Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/YNwzRd7MZZXowEkm2vHapKgUKM0.roa
File: YNwzRd7MZZXowEkm2vHapKgUKM0.roa (raw, json)
Hash identifier: XQk8i7WSot9pjXsbuWh7/JpM/huvFAWyKJjasQg1ME0=
Subject key identifier: 60:DC:33:45:DE:CC:65:95:E8:C0:49:26:DA:F1:DA:A4:A8:14:28:CD
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019F36896D46E1FAB74BE23EB6EF03693C41
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/YNwzRd7MZZXowEkm2vHapKgUKM0.roa
Signing time: Mon 06 Jul 2026 08:26:43 +0000
ROA not before: Mon 06 Jul 2026 08:26:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 77.242.146.0/23 maxlen: 24
83.137.159.0/24 maxlen: 24
88.151.56.0/23 maxlen: 24
88.209.198.0/24 maxlen: 24
88.209.201.0/24 maxlen: 24
88.209.216.0/24 maxlen: 24
88.209.226.0/24 maxlen: 24
88.209.228.0/24 maxlen: 24
88.209.232.0/22 maxlen: 24
88.209.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:89:6d:46:e1:fa:b7:4b:e2:3e:b6:ef:03:69:3c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 6 08:26:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=60dc3345decc6595e8c04926daf1daa4a81428cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f6:98:cf:c1:39:3c:53:08:76:d0:2c:fa:81:
1c:3c:ee:e5:46:f4:97:67:ca:1d:c3:3e:1d:25:f8:
7a:28:86:4f:3e:8c:0e:2a:7b:24:93:84:f7:a8:74:
ff:3b:de:1c:90:cc:cf:9f:d3:a7:41:e9:4a:48:18:
e2:01:a1:8a:38:0a:be:93:c5:ad:cc:b3:6f:23:78:
e9:af:28:18:aa:fa:36:39:50:98:c3:f7:e7:27:e1:
4f:9e:56:f7:26:2e:85:12:b8:77:05:c7:06:d3:c5:
d1:29:29:82:f9:b4:a3:c0:da:40:06:35:52:25:ac:
84:b2:fc:c6:be:76:12:8a:df:59:03:ab:4f:47:9c:
0e:8a:2d:9b:d6:c2:ec:f2:c1:e2:85:42:3e:6c:5f:
41:e2:d7:db:5d:39:64:f0:f2:d6:3d:58:af:b8:64:
49:a5:72:d4:f4:64:81:c4:5d:1f:ea:d2:78:9d:24:
36:6b:58:70:37:43:14:97:8a:01:e8:ac:07:26:d9:
72:c4:66:00:c4:cd:06:d1:ed:69:c8:3f:dd:e2:ac:
c3:6f:6b:76:80:82:1d:9d:e8:aa:39:22:39:8d:21:
1b:54:a7:9d:b1:dc:50:87:76:fd:37:1a:19:79:fb:
06:87:0a:42:89:cc:ce:89:83:03:76:40:9b:2e:dc:
6d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DC:33:45:DE:CC:65:95:E8:C0:49:26:DA:F1:DA:A4:A8:14:28:CD
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/YNwzRd7MZZXowEkm2vHapKgUKM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.146.0/23
83.137.159.0/24
88.151.56.0/23
88.209.198.0/24
88.209.201.0/24
88.209.216.0/24
88.209.226.0/24
88.209.228.0/24
88.209.232.0/22
88.209.254.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:2e:a5:93:95:68:bf:9d:c8:b3:ef:ce:5b:de:a6:e9:cb:94:
98:61:d7:95:00:f6:47:2f:f9:88:5a:0a:b5:94:03:23:de:42:
6c:81:e5:1b:73:61:8b:a4:21:fb:21:24:1e:59:e0:37:a2:90:
be:cf:3f:03:56:4f:da:cd:5f:e7:95:68:c5:7a:ab:74:9a:60:
78:2f:2c:42:97:03:61:6c:ea:33:2b:2f:59:a2:68:0d:3a:8f:
ff:79:85:eb:c5:c7:13:45:c1:fd:cd:75:f6:11:8b:2d:fe:8a:
69:3f:d9:b1:cd:ea:c0:7f:26:0e:74:92:c2:dc:7e:71:78:40:
6e:24:92:47:b9:50:20:19:15:65:83:c1:cb:b0:f6:a7:e5:ff:
50:18:c9:c4:af:e2:a7:1a:a5:45:66:48:6d:86:28:9d:6f:15:
7e:bd:ef:a6:3e:0c:1f:70:a5:48:34:fa:29:f8:92:55:e9:fe:
a2:a3:84:12:57:e1:01:71:07:fb:1b:b9:43:49:94:bb:ba:aa:
fb:2b:41:92:50:40:1b:81:3f:3c:33:a6:26:d9:14:28:0d:23:
e3:d0:e3:ed:db:9b:92:0f:e0:28:fd:a3:17:04:f4:6f:b7:be:
d2:b2:0f:e8:16:a8:bf:d6:9a:b7:c2:c2:7d:12:70:4c:b9:8f:
81:1e:8e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:44 2026 by rpki-client