Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Y8wHASs4uwjaXw93d7ZmcJAO92s.roa
File: Y8wHASs4uwjaXw93d7ZmcJAO92s.roa (raw, json)
Hash identifier: KCJ5/rSroMOOlReNhIaegplnICQUmLU8q249qtBdRcQ=
Subject key identifier: 63:CC:07:01:2B:38:BB:08:DA:5F:0F:77:77:B6:66:70:90:0E:F7:6B
Certificate issuer: /CN=25d93a8100d4b37ed3cd8bbc1a79e9f20d064a99
Certificate serial: 019F2368B16A0EF6473E6A693A516F0C780D
Authority key identifier: 25:D9:3A:81:00:D4:B3:7E:D3:CD:8B:BC:1A:79:E9:F2:0D:06:4A:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Y8wHASs4uwjaXw93d7ZmcJAO92s.roa
Signing time: Thu 02 Jul 2026 15:18:11 +0000
ROA not before: Thu 02 Jul 2026 15:18:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3333
IP address blocks: 193.0.0.0/21 maxlen: 21
193.0.10.0/23 maxlen: 23
193.0.12.0/23 maxlen: 23
193.0.18.0/23 maxlen: 23
193.0.20.0/23 maxlen: 23
193.0.22.0/23 maxlen: 23
2001:67c:2e8::/48 maxlen: 48
2a13:27c0::/29 maxlen: 48
2a13:27c0:10::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b1:6a:0e:f6:47:3e:6a:69:3a:51:6f:0c:78:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d93a8100d4b37ed3cd8bbc1a79e9f20d064a99
Validity
Not Before: Jul 2 15:18:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63cc07012b38bb08da5f0f7777b66670900ef76b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:17:44:86:ee:af:17:38:8f:c2:be:b6:6d:85:
80:08:fe:9e:e0:7e:57:58:cb:ef:c1:21:f3:1d:f1:
04:cd:80:6a:09:2d:92:22:73:47:98:e1:8b:09:8b:
59:56:d2:1d:43:22:3a:26:08:f0:4f:2a:4c:1b:86:
b1:d1:af:22:38:4c:6b:e6:7c:72:c1:38:9d:7d:78:
73:15:ed:b3:68:32:1a:de:14:23:12:7b:73:78:1a:
d2:91:36:f9:94:fc:f5:95:f3:35:1d:4c:c9:e5:4a:
10:68:b7:38:9f:70:c8:d5:0c:b4:b6:a3:f6:41:06:
9d:76:f4:04:ef:b6:55:4b:c0:ca:fa:3f:1d:c3:39:
90:18:ec:79:1d:40:76:74:5f:51:d3:65:ab:68:92:
fe:04:c6:8c:28:b2:28:d4:99:d9:40:73:31:03:7e:
b5:2d:ca:96:37:a5:d1:1e:0d:eb:0f:94:48:f4:c3:
d2:fb:72:34:7c:fb:45:b8:de:d7:1e:d9:a1:8d:c6:
e6:4d:c4:cd:15:3e:15:fe:d9:69:24:87:5b:10:6a:
5d:c1:e1:36:81:1a:68:e4:da:4f:69:f1:e2:c1:4c:
bb:e6:b3:11:bd:ac:e4:a5:ad:b0:a7:c9:2c:fd:57:
cc:38:a5:9d:3a:e0:a3:40:5b:0d:53:41:c8:fe:24:
28:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CC:07:01:2B:38:BB:08:DA:5F:0F:77:77:B6:66:70:90:0E:F7:6B
X509v3 Authority Key Identifier:
keyid:25:D9:3A:81:00:D4:B3:7E:D3:CD:8B:BC:1A:79:E9:F2:0D:06:4A:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Y8wHASs4uwjaXw93d7ZmcJAO92s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.0.0/21
193.0.10.0-193.0.13.255
193.0.18.0-193.0.23.255
IPv6:
2001:67c:2e8::/48
2a13:27c0::/29
Signature Algorithm: sha256WithRSAEncryption
9e:dc:f0:5a:3a:f0:ef:e3:ed:69:f3:92:00:fc:ed:18:94:6a:
61:c4:ce:d2:ad:46:aa:ba:5c:43:97:ce:a3:28:58:83:1e:3c:
29:0c:17:d0:23:a9:db:6a:6d:14:51:5a:17:4f:99:57:c4:ca:
8a:14:dc:c6:d6:ce:4b:ef:96:5f:eb:df:16:17:6c:72:8a:6a:
c6:2f:cd:48:c0:dc:2a:2f:16:b3:28:de:f2:c4:9d:67:0f:36:
e3:4f:a4:85:79:fe:7f:5b:46:61:88:5a:ca:f0:7b:3b:d8:73:
ab:43:3d:4c:fd:cc:d6:69:c2:1f:2e:ea:f0:8e:eb:89:f7:36:
44:17:a6:66:25:a5:25:59:da:94:83:54:e3:1a:d0:d3:2b:72:
bc:06:7b:3b:63:f2:eb:29:a6:b5:2e:ee:08:bd:4a:c8:8c:ee:
2c:bd:88:a0:05:6b:e9:b7:7d:1a:58:15:54:09:bc:e2:9d:d3:
63:64:3d:0d:8d:26:4a:ed:c8:ae:45:a1:be:72:c7:f3:e7:7d:
06:36:8d:58:19:b4:a5:3d:90:88:93:a4:ad:f7:f6:b5:24:27:
ea:9f:dd:3d:e9:e2:ae:7a:3a:f3:74:31:ba:f5:91:f5:5a:66:
6f:6b:a0:09:25:fb:0d:35:48:63:83:c2:91:57:e5:9b:52:c7:
03:a2:4d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:59:00 2026 by rpki-client