Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/YFjZ7PDdgCtA2pIj93N3qBt_WLk.roa
File: YFjZ7PDdgCtA2pIj93N3qBt_WLk.roa (raw, json)
Hash identifier: N4WC8IbaKS6Y1uAtos17ccb/a4w6H5ZTAuoZB9Rb3vg=
Subject key identifier: 60:58:D9:EC:F0:DD:80:2B:40:DA:92:23:F7:73:77:A8:1B:7F:58:B9
Certificate issuer: /CN=8d9c6e843ffe7f34b95d3a0cd72dd4abb69ba425
Certificate serial: 019F236890BF78F467E9F0A2D4853E4331CC
Authority key identifier: 8D:9C:6E:84:3F:FE:7F:34:B9:5D:3A:0C:D7:2D:D4:AB:B6:9B:A4:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZxuhD_-fzS5XToM1y3Uq7abpCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/YFjZ7PDdgCtA2pIj93N3qBt_WLk.roa
Signing time: Thu 02 Jul 2026 15:18:03 +0000
ROA not before: Thu 02 Jul 2026 15:18:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 85.158.140.0/24 maxlen: 24
85.158.141.0/24 maxlen: 24
85.158.142.0/24 maxlen: 24
85.158.143.0/24 maxlen: 24
195.245.230.0/24 maxlen: 24
195.245.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/jZxuhD_-fzS5XToM1y3Uq7abpCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/jZxuhD_-fzS5XToM1y3Uq7abpCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZxuhD_-fzS5XToM1y3Uq7abpCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:90:bf:78:f4:67:e9:f0:a2:d4:85:3e:43:31:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d9c6e843ffe7f34b95d3a0cd72dd4abb69ba425
Validity
Not Before: Jul 2 15:18:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6058d9ecf0dd802b40da9223f77377a81b7f58b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e4:38:0a:88:cf:23:11:2b:ae:e5:00:44:37:
e9:4b:b0:e9:6a:9d:15:f2:6b:59:de:6b:e5:38:8e:
fa:48:e3:03:6d:12:8d:4e:6e:7f:52:8d:50:50:aa:
82:f9:f9:7e:90:ca:1b:9c:51:c8:8b:fd:3c:9b:9f:
f7:0e:2b:f4:3a:9e:91:1d:e0:3c:5a:15:64:62:ae:
1a:ef:90:c0:b8:ef:f9:83:e0:88:7f:73:0e:5e:14:
bd:59:5a:49:c4:ca:d1:a8:ff:ff:84:0f:84:10:f2:
57:7d:79:ac:3b:2b:7a:6c:bd:3c:46:6e:e6:ca:b6:
82:12:94:a5:ac:57:50:f5:10:65:96:53:1e:ff:e3:
98:86:d6:fb:4d:87:a7:2c:c0:51:df:12:ba:18:c2:
bb:98:a3:c8:14:dd:51:ee:bd:25:bf:19:cd:8e:ab:
c0:8d:03:93:41:1d:93:c1:94:4e:1c:45:3c:f2:44:
54:d1:35:af:a8:82:e5:0f:03:75:99:ec:b5:c9:74:
f0:98:d8:4a:fb:de:46:a5:09:ed:7d:94:2a:ce:ad:
fb:22:90:1c:69:63:b1:77:a9:27:40:67:11:ca:99:
12:99:cd:f4:cf:84:5a:3b:8e:fc:ca:7d:e2:ca:a5:
bb:a3:49:9e:41:8d:71:6c:d1:3b:00:88:b6:f6:3d:
ef:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:58:D9:EC:F0:DD:80:2B:40:DA:92:23:F7:73:77:A8:1B:7F:58:B9
X509v3 Authority Key Identifier:
keyid:8D:9C:6E:84:3F:FE:7F:34:B9:5D:3A:0C:D7:2D:D4:AB:B6:9B:A4:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZxuhD_-fzS5XToM1y3Uq7abpCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/YFjZ7PDdgCtA2pIj93N3qBt_WLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/jZxuhD_-fzS5XToM1y3Uq7abpCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.140.0/22
195.245.230.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:99:55:db:a1:3b:8e:1f:80:e1:43:3e:b6:0f:49:24:66:11:
1a:53:2a:aa:48:2e:d2:46:e3:b5:39:c2:eb:1a:c6:8b:cb:94:
fa:64:fd:c9:d7:64:02:ee:f7:2b:ea:55:f8:c8:67:f8:21:48:
bd:4f:28:9d:54:ac:89:4b:ca:12:b0:df:c2:be:99:45:6d:6b:
d9:de:a3:13:30:7e:1a:bf:a7:71:a1:34:61:63:26:e2:f0:c8:
aa:8e:41:e0:bb:cb:49:c6:e9:79:86:6f:94:a1:5c:58:9d:3f:
2a:a8:ce:e2:29:2c:f4:b9:6d:0f:cf:88:7e:6f:81:f6:41:c6:
27:9b:8a:60:01:47:98:85:23:6b:6c:7c:b0:97:69:ae:88:eb:
35:62:99:e6:ed:72:26:a2:87:70:14:41:38:68:58:9a:25:1f:
d6:85:49:4b:78:9e:65:63:b1:4f:80:a8:81:f5:04:c1:eb:06:
4f:4b:cc:ff:d0:0c:79:23:d0:13:6d:5d:95:71:e5:7f:b0:83:
68:b0:fa:c5:4b:39:8b:59:c4:ab:e2:df:8b:ab:e6:dc:5c:9a:
fc:8b:99:62:85:97:12:39:1b:b3:d5:8f:8f:10:d4:0f:62:6e:
ff:69:a0:09:1b:20:de:07:b8:f5:cf:d1:88:a3:9f:4f:26:95:
6f:3e:67:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:00:15 2026 by rpki-client