Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/y5j-FSAqgN0p2yaR_4KWhye-7_I.roa
File: y5j-FSAqgN0p2yaR_4KWhye-7_I.roa (raw, json)
Hash identifier: ZO2KmDA6RPnJ3CIycOzekX9E10FH5bz6QLTExlfEs4A=
Subject key identifier: CB:98:FE:15:20:2A:80:DD:29:DB:26:91:FF:82:96:87:27:BE:EF:F2
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 01A1A32FE27A773C5DC9B7E52BB7AFA30AD2
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/y5j-FSAqgN0p2yaR_4KWhye-7_I.roa
Signing time: Tue 03 Nov 2026 20:53:06 +0000
ROA not before: Tue 03 Nov 2026 20:53:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200598
IP address blocks: 24.235.22.0/23 maxlen: 24
37.153.132.0/24 maxlen: 24
62.112.30.0/24 maxlen: 24
66.9.96.0/20 maxlen: 24
69.72.72.0/22 maxlen: 24
77.223.192.0/21 maxlen: 24
77.223.200.0/23 maxlen: 24
79.110.184.0/22 maxlen: 24
79.139.64.0/23 maxlen: 24
83.142.200.0/21 maxlen: 24
85.204.28.0/23 maxlen: 24
86.106.28.0/23 maxlen: 24
89.20.50.0/23 maxlen: 24
89.37.60.0/23 maxlen: 24
89.39.184.0/23 maxlen: 24
89.40.236.0/23 maxlen: 24
89.42.213.0/24 maxlen: 24
89.42.215.0/24 maxlen: 24
91.217.106.0/23 maxlen: 24
94.177.27.0/24 maxlen: 24
121.127.48.0/20 maxlen: 24
128.0.60.0/22 maxlen: 24
141.193.214.0/23 maxlen: 24
162.216.138.0/23 maxlen: 24
168.149.248.0/23 maxlen: 24
173.214.200.0/22 maxlen: 24
176.111.54.0/23 maxlen: 24
176.222.48.0/22 maxlen: 24
176.223.181.0/24 maxlen: 24
178.216.184.0/21 maxlen: 24
193.91.8.0/23 maxlen: 24
195.78.90.0/23 maxlen: 24
195.128.136.0/24 maxlen: 24
198.14.16.0/20 maxlen: 24
198.145.112.0/22 maxlen: 24
199.48.230.0/23 maxlen: 24
204.15.4.0/22 maxlen: 24
205.220.216.0/23 maxlen: 24
217.144.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a3:2f:e2:7a:77:3c:5d:c9:b7:e5:2b:b7:af:a3:0a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Nov 3 20:53:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb98fe15202a80dd29db2691ff82968727beeff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ea:60:87:37:4a:ed:64:02:8d:d3:96:b7:39:
43:49:f3:ea:38:09:07:4a:6f:bb:ee:b5:13:dc:5d:
c0:53:ac:40:ad:16:07:9e:99:f3:e2:49:56:c3:b6:
66:26:59:1f:e9:24:35:f5:b3:5b:f0:31:3c:9f:48:
82:e8:8b:51:8c:8c:dd:6c:31:38:4b:6a:95:69:fa:
36:53:e3:1e:6e:37:db:cd:90:d9:34:f6:bb:d9:3e:
f5:3f:f1:7b:33:ea:6b:c4:3b:ac:7b:25:97:75:82:
6e:c7:9e:96:08:f0:4a:6a:6c:3b:eb:46:d9:9d:ac:
7e:fc:7d:2f:64:0d:1c:bf:73:72:b4:5b:ce:0c:a6:
a1:70:62:b8:ad:8b:67:e6:4b:db:df:a6:15:a4:cf:
09:11:58:0e:2e:95:6b:3f:88:b3:f8:12:47:37:f4:
15:d8:01:22:4e:38:d8:7e:a3:fa:18:7f:81:b6:ab:
a6:9f:58:74:3d:21:9b:b3:ea:2e:47:60:fd:fd:e1:
f8:41:a4:9b:09:fb:eb:c7:69:c5:ac:91:96:f0:fb:
cb:e4:b0:75:be:76:a5:f7:ec:67:3c:99:15:50:9e:
9a:11:2a:28:52:80:f3:c5:59:f7:b8:73:e0:ef:0e:
01:13:47:5e:3d:21:1f:89:62:4c:5f:e3:06:44:7c:
fd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:98:FE:15:20:2A:80:DD:29:DB:26:91:FF:82:96:87:27:BE:EF:F2
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/y5j-FSAqgN0p2yaR_4KWhye-7_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.235.22.0/23
37.153.132.0/24
62.112.30.0/24
66.9.96.0/20
69.72.72.0/22
77.223.192.0-77.223.201.255
79.110.184.0/22
79.139.64.0/23
83.142.200.0/21
85.204.28.0/23
86.106.28.0/23
89.20.50.0/23
89.37.60.0/23
89.39.184.0/23
89.40.236.0/23
89.42.213.0/24
89.42.215.0/24
91.217.106.0/23
94.177.27.0/24
121.127.48.0/20
128.0.60.0/22
141.193.214.0/23
162.216.138.0/23
168.149.248.0/23
173.214.200.0/22
176.111.54.0/23
176.222.48.0/22
176.223.181.0/24
178.216.184.0/21
193.91.8.0/23
195.78.90.0/23
195.128.136.0/24
198.14.16.0/20
198.145.112.0/22
199.48.230.0/23
204.15.4.0/22
205.220.216.0/23
217.144.108.0/22
Signature Algorithm: sha256WithRSAEncryption
63:95:3f:ad:19:73:7d:2b:4b:7c:8f:6c:0d:b5:e5:ac:32:3d:
50:ea:d2:e9:da:01:35:15:d5:20:99:10:a8:bf:fe:94:66:d9:
38:d5:7f:11:81:f0:23:b7:b3:da:6e:a3:f4:01:1b:61:be:bc:
12:05:4f:e3:1e:ff:9d:c2:b1:33:6f:7c:d2:50:54:4b:c8:66:
6f:38:8d:20:5a:94:5d:4a:f0:9c:e8:56:dc:16:83:79:2b:54:
70:f0:83:8f:26:5b:38:ce:95:b2:cf:47:b3:38:16:14:92:71:
be:15:78:d5:32:4d:19:f3:cc:c9:c6:f3:0d:30:94:e5:3f:d0:
a8:b4:4d:c6:ec:35:7f:d1:12:32:97:df:4e:aa:48:b9:0e:92:
9c:87:44:f5:c6:7f:09:b8:ad:ca:6e:63:b8:5f:b3:1b:68:fa:
38:94:03:99:17:06:cb:ba:7b:b6:e5:f2:84:c6:00:63:28:67:
b9:15:5d:20:09:da:2e:0c:b0:43:f8:53:d1:1e:fe:43:fa:5f:
62:b8:cc:0a:c3:7a:0e:f2:ee:14:ed:21:7b:1c:e0:88:ee:f1:
83:df:b9:61:7a:ef:24:1d:88:df:8c:7b:47:81:dd:d4:86:ba:
78:fe:7b:bd:d5:e7:99:fe:2a:9f:5e:cb:c5:ea:44:05:c9:41:
b0:b4:68:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:08:20 2026 by rpki-client