Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/yJwQtPDZJ3cSqvVdOX6thvIQvJs.roa
File: yJwQtPDZJ3cSqvVdOX6thvIQvJs.roa (raw, json)
Hash identifier: 80LbJw3maKVglKgKna4SKmaFlyNahO168IdLv9lZfQU=
Subject key identifier: C8:9C:10:B4:F0:D9:27:77:12:AA:F5:5D:39:7E:AD:86:F2:10:BC:9B
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019F1833A231AFE7F38A9BBD3BB65BF3479D
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/yJwQtPDZJ3cSqvVdOX6thvIQvJs.roa
Signing time: Tue 30 Jun 2026 11:04:24 +0000
ROA not before: Tue 30 Jun 2026 11:04:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2.56.123.0/24 maxlen: 24
5.180.22.0/24 maxlen: 24
5.180.31.0/24 maxlen: 24
45.9.18.0/24 maxlen: 24
45.9.19.0/24 maxlen: 24
45.15.125.0/24 maxlen: 24
45.15.128.0/24 maxlen: 24
45.15.129.0/24 maxlen: 24
45.15.145.0/24 maxlen: 24
45.15.146.0/24 maxlen: 24
45.15.154.0/24 maxlen: 24
45.15.155.0/24 maxlen: 24
45.15.164.0/24 maxlen: 24
45.15.179.0/24 maxlen: 24
45.15.186.0/24 maxlen: 24
45.82.248.0/24 maxlen: 24
45.83.23.0/24 maxlen: 24
45.83.24.0/24 maxlen: 24
45.83.25.0/24 maxlen: 24
45.83.128.0/24 maxlen: 24
45.83.149.0/24 maxlen: 24
45.86.65.0/24 maxlen: 24
45.86.67.0/24 maxlen: 24
45.86.68.0/24 maxlen: 24
45.86.69.0/24 maxlen: 24
45.86.70.0/24 maxlen: 24
45.86.74.0/24 maxlen: 24
45.86.75.0/24 maxlen: 24
45.88.176.0/24 maxlen: 24
45.88.177.0/24 maxlen: 24
45.92.140.0/22 maxlen: 24
45.92.160.0/24 maxlen: 24
45.92.161.0/24 maxlen: 24
45.92.163.0/24 maxlen: 24
45.92.164.0/22 maxlen: 24
45.92.192.0/24 maxlen: 24
45.92.193.0/24 maxlen: 24
45.92.194.0/24 maxlen: 24
45.128.51.0/24 maxlen: 24
45.128.57.0/24 maxlen: 24
45.128.58.0/24 maxlen: 24
92.118.236.0/22 maxlen: 24
95.214.249.0/24 maxlen: 24
95.214.250.0/24 maxlen: 24
171.22.115.0/24 maxlen: 24
171.22.130.0/24 maxlen: 24
171.22.132.0/24 maxlen: 24
185.166.153.0/24 maxlen: 24
194.55.136.0/24 maxlen: 24
213.59.119.0/24 maxlen: 24
213.59.120.0/24 maxlen: 24
213.59.126.0/24 maxlen: 24
213.59.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 02:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:33:a2:31:af:e7:f3:8a:9b:bd:3b:b6:5b:f3:47:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jun 30 11:04:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c89c10b4f0d9277712aaf55d397ead86f210bc9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a7:36:a5:2d:8f:22:9c:82:ea:e1:42:8d:75:
90:c0:c6:36:26:a7:58:f6:10:44:90:30:29:7c:e2:
32:e4:da:c3:e5:db:f0:de:00:71:50:f2:40:e1:7e:
ea:f9:0a:6d:f1:ee:da:d5:c4:ae:de:fa:6e:6f:58:
67:fb:96:31:ff:ad:04:ad:82:b0:96:d0:66:82:40:
83:1c:8a:d9:b6:f3:be:1a:11:e6:f2:c8:48:b9:68:
1b:f4:e4:24:74:75:a2:70:63:4d:64:48:ce:f8:7a:
7d:3e:37:bb:ef:ff:57:8b:f5:69:af:c2:13:c9:38:
d6:f8:9d:eb:61:15:5e:06:ea:4c:ca:81:d8:ea:5a:
b8:29:fe:ae:11:f1:f7:04:5b:cc:09:69:90:fe:8b:
26:fd:d7:16:55:66:af:3e:6f:e1:40:46:05:d6:aa:
33:81:11:e6:66:12:a4:20:3e:9e:02:1a:1e:a6:3c:
44:89:2b:4d:64:8d:20:91:2a:1a:a9:45:82:09:4c:
cd:8a:2d:af:d1:bf:d7:3e:d3:19:5b:9d:b6:de:56:
a0:d4:ea:4d:f3:e4:37:5f:df:03:06:fc:c4:0a:14:
5a:fc:44:e0:4a:13:09:ed:dd:fd:72:ff:37:36:4f:
24:f4:8d:ca:47:2c:9d:0d:a1:9f:f2:b4:86:3a:e3:
15:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9C:10:B4:F0:D9:27:77:12:AA:F5:5D:39:7E:AD:86:F2:10:BC:9B
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/yJwQtPDZJ3cSqvVdOX6thvIQvJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.123.0/24
5.180.22.0/24
5.180.31.0/24
45.9.18.0/23
45.15.125.0/24
45.15.128.0/23
45.15.145.0-45.15.146.255
45.15.154.0/23
45.15.164.0/24
45.15.179.0/24
45.15.186.0/24
45.82.248.0/24
45.83.23.0-45.83.25.255
45.83.128.0/24
45.83.149.0/24
45.86.65.0/24
45.86.67.0-45.86.70.255
45.86.74.0/23
45.88.176.0/23
45.92.140.0/22
45.92.160.0/23
45.92.163.0-45.92.167.255
45.92.192.0-45.92.194.255
45.128.51.0/24
45.128.57.0-45.128.58.255
92.118.236.0/22
95.214.249.0-95.214.250.255
171.22.115.0/24
171.22.130.0/24
171.22.132.0/24
185.166.153.0/24
194.55.136.0/24
213.59.119.0-213.59.120.255
213.59.126.0/23
Signature Algorithm: sha256WithRSAEncryption
c7:89:f8:e5:58:91:d4:b7:78:f3:1a:76:4f:4f:5f:1b:6a:27:
5b:4b:38:5b:18:91:77:63:a3:8c:89:57:cf:2a:24:ca:96:c4:
8b:ec:21:da:1c:03:7c:ef:68:e9:be:61:04:7b:24:3f:1a:eb:
b8:e2:a5:41:dd:d3:93:4b:0a:34:a3:1f:55:9c:e4:72:08:f6:
a9:f9:36:41:9c:5c:9f:2e:ff:99:9d:13:f6:0b:5b:97:3f:09:
8f:39:4b:d1:27:e1:e1:c7:6a:a1:7e:36:74:2a:12:07:f6:ce:
ee:b6:ab:f7:7b:f0:ed:0c:45:59:01:ba:5f:9c:ed:66:c3:42:
f5:cc:13:9c:87:86:2d:68:43:da:ab:a5:75:fd:ea:25:c7:37:
4e:55:35:45:46:6c:2c:ec:b6:70:21:cc:f3:e8:ea:c1:8a:46:
cf:f0:00:b7:ec:f7:2e:84:58:08:b9:a6:0e:2e:01:ab:06:6d:
6a:21:15:d8:6e:a2:56:0a:35:87:24:f5:d9:5c:72:0e:ab:b1:
95:2f:ff:dc:ea:6c:1f:ba:89:e8:b8:13:8c:2f:bb:2d:d5:32:
96:97:6d:40:33:8d:8c:67:bd:0c:4f:57:fe:32:58:7c:30:2e:
af:15:79:d7:5f:f0:19:e1:70:a5:cd:6a:9f:d8:47:32:cf:83:
37:dc:e2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 09:43:18 2026 by rpki-client