Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/YTB081a-fdiDXCO_1VveJvjMjis.roa
File: YTB081a-fdiDXCO_1VveJvjMjis.roa (raw, json)
Hash identifier: kuklLF4SiZZfH7vacodPUUKI2s1JOCqKIYeB79nV2DI=
Subject key identifier: 61:30:74:F3:56:BE:7D:D8:83:5C:23:BF:D5:5B:DE:26:F8:CC:8E:2B
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01A0ED37ED07054C4C247D27106E35B7EB66
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/YTB081a-fdiDXCO_1VveJvjMjis.roa
Signing time: Tue 29 Sep 2026 12:51:00 +0000
ROA not before: Tue 29 Sep 2026 12:51:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1257
IP address blocks: 192.71.180.0/24 maxlen: 24
192.71.220.0/24 maxlen: 24
192.121.104.0/24 maxlen: 24
193.180.207.0/24 maxlen: 24
193.180.240.0/24 maxlen: 24
193.180.247.0/24 maxlen: 24
193.181.2.0/24 maxlen: 24
193.183.165.0/24 maxlen: 24
193.234.16.0/24 maxlen: 24
193.234.87.0/24 maxlen: 24
193.234.177.0/24 maxlen: 24
193.235.80.0/24 maxlen: 24
193.235.82.0/24 maxlen: 24
194.14.15.0/24 maxlen: 24
194.68.158.0/24 maxlen: 24
194.68.174.0/23 maxlen: 23
194.68.238.0/24 maxlen: 24
194.71.104.0/23 maxlen: 23
194.71.104.0/24 maxlen: 24
194.71.105.0/24 maxlen: 24
194.71.178.0/24 maxlen: 24
194.71.179.0/24 maxlen: 24
194.71.248.0/21 maxlen: 24
194.103.24.0/22 maxlen: 24
194.103.206.0/24 maxlen: 24
194.132.60.0/24 maxlen: 24
194.132.128.0/22 maxlen: 22
2a01:280:310::/48 maxlen: 48
2a01:280:360::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:37:ed:07:05:4c:4c:24:7d:27:10:6e:35:b7:eb:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Sep 29 12:51:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=613074f356be7dd8835c23bfd55bde26f8cc8e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:12:4d:13:67:30:23:49:8b:67:67:d4:27:a0:
a4:2c:97:5c:e3:99:60:31:e0:8b:8f:8e:cc:b1:de:
81:dd:56:25:7d:54:df:40:09:a3:1a:e5:25:11:f7:
7b:4f:9f:e1:3d:25:30:2a:76:cd:07:7c:b0:ef:13:
9c:3b:bd:92:c5:1b:6f:62:cb:a7:09:3a:5d:c4:d8:
74:e8:71:c1:f5:33:52:0f:fd:b5:e7:bc:72:1f:1a:
39:ce:48:6a:5f:8a:8d:d0:b3:b0:96:23:bf:18:7f:
4c:d4:8c:67:8e:bf:83:8d:2b:48:94:8b:7a:3f:1a:
15:3c:d7:c0:6a:d9:c7:ee:c1:83:b2:26:85:37:4f:
eb:b5:b3:f0:05:a7:67:0c:41:8d:0d:8d:d2:60:82:
80:55:0b:fd:69:30:13:e7:94:c2:3b:d2:94:55:bc:
4c:25:99:04:e2:39:aa:4e:89:e3:a2:6f:c8:b1:d7:
0d:a2:83:4a:e1:3a:9c:34:e7:9c:ee:f2:b1:d8:b5:
6d:ff:ba:e0:25:c6:ec:10:ce:3b:99:1f:4c:71:0c:
ce:e9:7d:7e:ae:ce:22:a8:25:f5:66:87:05:82:c9:
2a:0f:b6:4c:9d:d0:ac:eb:0d:fd:22:74:82:48:97:
4b:81:99:d2:7c:6f:aa:56:62:ce:c2:ec:8f:d3:78:
0e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:30:74:F3:56:BE:7D:D8:83:5C:23:BF:D5:5B:DE:26:F8:CC:8E:2B
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/YTB081a-fdiDXCO_1VveJvjMjis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.180.0/24
192.71.220.0/24
192.121.104.0/24
193.180.207.0/24
193.180.240.0/24
193.180.247.0/24
193.181.2.0/24
193.183.165.0/24
193.234.16.0/24
193.234.87.0/24
193.234.177.0/24
193.235.80.0/24
193.235.82.0/24
194.14.15.0/24
194.68.158.0/24
194.68.174.0/23
194.68.238.0/24
194.71.104.0/23
194.71.178.0/23
194.71.248.0/21
194.103.24.0/22
194.103.206.0/24
194.132.60.0/24
194.132.128.0/22
IPv6:
2a01:280:310::/48
2a01:280:360::/48
Signature Algorithm: sha256WithRSAEncryption
70:fb:09:6b:4c:14:0f:65:49:f4:3e:3d:94:1a:64:b1:45:90:
a0:b4:26:2c:5c:75:72:f7:f4:c9:9d:06:22:be:8a:3e:65:74:
1d:57:14:90:22:ac:2d:91:53:c3:75:f9:6f:ba:7c:bc:20:44:
56:f3:0c:08:f9:b1:3b:c6:ae:39:b8:c2:3f:f0:ef:65:58:00:
5f:7b:dd:51:bc:96:d5:07:5f:a2:96:14:c7:77:2c:8c:88:46:
8a:58:66:b4:17:52:c0:87:f0:35:8b:31:5e:89:99:1d:b6:38:
fa:71:f2:25:c1:6b:2a:1d:90:d4:69:87:6b:2a:3b:32:cf:3d:
53:d4:c7:63:f5:05:04:19:53:f9:2d:4c:09:88:32:c3:eb:68:
71:80:1f:1b:3f:2f:ba:54:52:8a:15:ba:f3:be:dd:c9:ae:f3:
a3:37:08:92:5e:75:e4:9f:96:2c:3c:db:c2:c6:ba:fc:ea:2f:
a2:5e:c6:e2:c1:28:6b:63:79:47:18:74:92:8e:f7:70:12:69:
e4:7b:b2:75:33:06:b2:20:eb:24:a0:2b:5a:40:3c:36:31:e9:
67:58:ef:25:7a:d3:a7:34:71:22:a0:95:64:98:f0:f8:97:b6:
f7:ce:22:64:44:cb:a0:12:2b:93:90:87:4a:5d:ef:9c:3f:60:
9c:4b:6c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:10:37 2026 by rpki-client