Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/yui3OirtbU9wX3qbBKGwQyqzh9Y.roa
File: yui3OirtbU9wX3qbBKGwQyqzh9Y.roa (raw, json)
Hash identifier: fqr46XlOsOuVijyWcom8iBpcJwxvqaI+d67FIdr/YMM=
Subject key identifier: CA:E8:B7:3A:2A:ED:6D:4F:70:5F:7A:9B:04:A1:B0:43:2A:B3:87:D6
Certificate issuer: /CN=b6380000fb7e45f8976261a698d418f08e8d67c7
Certificate serial: 019E357A21DBEB0F24AD51B66C485CF25373
Authority key identifier: B6:38:00:00:FB:7E:45:F8:97:62:61:A6:98:D4:18:F0:8E:8D:67:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/yui3OirtbU9wX3qbBKGwQyqzh9Y.roa
Signing time: Sun 17 May 2026 10:27:36 +0000
ROA not before: Sun 17 May 2026 10:27:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50517
IP address blocks: 212.57.192.0/19 maxlen: 19
212.57.192.0/24 maxlen: 24
212.57.193.0/24 maxlen: 24
212.57.194.0/24 maxlen: 24
212.57.195.0/24 maxlen: 24
212.57.196.0/24 maxlen: 24
212.57.197.0/24 maxlen: 24
212.57.208.0/24 maxlen: 24
212.57.211.0/24 maxlen: 24
212.57.212.0/24 maxlen: 24
212.57.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Jun 2026 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:35:7a:21:db:eb:0f:24:ad:51:b6:6c:48:5c:f2:53:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6380000fb7e45f8976261a698d418f08e8d67c7
Validity
Not Before: May 17 10:27:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cae8b73a2aed6d4f705f7a9b04a1b0432ab387d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4e:29:73:8e:b9:15:d0:14:e7:fd:8f:80:06:
a9:fb:73:d0:ce:93:56:85:07:eb:bc:67:ec:3a:39:
45:bf:dd:72:bf:a9:e5:53:9f:e5:10:71:6e:b0:55:
9c:d6:39:87:a5:89:6e:03:3e:26:1f:e5:81:23:16:
48:91:c2:f3:0b:97:85:f4:2c:34:0b:37:3c:46:bc:
bb:b2:04:c5:f4:70:b1:c3:6a:86:78:61:7a:24:13:
ef:52:c5:40:32:4f:44:e8:f7:90:2b:11:6e:bc:dd:
9f:2c:82:d4:30:31:5d:e1:47:1f:1e:cf:0c:de:6d:
e5:5f:d0:fb:14:2e:f6:b9:fd:aa:7b:76:26:e7:bc:
be:b1:6b:d5:36:3e:2c:80:e5:61:3d:97:45:70:ff:
a5:3a:fa:34:18:3e:51:56:75:75:5d:8e:46:85:ed:
8f:e3:ea:ec:d3:d9:e4:c5:4a:23:74:4a:2f:fd:96:
a4:b5:87:a4:38:d4:ec:1f:44:71:92:4c:fd:f2:ed:
b1:bd:ba:48:56:58:39:b8:ed:4c:cf:00:25:0d:ad:
5d:51:f1:93:a4:06:3c:3b:74:f2:a2:a2:f4:bd:b0:
70:00:85:00:a2:68:f2:e8:92:aa:97:f8:60:cc:39:
73:95:56:3c:f0:66:f5:d9:55:62:7d:b9:18:35:02:
d6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E8:B7:3A:2A:ED:6D:4F:70:5F:7A:9B:04:A1:B0:43:2A:B3:87:D6
X509v3 Authority Key Identifier:
keyid:B6:38:00:00:FB:7E:45:F8:97:62:61:A6:98:D4:18:F0:8E:8D:67:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/yui3OirtbU9wX3qbBKGwQyqzh9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.57.192.0/19
Signature Algorithm: sha256WithRSAEncryption
4f:b6:04:cc:de:1a:e7:00:c1:a7:02:c9:e4:f5:5a:8a:58:41:
36:37:d3:bb:92:cb:36:00:0c:0c:60:29:7a:72:90:4b:eb:b3:
5c:41:df:50:59:32:ba:35:69:e0:f4:fc:2f:f5:5a:e7:3c:a7:
6f:f8:63:7e:d5:da:11:39:af:c7:4e:ff:30:5a:4c:d1:44:5c:
99:c3:96:bc:bb:dc:7e:e2:5b:b1:12:96:a5:7a:9e:21:b4:cf:
5a:e9:da:7c:03:fc:d5:90:9e:ba:5d:ee:8e:c5:12:27:9a:1b:
fb:52:59:a4:ea:aa:0f:09:45:83:5a:3f:1e:ed:fc:77:8b:d1:
8b:4f:84:a1:1b:07:50:c3:fc:31:c0:1b:58:2f:b8:b6:2f:61:
e1:d8:dc:2f:ed:f8:15:2e:1d:c2:44:57:64:38:e4:5f:a9:34:
85:1c:29:c8:5d:70:a3:f0:54:82:a3:fc:d8:9a:3c:90:38:05:
e0:eb:79:cf:b3:6e:7e:ef:7c:90:9d:3c:81:a9:fd:89:eb:20:
da:c9:93:e3:61:fe:ff:e3:d8:c7:f5:91:7c:00:63:f2:f2:12:
e1:cf:fc:9b:1d:f3:d0:41:77:60:22:ae:ac:81:37:48:2f:ec:
62:f7:8d:1b:4c:fd:e1:d1:63:73:80:75:d7:ed:32:3b:73:8a:
d8:8c:38:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 8 19:56:36 2026 by rpki-client