Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/ytpxWALMMzMXxSAcFbBovYCQkDw.roa
File: ytpxWALMMzMXxSAcFbBovYCQkDw.roa (raw, json)
Hash identifier: tuj/U5H6ku6EtzVDyrVdq4eCW3Pp8DR50mZnV0/ryY0=
Subject key identifier: CA:DA:71:58:02:CC:33:33:17:C5:20:1C:15:B0:68:BD:80:90:90:3C
Certificate issuer: /CN=0f62a07378223ace56a84cefd3078228cb0be52e
Certificate serial: 019FB2D117DB57F50D9D9727E213BFA0E39A
Authority key identifier: 0F:62:A0:73:78:22:3A:CE:56:A8:4C:EF:D3:07:82:28:CB:0B:E5:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Kgc3giOs5WqEzv0weCKMsL5S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/ytpxWALMMzMXxSAcFbBovYCQkDw.roa
Signing time: Thu 30 Jul 2026 11:37:55 +0000
ROA not before: Thu 30 Jul 2026 11:37:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209740
IP address blocks: 91.90.84.0/24 maxlen: 24
91.90.85.0/24 maxlen: 24
91.90.86.0/24 maxlen: 24
91.90.87.0/24 maxlen: 24
185.15.136.0/24 maxlen: 24
185.202.38.0/24 maxlen: 24
192.145.11.0/24 maxlen: 24
2a0e:2780:aa00::/40 maxlen: 40
2a0e:2780:ff00::/40 maxlen: 40
2a0e:2787::/34 maxlen: 34
2a0e:2787:4000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/D2Kgc3giOs5WqEzv0weCKMsL5S4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/D2Kgc3giOs5WqEzv0weCKMsL5S4.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2Kgc3giOs5WqEzv0weCKMsL5S4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b2:d1:17:db:57:f5:0d:9d:97:27:e2:13:bf:a0:e3:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f62a07378223ace56a84cefd3078228cb0be52e
Validity
Not Before: Jul 30 11:37:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cada715802cc333317c5201c15b068bd8090903c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f6:55:ae:2f:90:3b:f8:22:b8:1c:04:5e:ac:
7c:5d:c6:ba:ab:90:73:f7:f2:e1:db:14:84:16:55:
4b:06:da:3b:bb:cb:57:d9:a4:ca:c0:6c:ac:52:dc:
07:ff:18:05:15:d9:3c:a6:6e:e7:bd:99:93:c8:a3:
59:5a:28:2a:22:9e:7b:ad:c8:8a:05:42:bb:01:cf:
aa:03:c5:5b:7a:25:e5:d5:23:2c:5f:e4:cc:89:b4:
f3:51:48:88:76:18:09:62:ad:de:a2:24:61:50:2d:
6b:ad:22:33:86:9e:8a:6a:d3:62:38:4e:1a:f8:3f:
75:21:8a:43:92:56:18:96:02:98:3d:10:55:a3:00:
e5:b0:30:9f:23:ea:f3:08:c9:03:f2:92:21:a1:39:
b3:64:13:e5:d3:00:85:45:e6:16:58:23:a4:ba:3a:
dc:ae:c8:4d:2a:2d:fa:4c:9d:44:19:86:89:07:d8:
2b:99:55:0f:63:12:75:22:98:89:1d:9e:d6:8a:77:
60:05:fb:9d:9d:77:d3:b5:30:06:4d:50:18:b2:5c:
55:56:97:7a:ff:4d:e1:60:05:1e:4a:1b:fd:63:7e:
ec:b6:8a:d1:fd:e1:e9:17:65:8c:e5:c0:cd:71:3c:
44:ca:c6:7e:89:50:02:89:ae:ba:8f:42:af:d0:43:
63:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DA:71:58:02:CC:33:33:17:C5:20:1C:15:B0:68:BD:80:90:90:3C
X509v3 Authority Key Identifier:
keyid:0F:62:A0:73:78:22:3A:CE:56:A8:4C:EF:D3:07:82:28:CB:0B:E5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Kgc3giOs5WqEzv0weCKMsL5S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/ytpxWALMMzMXxSAcFbBovYCQkDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1199a7-7b8a-4c9d-942e-8b062f0ed51b/1/D2Kgc3giOs5WqEzv0weCKMsL5S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.90.84.0/22
185.15.136.0/24
185.202.38.0/24
192.145.11.0/24
IPv6:
2a0e:2780:aa00::/40
2a0e:2780:ff00::/40
2a0e:2787::/33
Signature Algorithm: sha256WithRSAEncryption
80:f4:bd:b3:29:93:a7:2e:df:a5:0c:6e:d4:fb:00:82:3e:a5:
96:1c:3f:d7:63:f6:9b:d4:b6:50:76:2c:e8:50:62:a0:74:0f:
ae:cb:91:6a:24:1d:e0:66:d4:79:1f:a2:70:52:c2:87:bf:56:
ac:99:6a:bd:9e:37:7b:8c:38:f9:35:a7:00:01:60:a8:29:db:
c7:54:7a:3b:c8:7a:20:5d:00:c5:20:1a:f9:22:b0:dd:07:a7:
ed:8d:25:11:ac:cc:dd:2c:27:50:03:fc:9c:77:77:87:ee:e5:
7e:83:02:73:85:df:df:74:b4:e6:fc:37:9a:39:14:ed:6f:ce:
ac:13:a0:c1:da:41:22:a4:be:d1:61:ac:1f:a2:7c:9f:35:5e:
2f:81:54:06:ed:64:d5:ca:85:cc:b0:92:d1:e1:f1:16:27:6d:
89:4f:6a:98:e3:71:24:d5:5a:9b:e0:b2:4e:6f:7b:fe:05:00:
66:ac:53:8a:96:d4:ce:43:cd:e3:7a:bc:e1:99:05:5d:e5:53:
e2:7a:ca:71:aa:70:e6:aa:50:4b:de:9f:30:b4:71:1f:06:e2:
6e:c7:eb:30:71:f8:09:18:96:79:79:b4:1d:df:09:b8:30:ba:
76:6e:fd:67:79:b0:dd:fc:81:ca:81:a6:f2:65:9c:69:10:b6:
d5:f2:a5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:44:54 2026 by rpki-client