Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/yvtL3qZIlJEUSKOcheoowNdY6FU.roa
File: yvtL3qZIlJEUSKOcheoowNdY6FU.roa (raw, json)
Hash identifier: S3bvAXMTzGNV1vL2Q1IVRoIqGQYWfJKhDmvNXK5F9/w=
Subject key identifier: CA:FB:4B:DE:A6:48:94:91:14:48:A3:9C:85:EA:28:C0:D7:58:E8:55
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 019FF4BFB186CE7ED9FCB778FD9ABAFF6142
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/yvtL3qZIlJEUSKOcheoowNdY6FU.roa
Signing time: Wed 12 Aug 2026 06:53:51 +0000
ROA not before: Wed 12 Aug 2026 06:53:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 84.55.8.0/22 maxlen: 24
84.55.14.0/24 maxlen: 24
88.223.43.0/24 maxlen: 24
88.223.168.0/24 maxlen: 24
95.173.44.0/24 maxlen: 24
95.173.46.0/24 maxlen: 24
95.173.48.0/24 maxlen: 24
95.173.49.0/24 maxlen: 24
95.173.51.0/24 maxlen: 24
95.173.58.0/24 maxlen: 24
95.173.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 09:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f4:bf:b1:86:ce:7e:d9:fc:b7:78:fd:9a:ba:ff:61:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Aug 12 06:53:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cafb4bdea64894911448a39c85ea28c0d758e855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d3:86:3a:e4:7a:31:5e:db:78:bb:ba:b7:cd:
f5:7f:3b:0f:c1:44:cc:15:26:cf:5c:69:c6:81:f2:
b8:04:ae:9e:fb:aa:7d:ba:a6:50:04:2c:4d:ec:59:
06:d5:c7:e1:ff:3a:6b:96:30:bb:0e:e5:19:36:78:
80:1b:ad:d0:f5:dc:0a:fd:ba:98:76:0c:15:9b:54:
75:6d:0c:40:11:6f:ec:0d:93:c3:2f:1e:6b:e2:55:
5d:b2:c8:17:cd:06:77:41:1c:31:a7:99:fa:d5:17:
14:fb:06:30:85:9b:72:88:05:29:4f:a5:62:82:97:
e9:01:41:b8:c5:6f:ec:64:7d:0e:b7:b4:55:b8:fa:
e5:a4:e7:d5:2b:95:7b:9e:81:13:b6:02:9e:d0:4b:
aa:aa:52:e2:37:42:f9:d0:e8:37:c4:f9:77:80:d2:
bc:22:36:95:fb:4d:22:90:91:2c:9f:53:71:4b:09:
4e:ae:15:6b:ce:f8:44:d6:eb:79:52:e7:39:26:bf:
39:e8:42:3d:7b:f6:4e:14:06:2e:e0:25:7c:b8:5a:
bf:56:f9:19:05:95:df:08:85:ff:4d:ca:3f:5c:e8:
ea:8e:c9:0c:ba:3b:98:31:0f:2b:7d:e2:a1:87:b2:
c0:7d:a7:da:a6:7c:5a:53:e5:c9:81:7e:cb:8b:96:
53:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FB:4B:DE:A6:48:94:91:14:48:A3:9C:85:EA:28:C0:D7:58:E8:55
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/yvtL3qZIlJEUSKOcheoowNdY6FU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.8.0/22
84.55.14.0/24
88.223.43.0/24
88.223.168.0/24
95.173.44.0/24
95.173.46.0/24
95.173.48.0/23
95.173.51.0/24
95.173.58.0/24
95.173.60.0/24
Signature Algorithm: sha256WithRSAEncryption
27:19:c7:3b:5f:c5:94:f9:38:ae:f2:73:e6:c3:0a:d8:f3:ee:
40:9d:2b:ff:d5:aa:23:3a:50:b6:b3:fc:c8:7a:6e:33:9a:85:
ac:f7:12:02:12:a2:50:e3:8e:f5:82:07:80:72:a0:87:1a:9c:
ff:8f:01:27:7f:4b:83:d8:a6:cd:d3:1a:5d:68:d5:06:5b:d8:
f1:3b:cf:27:f0:cd:40:ea:b8:67:d3:f2:bf:a1:27:dd:4b:f6:
bf:99:a9:ae:94:04:5c:31:f0:5b:99:17:9a:01:04:20:25:c8:
8c:b7:cd:ef:5e:76:6a:9e:06:af:9c:45:b2:67:19:b5:14:10:
7f:77:1f:66:25:37:70:a2:11:e5:ae:42:8b:1a:2b:fa:84:01:
7a:51:24:c2:5e:72:89:98:3b:ae:da:f8:53:4b:96:80:6b:b6:
b4:ee:14:e8:ba:c3:24:86:47:5c:ef:af:f9:c2:85:ee:2d:d9:
89:c3:14:61:19:0c:f1:8b:64:c2:be:15:70:f1:4e:64:0e:da:
b3:28:0a:3e:19:2c:bd:f1:f9:a6:5a:43:8c:7a:2e:a0:be:c6:
e5:4e:e5:4f:51:ec:71:f0:63:02:da:e7:61:e3:5b:ed:10:bf:
42:15:d0:b3:8c:a1:14:3a:26:ea:ff:db:c3:6d:d6:29:be:9b:
b9:45:0e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:02 2026 by rpki-client