Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/yeY5AZEc-7vHR4MMxjSRHrJKiq8.roa
File: yeY5AZEc-7vHR4MMxjSRHrJKiq8.roa (raw, json)
Hash identifier: EDUBfQI+6/FNbtkxVmUdESGv/HU1uqCrqvE17u5xwN4=
Subject key identifier: C9:E6:39:01:91:1C:FB:BB:C7:47:83:0C:C6:34:91:1E:B2:4A:8A:AF
Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial: 019EF4483DA7B2E86F97B14B2FF6E25B0461
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/yeY5AZEc-7vHR4MMxjSRHrJKiq8.roa
Signing time: Tue 23 Jun 2026 11:40:35 +0000
ROA not before: Tue 23 Jun 2026 11:40:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197328
IP address blocks: 5.255.57.0/24 maxlen: 24
23.252.75.0/24 maxlen: 24
107.150.171.0/24 maxlen: 24
167.160.11.0/24 maxlen: 24
185.4.227.0/24 maxlen: 24
185.150.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f4:48:3d:a7:b2:e8:6f:97:b1:4b:2f:f6:e2:5b:04:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Validity
Not Before: Jun 23 11:40:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c9e63901911cfbbbc747830cc634911eb24a8aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2d:df:90:f2:8b:69:98:47:c3:78:d8:67:00:
27:c0:9b:55:a3:1e:da:99:4b:ee:1d:2b:b9:c8:f5:
05:c8:4e:7a:41:6e:67:8d:49:54:29:e8:13:86:5f:
b9:4a:00:6e:d3:03:a8:77:4c:7f:98:d6:bd:5f:65:
3d:49:5b:ea:f8:4d:9c:6b:0c:c0:1e:a5:62:95:2c:
56:62:17:6b:fa:39:28:f0:5e:a2:89:1f:d5:12:b9:
82:45:47:b4:5a:f7:15:ac:ca:7e:1c:e0:5a:83:82:
88:83:ee:c4:27:fe:03:81:aa:19:98:25:1d:da:02:
0a:85:de:2b:54:99:61:85:a2:aa:76:cb:07:92:89:
5c:14:07:33:7e:78:07:30:0d:71:56:88:d1:5e:d8:
e1:32:12:e5:6a:2a:68:56:74:ba:e8:bc:c4:a5:27:
c7:ef:75:cd:d5:65:b5:c1:f7:90:6c:4d:2e:ad:ff:
41:46:8e:23:d3:f4:2b:41:93:5e:37:03:6b:4f:28:
0c:24:e1:59:fb:70:31:62:dd:96:bc:9b:62:9b:d0:
53:aa:22:94:42:c0:82:d3:af:ba:e0:4b:11:4f:c8:
96:98:b7:88:30:32:de:74:2a:b9:61:ce:be:bd:16:
7d:be:75:e3:ab:23:61:a1:4e:e0:3d:8c:75:e8:1a:
31:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E6:39:01:91:1C:FB:BB:C7:47:83:0C:C6:34:91:1E:B2:4A:8A:AF
X509v3 Authority Key Identifier:
keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/yeY5AZEc-7vHR4MMxjSRHrJKiq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.255.57.0/24
23.252.75.0/24
107.150.171.0/24
167.160.11.0/24
185.4.227.0/24
185.150.2.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:ca:53:03:26:d7:ce:df:64:ae:ca:18:b6:d8:c6:0d:ab:08:
07:25:33:bc:d7:07:29:b0:4b:df:ec:ba:36:61:01:dd:d6:6a:
0d:29:ee:c7:d7:f1:70:9d:0c:97:c4:c3:c9:18:5c:28:e8:ad:
a7:1d:c6:ef:dc:81:d4:5d:10:2e:9e:a8:f9:ea:96:a8:a5:74:
38:9d:d1:2a:cf:17:d6:e1:80:22:e8:99:97:49:ff:94:01:94:
07:6f:7f:63:14:23:e2:58:25:fd:87:99:68:27:a6:b3:9c:79:
43:5e:b1:5f:50:f3:bb:d7:12:f9:c3:0a:cf:3e:99:b1:cf:d4:
13:b6:43:81:bb:0a:46:01:3a:c5:bf:01:29:12:8b:88:88:f6:
6b:3a:65:ce:ec:10:d8:e2:8b:89:5b:45:28:29:ad:c1:34:b8:
d3:10:9f:fc:ea:06:f1:c2:3d:0f:12:90:f9:7c:c3:bc:a4:b3:
4b:d8:a1:6d:b3:b0:d9:37:7d:fc:6c:1b:80:dd:c1:99:31:5f:
24:2d:7d:d3:6d:5b:58:6c:bb:8b:b7:74:05:52:b3:df:e4:fb:
5d:13:65:36:c3:e4:e1:be:f0:14:09:c0:d8:fa:05:0b:f1:0e:
d9:c4:08:7b:76:20:4f:12:d7:e0:c4:46:b1:5e:20:3e:b0:ae:
2c:fc:49:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 00:30:34 2026 by rpki-client