Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/YnsxCl0Xh6ZLUIEYf8O-ukuou50.roa
File: YnsxCl0Xh6ZLUIEYf8O-ukuou50.roa (raw, json)
Hash identifier: bYBgooyYvyoFFtYaFXpaRE1twNqqhrGsquc0ypkKKYU=
Subject key identifier: 62:7B:31:0A:5D:17:87:A6:4B:50:81:18:7F:C3:BE:BA:4B:A8:BB:9D
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 01A18332FEB39EC99F894330C1726106FA52
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/YnsxCl0Xh6ZLUIEYf8O-ukuou50.roa
Signing time: Wed 28 Oct 2026 15:48:39 +0000
ROA not before: Wed 28 Oct 2026 15:48:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39690
IP address blocks: 86.107.160.0/24 maxlen: 24
89.35.12.0/24 maxlen: 24
93.113.65.0/24 maxlen: 24
93.113.69.0/24 maxlen: 24
93.117.130.0/24 maxlen: 24
93.119.148.0/24 maxlen: 24
93.119.200.0/24 maxlen: 24
93.119.203.0/24 maxlen: 24
93.119.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:32:fe:b3:9e:c9:9f:89:43:30:c1:72:61:06:fa:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Oct 28 15:48:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=627b310a5d1787a64b5081187fc3beba4ba8bb9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:92:0d:a0:e2:62:6f:a9:86:4a:43:6e:bf:27:
aa:48:22:c5:f1:f5:52:a4:f7:27:20:cb:ca:42:0e:
36:96:81:48:4d:5a:67:e8:a4:f4:35:19:e4:d2:61:
c7:15:21:2c:98:b8:42:f3:47:36:da:00:c9:15:e2:
9a:54:72:9f:24:f0:b6:7b:6d:c4:c7:64:d4:6d:5e:
96:5e:cd:a5:a1:9a:eb:52:d5:ab:e5:30:ba:79:64:
df:14:ca:e3:86:d8:ce:cf:a6:bf:b6:aa:e8:7a:31:
e4:ed:1a:9e:71:d6:96:ac:87:63:86:30:ef:26:f1:
cf:99:6e:04:9c:a6:e7:7b:c5:d8:f4:a9:47:57:db:
e6:e6:ea:87:67:15:e2:15:89:26:f4:a4:bc:fd:fa:
8d:2a:6e:21:8c:d6:ac:8a:43:17:b1:78:4f:ff:c1:
35:7e:d5:fb:71:aa:81:e0:55:15:0f:c9:b4:89:0c:
de:54:b2:34:78:34:bc:58:42:a2:e4:c0:29:0b:60:
a2:d0:2f:3e:61:70:1e:1d:87:c4:cf:74:0c:87:88:
17:39:e3:3c:3a:8b:32:c6:6b:5d:0b:e3:9f:9b:88:
fb:62:be:56:f4:98:fc:97:cc:0a:f6:ab:fd:12:8c:
1d:74:50:91:3b:a3:4a:d4:fc:ce:35:fa:68:67:63:
0d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7B:31:0A:5D:17:87:A6:4B:50:81:18:7F:C3:BE:BA:4B:A8:BB:9D
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/YnsxCl0Xh6ZLUIEYf8O-ukuou50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.160.0/24
89.35.12.0/24
93.113.65.0/24
93.113.69.0/24
93.117.130.0/24
93.119.148.0/24
93.119.200.0/24
93.119.203.0/24
93.119.205.0/24
Signature Algorithm: sha256WithRSAEncryption
46:f6:5a:35:4b:da:8e:96:6f:67:23:c3:e1:74:a1:18:a2:08:
e0:04:19:8c:64:d0:95:e3:fd:85:c1:1e:00:ef:6c:f0:a0:91:
dc:32:2c:09:01:a3:e8:8f:78:fd:82:46:31:c3:9e:1c:47:7d:
4b:f2:35:46:29:c6:6b:39:42:3e:d6:27:e6:7a:fc:d3:0d:17:
d7:26:c4:1a:80:b1:9b:7d:fd:a1:a2:de:2f:8c:80:2a:65:14:
5a:fb:67:20:73:42:cd:f5:95:0b:11:7e:7e:0c:cf:0f:67:55:
96:db:b3:44:96:47:74:6b:3c:f5:89:a0:ff:8e:cf:82:16:2c:
70:83:10:a1:47:44:c9:7f:ea:44:68:cf:58:b4:65:31:f7:4e:
ff:8f:93:c1:60:9b:73:02:1a:91:79:99:54:30:9b:b2:be:ce:
ba:9d:76:56:92:a1:8a:55:7d:de:31:3a:15:7e:38:2b:33:05:
80:be:5a:91:4f:b5:9b:11:0f:3f:00:2e:97:c9:59:97:62:70:
aa:d4:ce:ad:69:1d:97:33:c3:23:1c:9c:87:a1:d9:82:cc:24:
83:93:55:7a:0a:41:cf:38:a1:8e:84:e3:c5:c3:de:b5:c7:3f:
ae:85:6e:30:7f:a6:aa:ef:fb:fd:07:6a:66:d5:ae:80:97:50:
57:d0:3f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:10:07 2026 by rpki-client