Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/c95266-25ca-454c-ac24-4f781c8aef0f/1/yMFvzhfsdL3zsyZFIg2nxbqAoMk.roa
File: yMFvzhfsdL3zsyZFIg2nxbqAoMk.roa (raw, json)
Hash identifier: J3OfduN5mDoSAg9rSFc6lJX37frsYCfMVRHIEgcP3UA=
Subject key identifier: C8:C1:6F:CE:17:EC:74:BD:F3:B3:26:45:22:0D:A7:C5:BA:80:A0:C9
Certificate issuer: /CN=4ba1b3e9db4ee5263d0ab1ba7aeffe7c5f5d6aec
Certificate serial: 01A1101359DD61516EF6ED2187B243D06873
Authority key identifier: 4B:A1:B3:E9:DB:4E:E5:26:3D:0A:B1:BA:7A:EF:FE:7C:5F:5D:6A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6Gz6dtO5SY9CrG6eu_-fF9dauw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c95266-25ca-454c-ac24-4f781c8aef0f/1/yMFvzhfsdL3zsyZFIg2nxbqAoMk.roa
Signing time: Tue 06 Oct 2026 07:17:45 +0000
ROA not before: Tue 06 Oct 2026 07:17:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62240
IP address blocks: 136.176.201.0/24 maxlen: 24
136.176.209.0/24 maxlen: 24
136.176.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c95266-25ca-454c-ac24-4f781c8aef0f/1/S6Gz6dtO5SY9CrG6eu_-fF9dauw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/c95266-25ca-454c-ac24-4f781c8aef0f/1/S6Gz6dtO5SY9CrG6eu_-fF9dauw.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6Gz6dtO5SY9CrG6eu_-fF9dauw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 15:57:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:13:59:dd:61:51:6e:f6:ed:21:87:b2:43:d0:68:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba1b3e9db4ee5263d0ab1ba7aeffe7c5f5d6aec
Validity
Not Before: Oct 6 07:17:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8c16fce17ec74bdf3b32645220da7c5ba80a0c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d9:3a:d7:06:ae:8f:fe:49:84:71:7a:67:fa:
e2:ed:d0:2a:61:1c:b6:ad:c3:29:20:2f:23:87:b4:
44:6b:f2:da:05:58:51:e3:55:2b:0c:d9:bc:3a:18:
56:ba:97:07:df:a3:72:86:ac:96:94:ef:4e:94:c1:
d0:b8:f7:9b:d3:32:77:a2:ae:75:43:77:af:74:7b:
53:c2:f6:a1:fe:39:6a:4a:c7:52:5e:c9:c1:76:b7:
dc:2f:d4:dd:10:ee:71:9d:53:7e:4b:94:14:5d:77:
91:3c:8d:a8:e8:e0:7a:6b:8e:5e:bc:e7:22:5d:a8:
a3:c7:10:9b:11:d9:b8:13:3d:f0:d0:59:2b:af:cf:
e7:24:f8:4d:56:3b:01:39:f9:19:82:3d:83:65:79:
a7:bc:f5:34:23:dc:2e:b2:ed:88:06:c9:60:7c:22:
f1:6e:f0:b7:a6:0f:d2:99:e7:bb:ff:3a:04:aa:09:
52:cd:44:4d:b3:3f:5e:16:6d:e1:00:30:e8:49:a9:
68:23:32:f1:d4:74:76:07:f9:0f:d5:7d:96:f3:a7:
56:e1:82:01:a4:f7:db:c9:d2:42:0e:47:76:79:cb:
15:06:bf:a7:81:7d:b2:2d:fc:5b:74:f7:ac:6d:c5:
cb:6a:6c:40:a7:60:14:87:96:a7:5b:b6:89:83:07:
47:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C1:6F:CE:17:EC:74:BD:F3:B3:26:45:22:0D:A7:C5:BA:80:A0:C9
X509v3 Authority Key Identifier:
keyid:4B:A1:B3:E9:DB:4E:E5:26:3D:0A:B1:BA:7A:EF:FE:7C:5F:5D:6A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6Gz6dtO5SY9CrG6eu_-fF9dauw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c95266-25ca-454c-ac24-4f781c8aef0f/1/yMFvzhfsdL3zsyZFIg2nxbqAoMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c95266-25ca-454c-ac24-4f781c8aef0f/1/S6Gz6dtO5SY9CrG6eu_-fF9dauw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.176.201.0/24
136.176.209.0/24
136.176.217.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:3c:2e:a5:ab:dd:6e:83:d8:ad:81:7d:37:80:23:9f:d7:61:
84:a2:a2:1c:9d:aa:8f:94:41:46:5c:62:01:a0:ee:0b:5a:e5:
10:7f:1c:90:73:4c:e1:9f:24:b8:52:92:36:53:2a:e9:0b:b4:
55:49:dc:10:78:cc:6a:fe:3d:94:7e:d1:d8:02:94:f8:16:42:
ec:c2:3c:e3:3e:7a:23:ed:d8:05:17:37:49:b4:b4:7b:c5:37:
e9:61:ef:8f:35:e4:32:2e:14:9b:e9:12:c3:89:d8:f9:cc:11:
ef:2f:09:49:3b:02:86:40:c6:e2:f6:58:2e:50:65:bf:73:d5:
2b:2e:01:4e:64:59:fa:fd:8c:9f:08:22:5b:ab:75:bb:56:59:
a2:ce:9c:ce:fd:a4:60:b0:dc:0c:34:84:c0:e1:f9:00:72:7f:
79:71:63:af:a7:3b:c1:ae:a4:78:e3:20:d0:23:3e:1c:5b:20:
61:ef:8a:8e:04:db:f0:1d:09:fc:27:a7:be:47:0f:68:d5:9f:
0e:0a:b4:1c:db:a8:bc:d6:a3:b1:8b:3d:bf:15:9f:77:92:4d:
4d:55:98:fb:03:ed:7d:b4:e2:5d:55:09:6e:36:58:de:20:23:
02:08:6c:5c:1f:5c:dc:77:b5:a2:0c:11:d7:77:5c:56:ad:48:
a3:34:1f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 01:54:33 2026 by rpki-client