e:b6:1f:
7e:52:e2:de:cd:a4:f8:2a:3e:fa:06:ab:2a:99:d4:
77:7e:27:e2:71:44:b4:c5:8a:66:84:fb:51:83:00:
ea:92:e3:27:4a:70:f9:f2:0e:00:b6:50:86:cf:23:
37:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:80:03:CA:3B:70:89:F0:38:59:87:DF:BE:36:0F:5C:30:B4:B5:8D
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/RYADyjtwifA4WYffvjYPXDC0tY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.80.0/22
194.4.55.0/24
Signature Algorithm: sha256WithRSAEncryption
44:0c:08:7c:d9:c4:54:9e:c6:fd:69:b0:c7:c5:b1:cd:41:a8:
b4:a8:00:f8:3c:f9:6b:72:b2:d8:f0:83:ad:26:98:c2:3d:a9:
a9:b0:2c:3f:3e:51:0a:d7:78:71:76:59:d8:3b:0d:86:00:4c:
19:b2:21:87:6f:41:22:5e:b5:e2:c9:91:c4:04:41:a5:86:26:
67:12:72:7a:7f:3b:92:49:54:30:c3:f7:ea:34:ea:6f:fb:e4:
65:e1:78:4e:89:79:99:6a:69:a7:38:fc:3b:dd:c9:4a:67:f4:
b2:82:47:93:b5:f5:f2:3c:4d:04:e6:33:66:64:c2:d1:e6:2c:
99:50:f8:70:72:cb:df:90:5e:cf:62:71:89:dc:a9:45:0d:62:
4f:61:0d:c4:45:6b:e6:31:3b:38:41:79:f8:36:1b:2e:68:43:
78:bc:4b:69:39:b0:e1:84:de:be:76:a9:55:99:25:ba:a0:1e:
f3:70:4b:b9:35:71:a1:d9:bb:e6:7b:e5:41:94:bc:64:7a:03:
cd:18:8f:bd:18:00:81:e6:03:e5:bc:c0:2b:d1:11:b6:c0:ba:
4a:8d:99:0e:16:bc:36:10:f3:2a:54:c0:a7:c7:54:5a:c6:c8:
d4:7e:2c:09:9e:1a:20:8a:58:37:c3:e7:13:de:13:31:33:84:
ca:8f:05:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:23:04 2026 by rpki-client