Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/yhFswMgDJHmhlIm429oSJ_OQoWI.roa
File: yhFswMgDJHmhlIm429oSJ_OQoWI.roa (raw, json)
Hash identifier: KRcvqiPdOjUIFtLZxuuPSlVsrmE+tD3aWJGh8K7TF8I=
Subject key identifier: CA:11:6C:C0:C8:03:24:79:A1:94:89:B8:DB:DA:12:27:F3:90:A1:62
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 01A17E9D61B97CCF6E41CC26D2C3120445C9
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/yhFswMgDJHmhlIm429oSJ_OQoWI.roa
Signing time: Tue 27 Oct 2026 18:26:45 +0000
ROA not before: Tue 27 Oct 2026 18:26:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219095
IP address blocks: 132.243.66.0/24 maxlen: 24
132.243.67.0/24 maxlen: 24
212.87.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:9d:61:b9:7c:cf:6e:41:cc:26:d2:c3:12:04:45:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Oct 27 18:26:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca116cc0c8032479a19489b8dbda1227f390a162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ff:e8:cb:1d:fb:0a:87:26:cc:cf:60:ba:7e:
72:89:7c:a5:a7:97:a6:64:67:45:97:bb:93:f9:f5:
90:e7:2b:ba:b6:ee:ae:3b:8a:f9:11:e9:54:b8:79:
3f:6f:50:59:c0:0d:db:49:40:98:4f:32:29:a6:d8:
57:3d:b0:8d:fa:c7:8b:d1:7c:4e:00:d1:f6:2f:19:
b7:bf:ec:73:f2:ef:96:46:7d:2e:7f:b3:a8:8c:dd:
55:4c:13:6a:a1:2a:5e:63:20:ae:c2:21:8c:10:1b:
b2:0b:98:09:55:4e:97:c0:a0:fa:d6:ad:bc:cc:d1:
04:b6:c0:c1:34:e9:fc:24:b6:15:93:7e:2e:48:bd:
b1:53:68:d1:81:b2:f4:17:c7:f4:e0:01:5c:55:36:
89:89:1a:eb:c3:56:b6:e7:00:3f:5e:39:6b:f6:1c:
96:30:6f:49:dd:59:3f:f4:77:73:e7:bc:a3:a7:53:
2a:df:66:9e:ec:03:5a:ae:0b:38:40:91:94:58:79:
d9:07:63:5c:53:f8:3f:86:a4:fd:48:51:0d:7b:d2:
10:66:00:f5:a2:1d:0c:b7:e9:22:9c:cc:c3:a4:1e:
30:da:70:39:81:06:8b:b3:1c:11:cf:8c:59:6f:69:
05:9e:f1:75:31:cd:02:bc:2e:ca:05:de:bc:65:64:
d8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:11:6C:C0:C8:03:24:79:A1:94:89:B8:DB:DA:12:27:F3:90:A1:62
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/yhFswMgDJHmhlIm429oSJ_OQoWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.243.66.0/23
212.87.190.0/24
Signature Algorithm: sha256WithRSAEncryption
79:cf:9e:64:a9:08:d7:45:af:f2:ac:54:d1:34:d7:71:f0:16:
cb:39:21:b5:28:cf:e8:09:7f:1e:ba:59:a6:b7:11:27:f3:f4:
8e:bb:8e:b5:2e:47:1d:ec:2e:74:39:9a:11:ea:cd:6f:28:6d:
81:15:82:41:27:8d:2d:b7:2e:cd:36:d6:36:85:1d:13:c2:50:
5d:66:3c:55:5d:55:34:9f:b2:b3:d5:21:9e:33:ae:05:cb:7e:
da:58:0c:50:fe:22:7c:0c:b5:b9:f9:2f:e5:86:a8:1b:ed:a0:
bd:52:ba:a8:dd:06:6f:7c:a1:4e:d8:40:37:4b:10:19:7c:1b:
57:38:dc:ea:80:b1:43:8f:45:f7:e1:06:c0:68:ff:ff:c1:98:
0c:d1:64:46:89:28:c6:4d:d9:02:45:1e:65:98:13:58:7a:18:
5f:87:bc:80:f8:4a:38:9e:07:59:cc:db:4f:51:b6:b0:45:09:
6c:40:09:1b:43:13:1e:ea:ea:34:ae:be:62:78:25:3d:10:7c:
ff:e3:cf:78:80:8b:ce:83:32:70:22:b6:14:65:2b:74:0e:3c:
78:9d:83:05:13:34:0b:dd:a4:7b:dc:7c:1d:1c:fe:1d:e8:44:
7f:48:e4:d1:03:c5:06:ed:cc:46:23:41:bf:20:81:81:a3:c6:
0b:ca:46:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 19:38:22 2026 by rpki-client