Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a3d2ee-174c-48c3-bd26-7fa9d94024f0/1/yi2kCAz2ZBUeuGWw6HOg0xyIGWc.roa
File: yi2kCAz2ZBUeuGWw6HOg0xyIGWc.roa (raw, json)
Hash identifier: yZxo+rRmJeE+KUwzytBf6MoRosPxjZZzgr+GQ4aWTpA=
Subject key identifier: CA:2D:A4:08:0C:F6:64:15:1E:B8:65:B0:E8:73:A0:D3:1C:88:19:67
Certificate issuer: /CN=8cef146d85c09aa59687fd6315b13271c1c292ad
Certificate serial: 019FB53FA724EBA027012CCFA79D481A0347
Authority key identifier: 8C:EF:14:6D:85:C0:9A:A5:96:87:FD:63:15:B1:32:71:C1:C2:92:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jO8UbYXAmqWWh_1jFbEyccHCkq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/a3d2ee-174c-48c3-bd26-7fa9d94024f0/1/yi2kCAz2ZBUeuGWw6HOg0xyIGWc.roa
Signing time: Thu 30 Jul 2026 22:57:55 +0000
ROA not before: Thu 30 Jul 2026 22:57:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205809
IP address blocks: 66.203.126.0/23 maxlen: 23
94.24.36.0/24 maxlen: 24
94.24.37.0/24 maxlen: 24
162.208.16.0/24 maxlen: 24
185.206.24.0/24 maxlen: 24
185.206.25.0/24 maxlen: 24
185.206.26.0/24 maxlen: 24
185.206.27.0/24 maxlen: 24
217.180.20.0/23 maxlen: 23
217.180.20.0/24 maxlen: 24
217.180.21.0/24 maxlen: 24
2a09:a381::/40 maxlen: 40
2a0b:e40:1::/48 maxlen: 48
2a0b:e40:2::/48 maxlen: 48
2a0b:e40:3::/48 maxlen: 48
2a0b:e41:1::/48 maxlen: 48
2a0b:e41:2::/48 maxlen: 48
2a0b:e42:1::/48 maxlen: 48
2a0b:e43::/40 maxlen: 40
2a0b:e43:1::/48 maxlen: 48
2a0b:e44::/40 maxlen: 40
2a0b:e45:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/a3d2ee-174c-48c3-bd26-7fa9d94024f0/1/jO8UbYXAmqWWh_1jFbEyccHCkq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/a3d2ee-174c-48c3-bd26-7fa9d94024f0/1/jO8UbYXAmqWWh_1jFbEyccHCkq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jO8UbYXAmqWWh_1jFbEyccHCkq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 22:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b5:3f:a7:24:eb:a0:27:01:2c:cf:a7:9d:48:1a:03:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cef146d85c09aa59687fd6315b13271c1c292ad
Validity
Not Before: Jul 30 22:57:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca2da4080cf664151eb865b0e873a0d31c881967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ae:92:b2:78:e5:e8:90:92:7d:ae:b7:1d:fb:
5f:a4:18:c3:5d:65:d2:f6:52:71:d1:47:5b:4b:51:
f8:cd:63:ad:67:43:bb:7e:1d:3e:73:90:ac:80:a8:
ad:75:bb:a0:f9:be:6d:58:6c:37:b0:5d:1a:6e:de:
2a:97:0f:2c:2e:b6:f6:c7:81:86:50:92:d8:8f:b7:
a8:65:e0:ca:80:4e:0f:2e:37:4e:39:b4:f4:2d:18:
a3:e2:b5:b2:d2:6e:95:bd:56:54:d9:15:12:21:6d:
99:42:5d:41:98:16:ff:5c:06:df:d4:43:26:67:93:
1d:3c:b7:8a:24:6a:3a:75:c1:36:09:d2:b3:98:53:
79:7d:99:1a:b6:1c:98:4f:29:a4:92:92:ef:f4:bf:
dd:98:c2:cb:3f:96:77:ea:76:3c:0c:f9:3d:80:5a:
53:1c:1e:e4:d1:b3:f2:d7:60:2a:1a:07:c4:1b:e3:
55:fe:3d:92:b4:21:08:dc:29:56:71:9c:69:47:37:
ba:b4:2e:77:e9:48:c5:f4:da:e3:e3:5a:3f:f9:d5:
6c:95:45:e7:c0:cb:a4:d2:c3:d4:e9:05:46:a8:16:
ea:eb:cc:7d:5f:b4:85:0c:c9:23:a6:f6:3d:63:07:
fb:9e:af:37:e4:23:b7:08:fd:22:7c:ba:7a:f0:57:
cf:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2D:A4:08:0C:F6:64:15:1E:B8:65:B0:E8:73:A0:D3:1C:88:19:67
X509v3 Authority Key Identifier:
keyid:8C:EF:14:6D:85:C0:9A:A5:96:87:FD:63:15:B1:32:71:C1:C2:92:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jO8UbYXAmqWWh_1jFbEyccHCkq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a3d2ee-174c-48c3-bd26-7fa9d94024f0/1/yi2kCAz2ZBUeuGWw6HOg0xyIGWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a3d2ee-174c-48c3-bd26-7fa9d94024f0/1/jO8UbYXAmqWWh_1jFbEyccHCkq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.203.126.0/23
94.24.36.0/23
162.208.16.0/24
185.206.24.0/22
217.180.20.0/23
IPv6:
2a09:a381::/40
2a0b:e40:1::-2a0b:e40:3:ffff:ffff:ffff:ffff:ffff
2a0b:e41:1::-2a0b:e41:2:ffff:ffff:ffff:ffff:ffff
2a0b:e42:1::/48
2a0b:e43::/40
2a0b:e44::/40
2a0b:e45:1::/48
Signature Algorithm: sha256WithRSAEncryption
2f:40:26:42:ed:c2:40:f7:6c:f4:48:16:fe:3a:b3:fa:5a:0c:
6f:8d:ca:0c:81:34:de:ec:3b:e0:52:ae:45:6a:72:bc:b2:99:
34:cf:ad:29:74:d3:7e:a3:75:03:4d:b8:d7:6f:f2:4e:7a:cd:
5a:ef:4b:80:cb:d1:f5:5a:2a:7e:ae:49:cf:27:24:67:ff:f5:
2b:4e:f9:f7:90:d8:57:7c:d1:61:f1:32:be:03:64:6c:7c:11:
82:a9:4c:81:06:e7:84:fb:57:88:06:79:96:b3:9b:5a:99:a5:
8e:7d:af:2a:e2:db:94:b4:f0:64:62:f1:d9:b2:a6:07:52:8e:
66:31:ac:f5:e1:5a:e3:73:1b:f4:e5:40:60:b2:81:f6:e4:5b:
70:25:fd:8c:32:28:6b:5c:fc:d6:ec:87:bb:e6:f2:84:ec:ef:
0b:a3:04:16:11:96:d0:aa:4d:ac:9b:8d:64:23:c1:68:60:b7:
ab:e2:3b:fe:52:27:65:41:ff:d8:8e:2d:8f:bc:c5:30:d2:7b:
e6:50:38:64:09:2e:97:4a:54:ad:06:db:e0:13:d0:ca:ee:87:
13:e7:7b:fd:cf:2f:f3:ba:cf:a8:03:55:5f:fe:dd:d3:1f:e7:
b1:e1:dc:78:dc:9b:f7:86:9c:41:2c:a7:fe:de:2d:8f:e0:26:
23:49:7d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:17:55 2026 by rpki-client