Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/yAVvKqN3jAD0Ax1X4G3gA8ptBVQ.roa
File: yAVvKqN3jAD0Ax1X4G3gA8ptBVQ.roa (raw, json)
Hash identifier: q7e8wqbSpEQ0vDs9f5Rj5raLp3P7hjyscG/ABKTRfMY=
Subject key identifier: C8:05:6F:2A:A3:77:8C:00:F4:03:1D:57:E0:6D:E0:03:CA:6D:05:54
Certificate issuer: /CN=0e831fd70c6bd37a2a75d7a0eac031c92da8e185
Certificate serial: 019EFDFDE10B6393AA513048ABB92A780257
Authority key identifier: 0E:83:1F:D7:0C:6B:D3:7A:2A:75:D7:A0:EA:C0:31:C9:2D:A8:E1:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DoMf1wxr03oqddeg6sAxyS2o4YU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/yAVvKqN3jAD0Ax1X4G3gA8ptBVQ.roa
Signing time: Thu 25 Jun 2026 08:55:34 +0000
ROA not before: Thu 25 Jun 2026 08:55:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212091
IP address blocks: 45.147.85.0/24 maxlen: 24
45.147.86.0/24 maxlen: 24
2a10:b580::/48 maxlen: 48
2a10:b580:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/DoMf1wxr03oqddeg6sAxyS2o4YU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/DoMf1wxr03oqddeg6sAxyS2o4YU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DoMf1wxr03oqddeg6sAxyS2o4YU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fd:fd:e1:0b:63:93:aa:51:30:48:ab:b9:2a:78:02:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e831fd70c6bd37a2a75d7a0eac031c92da8e185
Validity
Not Before: Jun 25 08:55:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8056f2aa3778c00f4031d57e06de003ca6d0554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b5:7d:a1:d8:57:1d:45:2c:4a:8c:41:fa:92:
71:ba:08:12:a2:4f:74:12:ee:42:71:d4:75:2a:bc:
a7:4e:4b:b6:6f:21:38:1a:74:ee:ee:b6:c3:c2:d1:
85:14:de:5f:40:3a:7e:f6:49:ff:c0:ad:bb:b8:2b:
f2:66:73:15:4f:73:de:5a:d0:92:b8:04:bc:4a:01:
4e:fa:b9:c7:a3:bb:cb:9d:8d:ef:ad:8b:11:2a:72:
0b:c9:f1:48:aa:d5:27:be:f3:6c:e0:64:35:b3:36:
eb:35:c7:dd:f7:5a:04:41:9b:48:99:50:24:f7:0b:
8c:0d:fb:0e:b7:22:10:90:45:2c:70:16:4c:19:5b:
4e:26:fb:44:31:40:c4:07:cd:69:0d:ed:a9:e8:c2:
75:d1:36:fa:72:63:90:aa:a4:13:97:12:94:7b:ab:
3a:3b:2c:35:bd:37:1a:49:d1:43:31:f2:0c:a8:36:
ba:46:0f:e2:cf:0b:2a:8d:fb:ce:4d:57:c9:f9:bc:
7d:95:d7:05:fa:e7:18:7d:03:c0:7b:9b:16:8e:39:
b9:41:f2:a7:a8:84:72:d8:dd:51:16:78:73:89:0e:
0e:70:c6:0a:b8:e0:13:61:23:6b:85:26:c0:8b:6f:
fa:9c:42:b0:0d:44:ff:ef:d0:a2:f9:ff:77:ad:a9:
77:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:05:6F:2A:A3:77:8C:00:F4:03:1D:57:E0:6D:E0:03:CA:6D:05:54
X509v3 Authority Key Identifier:
keyid:0E:83:1F:D7:0C:6B:D3:7A:2A:75:D7:A0:EA:C0:31:C9:2D:A8:E1:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DoMf1wxr03oqddeg6sAxyS2o4YU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/yAVvKqN3jAD0Ax1X4G3gA8ptBVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/DoMf1wxr03oqddeg6sAxyS2o4YU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.85.0-45.147.86.255
IPv6:
2a10:b580::/47
Signature Algorithm: sha256WithRSAEncryption
2e:44:63:89:86:59:8c:ca:64:f6:4a:66:f6:4a:15:5d:2f:d6:
bb:a1:e6:eb:e6:6c:b1:2d:60:0c:5e:84:01:2a:14:b4:90:7f:
99:77:d3:5a:66:34:54:d4:d9:48:3b:b3:3c:67:ee:bd:5a:70:
81:66:a2:05:70:6c:3b:db:82:be:fa:07:ec:1a:89:93:95:12:
e3:e6:c2:20:3a:8c:e1:90:32:ba:3a:a1:c9:13:5e:83:0e:db:
39:bf:1a:32:ae:e8:22:a3:7c:cc:14:a8:ae:be:4b:34:40:dc:
48:3a:4c:cf:ec:cf:b0:b9:30:cc:a3:e1:91:52:2f:0c:e0:01:
a3:b5:ba:8d:eb:24:7e:97:34:a6:ec:e8:c4:74:10:02:b3:6c:
a0:ac:5e:64:18:02:76:3e:68:63:8a:e4:49:12:ea:56:b8:c8:
4f:45:88:4c:70:bf:63:c1:41:e2:63:f1:50:5a:d1:1b:53:19:
1e:50:9a:db:84:99:ff:4c:1f:3a:85:2f:17:4c:a6:f6:e3:f4:
68:27:45:06:1d:b7:ff:4e:78:9b:f0:a3:85:98:51:6c:4d:95:
a3:b7:62:ca:7b:82:44:5f:f2:91:26:3a:5b:ab:be:82:ec:d1:
3e:13:1c:d7:c1:7c:96:d1:7d:aa:22:d9:05:4f:94:92:e6:ba:
d3:13:92:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:43:49 2026 by rpki-client