Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/v_yMx0_W7GT41SAP4SExYkgJuIs.roa
File: v_yMx0_W7GT41SAP4SExYkgJuIs.roa (raw, json)
Hash identifier: WEoXdlwk3sqaequfo5vePXS8i36geglWtVvIOFc3VnI=
Subject key identifier: BF:FC:8C:C7:4F:D6:EC:64:F8:D5:20:0F:E1:21:31:62:48:09:B8:8B
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A0E6FB9A4AF020FC0198653BEDFC9E743B
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/v_yMx0_W7GT41SAP4SExYkgJuIs.roa
Signing time: Mon 28 Sep 2026 07:47:23 +0000
ROA not before: Mon 28 Sep 2026 07:47:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44559
IP address blocks: 45.12.112.0/24 maxlen: 24
45.12.113.0/24 maxlen: 24
45.12.128.0/24 maxlen: 24
45.15.153.0/24 maxlen: 24
45.83.27.0/24 maxlen: 24
45.83.84.0/24 maxlen: 24
45.83.85.0/24 maxlen: 24
45.83.86.0/24 maxlen: 24
45.83.87.0/24 maxlen: 24
45.83.150.0/24 maxlen: 24
45.83.151.0/24 maxlen: 24
45.86.78.0/24 maxlen: 24
45.86.79.0/24 maxlen: 24
45.88.168.0/24 maxlen: 24
45.88.169.0/24 maxlen: 24
45.128.55.0/24 maxlen: 24
45.128.56.0/24 maxlen: 24
45.128.73.0/24 maxlen: 24
45.128.74.0/24 maxlen: 24
45.128.75.0/24 maxlen: 24
139.28.235.0/24 maxlen: 24
141.98.160.0/24 maxlen: 24
213.59.124.0/24 maxlen: 24
213.59.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 19:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:fb:9a:4a:f0:20:fc:01:98:65:3b:ed:fc:9e:74:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 28 07:47:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bffc8cc74fd6ec64f8d5200fe12131624809b88b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fb:25:e5:ae:4a:c4:de:ca:3f:f2:7b:95:0e:
0c:5f:83:59:c1:3f:61:dd:f4:1a:9a:74:16:5d:e2:
ef:6d:f9:69:c0:e5:e2:ef:91:8d:f6:18:9e:bb:94:
21:b3:bd:e9:dc:98:ba:3b:ac:ff:98:3e:5f:d0:af:
c0:6d:b4:da:c2:4b:5d:4d:0b:bc:40:7b:c0:24:ec:
fa:df:a7:10:e3:3c:93:69:b6:69:ca:05:53:86:19:
d5:e8:0d:af:c4:6e:5a:6b:f5:e5:95:ab:ce:75:1c:
0b:0e:2a:56:56:72:73:78:c5:7f:71:9c:d3:77:b9:
b1:76:0e:d7:4b:fc:99:a3:e2:a3:81:4d:43:e3:80:
96:4d:a5:93:c1:80:de:33:64:37:cb:a0:2a:8c:68:
e5:da:57:2a:0a:33:16:09:1e:67:2c:2b:67:44:6a:
aa:38:82:d1:6a:ad:dc:64:e9:75:97:9c:4a:50:cd:
61:95:a0:dc:f3:77:6e:76:d5:7a:6f:2d:cd:a6:be:
89:e2:c0:95:7e:54:77:f7:6d:da:8e:4d:6d:0d:2c:
fe:ef:0d:a0:8d:02:e3:2d:d3:71:2a:97:c4:fb:05:
33:51:ed:9e:d6:3e:1d:1f:b1:95:07:62:b9:d8:f0:
54:c4:ae:93:fc:f6:1e:aa:b7:0a:63:52:81:bb:a1:
a6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FC:8C:C7:4F:D6:EC:64:F8:D5:20:0F:E1:21:31:62:48:09:B8:8B
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/v_yMx0_W7GT41SAP4SExYkgJuIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.112.0/23
45.12.128.0/24
45.15.153.0/24
45.83.27.0/24
45.83.84.0/22
45.83.150.0/23
45.86.78.0/23
45.88.168.0/23
45.128.55.0-45.128.56.255
45.128.73.0-45.128.75.255
139.28.235.0/24
141.98.160.0/24
213.59.124.0/23
Signature Algorithm: sha256WithRSAEncryption
d2:35:4a:ca:e7:e8:76:bb:99:9d:19:de:68:34:15:7b:93:c1:
f2:a6:65:7b:bf:41:11:c5:b6:47:e5:17:9d:d2:eb:7c:c7:a9:
45:a3:11:45:ae:08:80:c9:e5:d3:cd:94:d8:3d:36:2e:a7:06:
00:00:0f:9c:4b:9f:52:59:b0:96:b0:bf:56:f4:1c:d7:ab:7f:
dd:99:d0:bb:4c:05:18:f3:d7:d9:d9:13:81:08:86:b0:0f:59:
69:a5:c6:1f:8e:1c:83:dc:ea:e3:7d:d0:04:0f:51:8b:18:63:
7c:ba:f7:d5:dd:f3:15:10:e3:0b:68:61:28:eb:1b:0d:e2:2c:
c4:6a:29:4a:7c:fa:c1:33:02:ef:ad:ae:f9:b9:74:b9:65:41:
40:b4:bc:4e:c0:13:8d:57:2c:69:90:fc:06:8c:8b:34:8a:c3:
4e:a4:4f:a6:63:c4:c4:86:bb:77:b6:2b:a4:74:42:2e:7d:d8:
19:6a:fe:21:38:47:d7:a2:7d:86:81:f2:92:9e:9d:93:88:e6:
f0:c2:ca:12:60:84:4b:5a:1f:d3:78:df:b3:b4:d0:ba:bb:d1:
f7:27:83:bb:3c:e8:b4:e0:1a:b2:51:e1:1d:78:ad:cd:70:41:
74:e4:55:82:14:5c:65:49:40:6f:83:94:5a:b0:b7:49:b0:ed:
db:88:4f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:54:55 2026 by rpki-client