Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/yt8HRcHicuXYN-6aj07rDdfgQW4.roa
File: yt8HRcHicuXYN-6aj07rDdfgQW4.roa (raw, json)
Hash identifier: yq8W6hyBjxfELaaTv+JtmvUKCcm6AMa5evi1xJRVuJc=
Subject key identifier: CA:DF:07:45:C1:E2:72:E5:D8:37:EE:9A:8F:4E:EB:0D:D7:E0:41:6E
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019FDC7AEE7AC8F894E15E677EDA18CF8140
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/yt8HRcHicuXYN-6aj07rDdfgQW4.roa
Signing time: Fri 07 Aug 2026 13:47:51 +0000
ROA not before: Fri 07 Aug 2026 13:47:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199741
IP address blocks: 84.51.233.0/24 maxlen: 24
103.210.197.0/24 maxlen: 24
167.160.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 00:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:7a:ee:7a:c8:f8:94:e1:5e:67:7e:da:18:cf:81:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Aug 7 13:47:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cadf0745c1e272e5d837ee9a8f4eeb0dd7e0416e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:95:11:08:27:3b:a7:01:9f:6e:4b:36:62:82:
23:4e:74:04:58:6a:26:b8:54:3d:ae:7e:98:41:78:
bd:82:70:32:94:58:77:7e:ba:9c:70:55:b7:a3:af:
ed:75:db:20:cd:6c:0d:db:61:ed:1b:63:c3:34:63:
c6:13:e4:bb:16:84:61:ae:af:02:6e:57:e7:89:a8:
d9:a4:eb:cb:18:94:be:39:dc:90:a8:06:8c:77:35:
0b:0b:68:3b:a2:41:d2:62:22:7f:3f:69:b0:5b:3c:
0b:3f:36:f6:e3:fa:fb:82:7f:9b:43:9f:cb:53:08:
cf:e0:f1:fb:6c:0d:c7:21:b5:94:9d:6c:8d:02:94:
53:80:c7:e7:9b:9d:03:ba:cf:09:d1:7f:b4:49:18:
8b:57:25:0b:99:98:89:da:03:30:86:c7:30:fe:7b:
cd:05:31:00:04:0e:84:e8:29:65:1e:cc:7f:ad:f8:
0d:67:3c:eb:25:bc:b5:ef:2a:7c:ac:c7:d0:97:b0:
67:74:18:69:58:81:f7:74:af:6a:70:93:e3:18:24:
75:b2:5c:d5:e7:9a:73:f2:0d:9d:6d:50:1e:98:ae:
be:12:75:0b:95:66:b3:f3:ed:54:cf:1e:a7:42:ea:
9e:a4:3a:1c:1b:dc:6a:4c:34:d9:25:30:2c:92:e3:
22:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DF:07:45:C1:E2:72:E5:D8:37:EE:9A:8F:4E:EB:0D:D7:E0:41:6E
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/yt8HRcHicuXYN-6aj07rDdfgQW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.51.233.0/24
103.210.197.0/24
167.160.12.0/24
Signature Algorithm: sha256WithRSAEncryption
48:41:ca:27:44:2e:c2:1a:f2:b0:e9:94:90:93:5a:ae:d6:6d:
5f:57:bd:d6:1e:e8:23:c7:96:b8:de:10:fa:66:30:ed:4d:25:
62:ea:56:75:d0:03:be:fc:f4:3a:30:28:6c:22:8a:cc:cc:d8:
17:be:69:1c:a0:e0:cb:95:80:67:6a:5f:4c:f6:cc:f8:e6:a3:
fd:d3:d9:aa:fb:54:39:ec:a6:ce:b8:2c:a8:2a:4d:3c:64:bb:
1f:1d:1d:ab:34:ef:63:8e:92:b3:dd:bb:90:8c:36:8f:e5:26:
5d:25:3b:9a:ce:63:a7:61:ab:6c:67:9c:7a:99:c7:ba:b2:b2:
2e:13:1f:c3:fe:7a:f4:27:6b:13:cc:e5:82:d7:f6:85:45:29:
48:5f:9f:28:f3:7b:ac:ef:3c:b2:35:5f:7f:e4:63:59:8c:08:
54:4a:89:f6:bd:06:93:cc:74:39:89:92:27:5d:2a:67:35:02:
fb:09:d7:11:3b:cc:7d:b5:cf:e7:19:47:8a:d3:d7:56:72:71:
e5:5b:a8:61:9d:e1:da:97:cc:64:11:76:bd:82:65:0c:63:53:
26:40:93:38:da:24:0f:67:94:fb:db:bb:75:82:8e:49:c1:65:
fb:41:85:db:16:74:c3:6a:d1:ba:a8:af:a1:2b:0b:fb:01:97:
7d:97:fc:f6
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ/ceu56yPiU4V5nftoYz4FAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5
NTkyZGEwHhcNMjYwODA3MTM0NzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYWRmMDc0NWMxZTI3MmU1ZDgzN2VlOWE4ZjRlZWIwZGQ3ZTA0MTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6JURCCc7pwGfbks2YoIjTnQEWGom
uFQ9rn6YQXi9gnAylFh3frqccFW3o6/tddsgzWwN22HtG2PDNGPGE+S7FoRhrq8C
blfniajZpOvLGJS+OdyQqAaMdzULC2g7okHSYiJ/P2mwWzwLPzb24/r7gn+bQ5/L
UwjP4PH7bA3HIbWUnWyNApRTgMfnm50Dus8J0X+0SRiLVyULmZiJ2gMwhscw/nvN
BTEABA6E6CllHsx/rfgNZzzrJby17yp8rMfQl7BndBhpWIH3dK9qcJPjGCR1slzV
55pz8g2dbVAemK6+EnULlWaz8+1Uzx6nQuqepDocG9xqTDTZJTAskuMiNwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMrfB0XB4nLl2Dfumo9O6w3X4EFuMB8GA1UdIwQY
MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt
ZjVmYjcxYjlhNTFmLzEveXQ4SFJjSGljdVhZTi02YWowN3JEZGZnUVc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm
LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVDPpAwQA
Z9LFAwQAp6AMMA0GCSqGSIb3DQEBCwUAA4IBAQBIQconRC7CGvKw6ZSQk1qu1m1f
V73WHugjx5a43hD6ZjDtTSVi6lZ10AO+/PQ6MChsIorMzNgXvmkcoODLlYBnal9M
9sz45qP909mq+1Q57KbOuCyoKk08ZLsfHR2rNO9jjpKz3buQjDaP5SZdJTuazmOn
YatsZ5x6mce6srIuEx/D/nr0J2sTzOWC1/aFRSlIX58o83us7zyyNV9/5GNZjAhU
Son2vQaTzHQ5iZInXSpnNQL7CdcRO8x9tc/nGUeK09dWcnHlW6hhneHal8xkEXa9
gmUMY1MmQJM42iQPZ5T727t1go5JwWX7QYXbFnTDatG6qK+hKwv7AZd9l/z2
-----END CERTIFICATE-----
Generated at Thu Aug 13 10:34:56 2026 by rpki-client