Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/YbMXs-qqnZGcm28PtMoFbQ9Fiyc.roa
File: YbMXs-qqnZGcm28PtMoFbQ9Fiyc.roa (raw, json)
Hash identifier: +dXezcIxEO83p8ts3tcgQGxFH2MyYEbFUXR/v2ogXqc=
Subject key identifier: 61:B3:17:B3:EA:AA:9D:91:9C:9B:6F:0F:B4:CA:05:6D:0F:45:8B:27
Certificate issuer: /CN=2347aaab2206c08128f543730064a145a3effa14
Certificate serial: 01A182146FE7BA150758D29EE2BB2A5621EE
Authority key identifier: 23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/YbMXs-qqnZGcm28PtMoFbQ9Fiyc.roa
Signing time: Wed 28 Oct 2026 10:35:39 +0000
ROA not before: Wed 28 Oct 2026 10:35:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8434
IP address blocks: 31.211.192.0/18 maxlen: 18
37.46.160.0/19 maxlen: 19
37.247.0.0/19 maxlen: 19
46.194.0.0/15 maxlen: 15
62.13.0.0/17 maxlen: 17
62.65.64.0/18 maxlen: 18
62.119.0.0/16 maxlen: 16
62.127.0.0/16 maxlen: 16
78.82.0.0/16 maxlen: 16
79.102.0.0/16 maxlen: 16
80.68.96.0/20 maxlen: 20
81.26.224.0/19 maxlen: 19
82.182.0.0/15 maxlen: 15
83.226.0.0/15 maxlen: 15
84.55.64.0/18 maxlen: 18
84.216.0.0/14 maxlen: 14
84.246.88.0/21 maxlen: 21
85.224.0.0/13 maxlen: 13
89.253.64.0/18 maxlen: 18
92.32.0.0/14 maxlen: 14
92.244.0.0/19 maxlen: 19
94.137.96.0/19 maxlen: 19
94.234.0.0/16 maxlen: 16
109.104.0.0/19 maxlen: 19
178.28.0.0/14 maxlen: 14
178.78.192.0/18 maxlen: 18
185.86.100.0/22 maxlen: 22
195.43.192.0/18 maxlen: 18
195.54.96.0/19 maxlen: 19
195.58.96.0/19 maxlen: 19
195.66.32.0/19 maxlen: 19
212.73.0.0/19 maxlen: 19
212.73.160.0/19 maxlen: 19
212.75.64.0/19 maxlen: 19
212.105.0.0/17 maxlen: 17
212.107.128.0/19 maxlen: 19
213.112.0.0/14 maxlen: 14
213.150.128.0/19 maxlen: 19
213.163.128.0/19 maxlen: 19
213.204.128.0/18 maxlen: 18
213.214.192.0/18 maxlen: 18
213.238.192.0/18 maxlen: 18
213.242.128.0/18 maxlen: 18
217.174.64.0/19 maxlen: 19
2a01:3b8::/32 maxlen: 32
2a02:1400::/26 maxlen: 26
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:14:6f:e7:ba:15:07:58:d2:9e:e2:bb:2a:56:21:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2347aaab2206c08128f543730064a145a3effa14
Validity
Not Before: Oct 28 10:35:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61b317b3eaaa9d919c9b6f0fb4ca056d0f458b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e2:3e:53:d6:ae:8f:49:b2:a5:a2:e6:04:d4:
b3:e7:d0:1d:df:2e:d1:c5:f0:70:17:8c:4c:c9:b2:
e6:44:b2:b9:25:39:29:7d:e1:c0:52:96:4f:20:d2:
3d:31:d9:f1:c0:d5:e5:da:47:77:88:b1:86:0f:44:
a1:5b:30:81:40:54:85:26:2d:20:74:0c:09:86:9f:
88:85:25:22:de:e1:4d:d5:a5:20:24:df:5d:08:f7:
2d:33:76:79:19:54:95:cb:61:9e:f0:6b:ee:ae:ac:
a2:59:e9:7a:84:23:19:6f:68:47:cd:52:cc:04:f4:
2f:cb:81:38:36:39:68:1c:6a:fc:c2:cc:9b:66:cb:
e6:80:c4:c8:6c:79:51:30:59:60:8f:95:1a:54:91:
8d:29:9c:7e:e2:5f:a0:0d:11:c2:fa:84:09:0c:b6:
4c:3c:9c:af:e9:20:f5:64:40:e4:af:fd:65:43:49:
03:68:93:65:d0:4e:11:74:31:fc:57:18:d3:0a:3e:
2d:48:7d:fa:84:c8:20:8a:e1:3e:11:54:96:4c:d9:
fb:a7:3e:78:07:60:84:ab:fc:99:8f:15:3d:7d:1a:
32:04:6e:06:6b:1a:0f:5e:25:fc:4b:22:b9:1f:15:
e4:c5:f7:23:56:ef:55:69:68:27:21:da:03:4f:ef:
8c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B3:17:B3:EA:AA:9D:91:9C:9B:6F:0F:B4:CA:05:6D:0F:45:8B:27
X509v3 Authority Key Identifier:
keyid:23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/YbMXs-qqnZGcm28PtMoFbQ9Fiyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.211.192.0/18
37.46.160.0/19
37.247.0.0/19
46.194.0.0/15
62.13.0.0/17
62.65.64.0/18
62.119.0.0/16
62.127.0.0/16
78.82.0.0/16
79.102.0.0/16
80.68.96.0/20
81.26.224.0/19
82.182.0.0/15
83.226.0.0/15
84.55.64.0/18
84.216.0.0/14
84.246.88.0/21
85.224.0.0/13
89.253.64.0/18
92.32.0.0/14
92.244.0.0/19
94.137.96.0/19
94.234.0.0/16
109.104.0.0/19
178.28.0.0/14
178.78.192.0/18
185.86.100.0/22
195.43.192.0/18
195.54.96.0/19
195.58.96.0/19
195.66.32.0/19
212.73.0.0/19
212.73.160.0/19
212.75.64.0/19
212.105.0.0/17
212.107.128.0/19
213.112.0.0/14
213.150.128.0/19
213.163.128.0/19
213.204.128.0/18
213.214.192.0/18
213.238.192.0/18
213.242.128.0/18
217.174.64.0/19
IPv6:
2a01:3b8::/32
2a02:1400::/26
Signature Algorithm: sha256WithRSAEncryption
78:1d:aa:96:b1:6a:ca:1f:ad:58:11:52:29:32:9d:45:7d:f7:
9c:c1:67:70:ee:d2:ac:f4:5c:be:fe:24:8b:71:88:ef:93:85:
2e:eb:be:65:1b:c7:e4:79:ec:2c:4f:db:91:d8:29:51:c6:7d:
42:bc:8a:2a:53:1a:a9:b9:60:27:b2:80:57:2b:a7:f5:66:b6:
39:a4:84:de:db:45:b8:d6:b6:54:16:e9:95:c1:93:9a:d6:5b:
1b:89:91:93:7c:c8:8b:31:a5:ea:8f:6d:f1:f2:73:9e:7e:38:
f7:2d:f4:fb:5e:7b:56:38:1a:29:88:f5:ad:84:ef:54:e5:cd:
44:a7:47:aa:01:1b:b0:33:44:0e:2d:0e:d9:ca:4e:92:cb:f6:
d2:7c:df:01:7d:e6:b6:70:06:a6:18:1d:56:51:ab:c0:cb:93:
6c:0b:56:40:04:bf:84:73:a4:f5:60:af:a2:d1:93:52:58:9e:
54:bf:f2:39:60:a1:c7:12:62:68:d5:ce:74:bd:39:c7:ff:04:
77:db:43:b8:0a:cd:78:ff:f2:95:99:f2:e5:8f:ba:d2:1d:73:
61:1a:a5:f6:de:16:2a:df:99:ad:1a:48:60:cb:09:c1:84:2b:
7d:19:42:38:22:cb:e0:14:3f:63:bd:ed:b8:95:18:33:67:fa:
6f:45:9c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 21:32:00 2026 by rpki-client