Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Y2Y0uQPytwU2tA51a04E7TTqu6Y.roa
File: Y2Y0uQPytwU2tA51a04E7TTqu6Y.roa (raw, json)
Hash identifier: rEVRUnDyQ99EJdCyB/w4B5KTmczVZ04AbEiXLxh6RCA=
Subject key identifier: 63:66:34:B9:03:F2:B7:05:36:B4:0E:75:6B:4E:04:ED:34:EA:BB:A6
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A144E8451840AA4EFEA8806E0C305ED8DE
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Y2Y0uQPytwU2tA51a04E7TTqu6Y.roa
Signing time: Fri 16 Oct 2026 13:30:35 +0000
ROA not before: Fri 16 Oct 2026 13:30:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 9.247.146.0/24 maxlen: 24
9.247.151.0/24 maxlen: 24
9.247.155.0/24 maxlen: 24
77.81.88.0/24 maxlen: 24
78.17.184.0/24 maxlen: 24
78.17.199.0/24 maxlen: 24
78.17.217.0/24 maxlen: 24
86.107.51.0/24 maxlen: 24
89.37.195.0/24 maxlen: 24
89.39.125.0/24 maxlen: 24
89.43.62.0/24 maxlen: 24
89.45.162.0/24 maxlen: 24
89.125.127.0/24 maxlen: 24
89.125.143.0/24 maxlen: 24
89.125.173.0/24 maxlen: 24
89.125.180.0/24 maxlen: 24
89.125.186.0/24 maxlen: 24
89.125.192.0/24 maxlen: 24
89.125.208.0/24 maxlen: 24
89.125.235.0/24 maxlen: 24
89.125.236.0/24 maxlen: 24
93.90.75.0/24 maxlen: 24
93.115.173.0/24 maxlen: 24
104.143.193.0/24 maxlen: 24
104.143.202.0/24 maxlen: 24
104.143.212.0/24 maxlen: 24
104.143.213.0/24 maxlen: 24
104.143.214.0/24 maxlen: 24
104.143.215.0/24 maxlen: 24
128.0.41.0/24 maxlen: 24
153.76.200.0/24 maxlen: 24
153.76.211.0/24 maxlen: 24
162.35.225.0/24 maxlen: 24
162.35.244.0/24 maxlen: 24
167.17.32.0/24 maxlen: 24
167.17.33.0/24 maxlen: 24
167.17.35.0/24 maxlen: 24
167.17.38.0/24 maxlen: 24
167.17.39.0/24 maxlen: 24
167.17.41.0/24 maxlen: 24
167.17.46.0/24 maxlen: 24
167.17.59.0/24 maxlen: 24
167.17.60.0/24 maxlen: 24
167.17.61.0/24 maxlen: 24
188.241.137.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
212.192.7.0/24 maxlen: 24
212.192.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:e8:45:18:40:aa:4e:fe:a8:80:6e:0c:30:5e:d8:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 16 13:30:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=636634b903f2b70536b40e756b4e04ed34eabba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4f:70:ad:9b:a7:14:1b:3c:76:18:a8:13:7e:
8e:18:31:5a:34:b9:55:31:06:4d:23:a0:aa:b2:1d:
ce:e0:29:29:42:f7:17:1c:82:ac:c2:e4:51:76:0b:
68:22:e6:47:f2:6b:2d:62:84:04:1f:c0:48:43:cd:
bb:ae:59:1a:55:14:9d:19:2f:18:8c:59:7c:7c:69:
77:af:fd:33:76:84:15:33:22:46:2b:05:fc:fa:35:
ec:ff:a6:c2:d8:a6:de:8c:03:66:5a:d6:78:ed:92:
a0:b9:a8:73:36:dd:0b:a8:cb:28:bc:7a:db:4e:58:
9d:cc:4a:79:e1:06:2e:f6:f7:fe:36:f4:75:6b:c4:
a3:c9:71:f7:e5:0f:b4:d0:39:3c:1b:38:3e:3f:e7:
61:44:76:9b:d1:01:6d:42:cf:01:09:a5:5a:33:5d:
74:e6:1e:26:45:57:8b:bd:b1:cb:b3:a4:8a:8a:4f:
e1:8d:b4:44:2a:3f:34:78:70:54:2c:64:e4:89:1c:
2c:a5:07:95:ed:72:9a:8c:a6:c6:4c:5b:c2:cc:2f:
0a:91:fc:83:dc:8f:45:8f:b2:b0:fd:85:a8:38:f1:
2a:60:2b:f8:2f:2f:f3:f2:fc:69:05:c9:43:c8:54:
18:0a:1b:64:02:fe:96:19:84:ab:9d:27:8a:31:72:
92:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:66:34:B9:03:F2:B7:05:36:B4:0E:75:6B:4E:04:ED:34:EA:BB:A6
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Y2Y0uQPytwU2tA51a04E7TTqu6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.247.146.0/24
9.247.151.0/24
9.247.155.0/24
77.81.88.0/24
78.17.184.0/24
78.17.199.0/24
78.17.217.0/24
86.107.51.0/24
89.37.195.0/24
89.39.125.0/24
89.43.62.0/24
89.45.162.0/24
89.125.127.0/24
89.125.143.0/24
89.125.173.0/24
89.125.180.0/24
89.125.186.0/24
89.125.192.0/24
89.125.208.0/24
89.125.235.0-89.125.236.255
93.90.75.0/24
93.115.173.0/24
104.143.193.0/24
104.143.202.0/24
104.143.212.0/22
128.0.41.0/24
153.76.200.0/24
153.76.211.0/24
162.35.225.0/24
162.35.244.0/24
167.17.32.0/23
167.17.35.0/24
167.17.38.0/23
167.17.41.0/24
167.17.46.0/24
167.17.59.0-167.17.61.255
188.241.137.0/24
194.135.18.0/24
212.192.7.0/24
212.192.30.0/24
Signature Algorithm: sha256WithRSAEncryption
22:43:a6:e4:8f:b5:f0:a3:bd:9d:89:de:9c:3a:11:99:59:34:
eb:4c:99:50:c3:4f:99:be:51:90:94:37:4d:69:1f:1b:54:bd:
20:02:1b:ea:93:f9:c5:23:28:00:96:f1:61:a0:9c:a1:54:43:
65:06:ab:06:e1:2e:69:ed:01:b7:63:2b:12:ac:0f:b8:2f:15:
a6:87:ef:47:54:03:2f:5c:e6:1c:de:db:c6:9f:e6:0d:9e:2d:
a2:10:de:c8:54:f5:4e:0d:92:54:17:a6:37:5b:2d:0c:17:5f:
45:26:f2:7d:8e:65:7d:03:7e:5e:e8:54:5a:68:3b:77:c4:c1:
a8:63:bd:b6:1c:2e:8b:a1:3f:f7:96:af:24:5c:ec:7b:8d:42:
59:24:18:56:76:1b:83:bb:36:84:bd:bd:64:ee:7f:92:cc:91:
a6:a7:8d:b1:ca:0a:c8:46:61:35:62:5a:8d:75:ba:0c:66:fb:
44:2f:03:11:49:30:cf:29:84:db:5c:6e:0d:85:47:71:c7:15:
72:a8:ba:32:72:c2:33:e1:d8:b0:28:29:a9:28:4c:aa:e0:2e:
09:82:76:fe:c5:52:c2:78:5e:28:db:8d:09:e7:d1:fd:cd:a0:
75:a4:6d:09:01:b2:e2:2d:aa:9e:e2:b3:8f:df:e5:98:69:c6:
0d:62:dc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 05:23:20 2026 by rpki-client