Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/pYetnom_wA_ScRV12GudzaQxL8Q.roa
File: pYetnom_wA_ScRV12GudzaQxL8Q.roa (raw, json)
Hash identifier: mTXvpDjqAr8VlbSF6rMZfNW8ZydFcM0VEr1K9O3/BqU=
Subject key identifier: A5:87:AD:9E:89:BF:C0:0F:D2:71:15:75:D8:6B:9D:CD:A4:31:2F:C4
Certificate issuer: /CN=4d9ba34746d44b13f69c53ad125ddaa6489f5795
Certificate serial: 019F236871C247E88723C83E7643AEA1ED60
Authority key identifier: 4D:9B:A3:47:46:D4:4B:13:F6:9C:53:AD:12:5D:DA:A6:48:9F:57:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZujR0bUSxP2nFOtEl3apkifV5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/pYetnom_wA_ScRV12GudzaQxL8Q.roa
Signing time: Thu 02 Jul 2026 15:17:55 +0000
ROA not before: Thu 02 Jul 2026 15:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60781
IP address blocks: 5.79.64.0/18 maxlen: 18
37.48.64.0/18 maxlen: 18
62.212.64.0/19 maxlen: 19
81.17.47.0/24 maxlen: 24
81.17.49.0/24 maxlen: 24
81.17.50.0/24 maxlen: 24
81.17.51.0/24 maxlen: 24
81.17.52.0/24 maxlen: 24
81.17.53.0/24 maxlen: 24
81.17.54.0/24 maxlen: 24
81.17.55.0/24 maxlen: 24
81.171.0.0/19 maxlen: 19
82.192.64.0/19 maxlen: 19
83.149.64.0/18 maxlen: 18
85.17.0.0/16 maxlen: 16
89.149.192.0/18 maxlen: 18
89.149.192.0/20 maxlen: 20
94.75.192.0/18 maxlen: 18
95.168.160.0/20 maxlen: 20
95.211.0.0/16 maxlen: 16
95.211.51.0/24 maxlen: 24
95.211.85.0/24 maxlen: 24
173.234.68.0/22 maxlen: 22
178.162.128.0/18 maxlen: 23
178.162.162.0/23 maxlen: 23
178.162.164.0/22 maxlen: 22
178.162.168.0/22 maxlen: 22
178.162.176.0/20 maxlen: 20
185.17.184.0/22 maxlen: 22
212.7.192.0/20 maxlen: 20
212.7.208.0/22 maxlen: 22
212.32.224.0/19 maxlen: 19
213.227.128.0/19 maxlen: 19
2001:1af8::/32 maxlen: 32
2001:1af8:8000::/36 maxlen: 36
2001:1af8:8000::/40 maxlen: 40
2001:1af8:8100::/44 maxlen: 44
2001:1af8:8110::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZujR0bUSxP2nFOtEl3apkifV5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:71:c2:47:e8:87:23:c8:3e:76:43:ae:a1:ed:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d9ba34746d44b13f69c53ad125ddaa6489f5795
Validity
Not Before: Jul 2 15:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a587ad9e89bfc00fd2711575d86b9dcda4312fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2e:57:ac:81:95:05:cf:95:9f:b8:6f:b8:fa:
3a:ef:f7:4c:73:71:ac:85:ae:03:f4:3d:6b:80:f5:
e2:a8:43:2e:de:55:d9:bf:cb:1a:58:7c:d2:25:a4:
e4:75:c1:30:cf:fe:ed:c2:a6:a7:fe:35:92:6f:52:
78:5f:b7:ad:12:9f:01:12:c4:a8:68:b3:30:1d:c6:
26:ec:9b:2d:30:cf:44:3f:46:69:17:70:80:d3:74:
c4:73:13:16:bb:56:e6:fa:60:dc:a7:67:23:d2:98:
e7:33:0b:3d:9c:65:0a:cc:b7:49:19:84:b7:e2:59:
28:5e:d4:53:20:9d:0f:eb:20:e8:3c:d7:6f:b8:9d:
6b:4f:e1:0d:e6:06:cf:04:73:55:c8:55:05:5b:52:
b8:fc:c5:8f:f0:cb:76:a9:b4:40:b3:cc:06:eb:de:
4b:7e:4b:a8:86:c9:76:42:c6:4f:28:d9:e0:90:f5:
71:a1:41:8f:cb:f3:59:77:ab:8c:a1:60:44:e2:0c:
94:cc:94:bd:d9:49:d0:86:bc:d8:fe:f8:98:28:55:
12:49:72:97:9a:13:0b:70:49:57:a7:52:d2:72:4e:
98:d4:49:bc:dd:e2:32:a8:bc:a6:0d:25:9c:e1:71:
80:6f:08:0e:ad:1f:5a:de:2f:89:a8:bc:30:26:96:
68:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:87:AD:9E:89:BF:C0:0F:D2:71:15:75:D8:6B:9D:CD:A4:31:2F:C4
X509v3 Authority Key Identifier:
keyid:4D:9B:A3:47:46:D4:4B:13:F6:9C:53:AD:12:5D:DA:A6:48:9F:57:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZujR0bUSxP2nFOtEl3apkifV5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/pYetnom_wA_ScRV12GudzaQxL8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.79.64.0/18
37.48.64.0/18
62.212.64.0/19
81.17.47.0/24
81.17.49.0-81.17.55.255
81.171.0.0/19
82.192.64.0/19
83.149.64.0/18
85.17.0.0/16
89.149.192.0/18
94.75.192.0/18
95.168.160.0/20
95.211.0.0/16
173.234.68.0/22
178.162.128.0/18
185.17.184.0/22
212.7.192.0-212.7.211.255
212.32.224.0/19
213.227.128.0/19
IPv6:
2001:1af8::/32
Signature Algorithm: sha256WithRSAEncryption
05:d7:5e:38:e5:90:b3:c3:54:1c:15:99:53:cd:a9:94:6d:dc:
b3:f4:54:5b:7f:63:df:9b:21:b7:19:eb:eb:6a:a6:0b:e3:07:
b2:1e:46:13:44:bf:e3:f5:03:89:8f:62:72:10:5b:4b:13:f8:
28:04:4a:69:71:93:7c:00:4b:29:a7:d0:eb:e5:0e:a4:76:ce:
ba:15:f3:71:61:64:cf:c6:c2:ed:31:db:00:98:98:29:cb:a7:
dc:b6:81:ce:8f:2d:6b:d6:be:ff:79:f8:f1:f1:f1:f3:4e:97:
b6:79:08:4e:a0:4e:56:07:77:bb:1f:dd:0c:6d:9f:44:fc:64:
7f:13:c1:f8:d7:80:90:d7:d3:10:88:e1:d2:73:dd:d7:0c:ae:
85:ea:10:6a:12:2f:97:37:86:19:49:f8:31:52:5b:78:5e:2c:
e7:40:05:37:c0:40:1f:8f:f4:06:05:f1:ae:ca:20:82:23:e5:
10:0a:fc:da:74:9d:85:08:47:e2:16:7d:2f:1c:af:ee:d6:17:
bd:96:2b:06:54:ff:68:e6:d7:cb:1f:7c:e2:8e:85:58:68:9b:
b3:32:eb:6a:b4:26:51:15:3d:e2:80:36:b4:28:03:07:24:19:
fd:ce:25:c1:a8:d6:07:46:9f:8a:57:b6:fd:b2:2f:1e:e2:7d:
de:ad:f1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:34:58 2026 by rpki-client