Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/DYBh63uGiQF8Zb0DY6V3FWnzZsA.roa
File: DYBh63uGiQF8Zb0DY6V3FWnzZsA.roa (raw, json)
Hash identifier: GPcPHlGT1cM3//wFdxafu8jpds/WwXi8baI3BDf4bMA=
Subject key identifier: 0D:80:61:EB:7B:86:89:01:7C:65:BD:03:63:A5:77:15:69:F3:66:C0
Certificate issuer: /CN=aef1eefaa757d38eb104fa4cba4d962b72e52b52
Certificate serial: 019D4884F31F7AFBFA1432CD3C9E36CE7951
Authority key identifier: AE:F1:EE:FA:A7:57:D3:8E:B1:04:FA:4C:BA:4D:96:2B:72:E5:2B:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rvHu-qdX046xBPpMuk2WK3LlK1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/DYBh63uGiQF8Zb0DY6V3FWnzZsA.roa
Signing time: Wed 01 Apr 2026 10:09:25 +0000
ROA not before: Wed 01 Apr 2026 10:09:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29222
IP address blocks: 37.156.40.0/21 maxlen: 24
45.157.188.0/22 maxlen: 24
83.166.128.0/19 maxlen: 24
83.228.192.0/18 maxlen: 24
84.16.64.0/19 maxlen: 24
84.234.16.0/20 maxlen: 24
89.47.48.0/22 maxlen: 24
91.214.188.0/22 maxlen: 24
93.88.240.0/20 maxlen: 24
128.65.192.0/21 maxlen: 24
179.237.64.0/18 maxlen: 24
185.74.68.0/22 maxlen: 24
185.125.24.0/22 maxlen: 24
185.143.100.0/22 maxlen: 24
185.172.100.0/22 maxlen: 24
185.176.224.0/22 maxlen: 24
185.177.60.0/22 maxlen: 24
185.181.160.0/22 maxlen: 24
188.213.128.0/22 maxlen: 24
193.108.52.0/22 maxlen: 24
193.111.233.0/24 maxlen: 24
193.128.7.0/24 maxlen: 24
193.134.93.0/24 maxlen: 24
193.134.250.0/24 maxlen: 24
195.15.192.0/18 maxlen: 24
2001:1600::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/rvHu-qdX046xBPpMuk2WK3LlK1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Apr 2026 01:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:48:84:f3:1f:7a:fb:fa:14:32:cd:3c:9e:36:ce:79:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aef1eefaa757d38eb104fa4cba4d962b72e52b52
Validity
Not Before: Apr 1 10:09:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d8061eb7b8689017c65bd0363a5771569f366c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d8:8b:80:b6:d3:16:b0:57:e9:7a:29:57:3c:
7b:84:c7:17:7c:a8:7c:f5:d4:af:5f:a1:c3:41:a7:
5e:d0:bd:11:13:12:6c:ad:b4:5e:4a:5a:4f:1d:ce:
1a:ee:0b:f8:24:c8:cf:da:41:ef:c9:35:52:10:5f:
a7:b6:59:10:17:26:de:01:c7:55:5c:9d:92:23:9e:
0c:39:b1:91:14:fe:a9:ba:75:ab:a6:4e:db:81:6d:
21:27:77:c8:d3:7d:41:41:8f:ad:19:f4:2c:8e:0e:
90:b4:45:db:50:fd:d4:19:bc:69:a2:04:33:11:57:
31:ea:ff:d5:17:ee:c7:6d:f9:95:4f:d2:f3:62:4b:
61:71:eb:8d:73:e2:80:6e:e5:67:46:e8:18:22:9f:
b9:56:8a:7d:65:61:05:4a:9f:ae:5d:2c:c8:b3:d3:
29:4e:d7:5c:57:24:77:31:a1:0d:54:19:5e:94:ae:
8f:83:ea:8e:fb:f0:dd:39:52:4e:e1:b7:4a:d6:f8:
3f:59:98:46:44:f8:da:01:e7:b6:9f:6d:b8:d0:c7:
45:70:21:6c:f8:21:03:05:70:a2:aa:a2:c2:bd:d3:
2e:19:75:b1:77:59:00:c4:1c:7c:7e:d0:3c:b4:c2:
e7:dd:4a:28:0f:a8:7e:87:00:7c:02:89:9e:07:ae:
5e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:80:61:EB:7B:86:89:01:7C:65:BD:03:63:A5:77:15:69:F3:66:C0
X509v3 Authority Key Identifier:
keyid:AE:F1:EE:FA:A7:57:D3:8E:B1:04:FA:4C:BA:4D:96:2B:72:E5:2B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvHu-qdX046xBPpMuk2WK3LlK1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/DYBh63uGiQF8Zb0DY6V3FWnzZsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.40.0/21
45.157.188.0/22
83.166.128.0/19
83.228.192.0/18
84.16.64.0/19
84.234.16.0/20
89.47.48.0/22
91.214.188.0/22
93.88.240.0/20
128.65.192.0/21
179.237.64.0/18
185.74.68.0/22
185.125.24.0/22
185.143.100.0/22
185.172.100.0/22
185.176.224.0/22
185.177.60.0/22
185.181.160.0/22
188.213.128.0/22
193.108.52.0/22
193.111.233.0/24
193.128.7.0/24
193.134.93.0/24
193.134.250.0/24
195.15.192.0/18
IPv6:
2001:1600::/29
Signature Algorithm: sha256WithRSAEncryption
48:cd:d1:39:19:62:c9:9d:3c:3c:b3:98:31:91:6b:b6:9d:59:
01:55:6e:03:af:84:e4:7d:f9:74:4c:68:12:f7:0b:40:9b:b9:
52:e2:11:02:e2:9d:0d:a3:2d:3d:3f:08:92:f3:1e:b8:dd:59:
da:57:b4:85:be:d3:c3:46:13:6d:8d:e2:1d:82:43:fd:22:af:
f7:6e:44:40:05:c6:8d:6e:55:0a:a5:b5:11:2d:b1:22:11:ee:
6a:46:d1:ef:af:4d:30:41:07:60:7e:10:d6:9a:48:30:b6:c6:
f5:8b:00:5d:c1:70:48:df:c1:c9:c2:80:6f:86:2e:00:12:85:
1c:51:89:41:5d:e2:98:c0:ad:ee:73:4d:bf:c0:6b:c3:c7:14:
9d:3c:ef:4f:16:46:73:a3:36:cb:f8:f4:d9:0f:6d:19:56:c8:
36:54:4f:f6:ca:c9:73:24:e5:51:58:42:7a:0f:0b:9e:13:6a:
30:3a:81:f0:62:2d:8a:12:cc:3d:ba:03:6a:2e:75:b6:58:44:
06:43:21:37:6c:52:54:80:92:ee:3f:ed:10:3d:1f:71:47:f1:
be:e7:2f:d3:b5:5c:dd:a0:d9:bb:43:19:63:02:e7:e1:86:41:
a4:84:dc:f1:84:60:69:d0:3b:e4:b6:a7:d4:4e:98:da:0f:8c:
ee:68:02:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 3 09:16:32 2026 by rpki-client