Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/xL_yysVxAPdsrYICevey2Vz971A.roa
File: xL_yysVxAPdsrYICevey2Vz971A.roa (raw, json)
Hash identifier: qn+GTog2jjft9cK9VF7pwE1AmugQZ0rp7M4HUX7tk8k=
Subject key identifier: C4:BF:F2:CA:C5:71:00:F7:6C:AD:82:02:7A:F7:B2:D9:5C:FD:EF:50
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 01A1BF4677A0E35B9CF3B1C1A831EC913903
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/xL_yysVxAPdsrYICevey2Vz971A.roa
Signing time: Mon 09 Nov 2026 07:47:08 +0000
ROA not before: Mon 09 Nov 2026 07:47:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203020
IP address blocks: 45.74.144.0/22 maxlen: 32
45.74.144.0/24 maxlen: 32
45.74.145.0/24 maxlen: 32
45.74.146.0/24 maxlen: 32
45.74.147.0/24 maxlen: 32
45.74.148.0/22 maxlen: 32
45.142.24.0/24 maxlen: 24
45.142.25.0/24 maxlen: 32
45.142.27.0/24 maxlen: 32
62.101.160.0/24 maxlen: 24
103.93.40.0/24 maxlen: 32
103.93.41.0/24 maxlen: 32
103.93.42.0/24 maxlen: 32
103.93.43.0/24 maxlen: 32
103.111.0.0/22 maxlen: 32
103.124.164.0/24 maxlen: 32
103.124.165.0/24 maxlen: 32
103.124.166.0/24 maxlen: 32
103.204.120.0/24 maxlen: 32
103.204.122.0/24 maxlen: 32
103.204.123.0/24 maxlen: 32
109.104.132.0/24 maxlen: 32
109.104.133.0/24 maxlen: 32
109.104.134.0/24 maxlen: 32
109.104.140.0/24 maxlen: 32
109.104.141.0/24 maxlen: 32
144.48.52.0/24 maxlen: 32
144.48.53.0/24 maxlen: 32
185.153.124.0/22 maxlen: 32
185.233.124.0/22 maxlen: 32
199.168.120.0/24 maxlen: 32
199.168.121.0/24 maxlen: 32
199.168.122.0/24 maxlen: 32
199.168.123.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bf:46:77:a0:e3:5b:9c:f3:b1:c1:a8:31:ec:91:39:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Nov 9 07:47:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4bff2cac57100f76cad82027af7b2d95cfdef50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:82:51:df:02:a0:eb:fd:a0:43:69:86:94:4f:
43:f5:26:84:42:26:5e:d6:58:f3:17:b5:47:9f:67:
8a:22:d3:d2:c2:fa:16:60:4d:93:73:2a:0f:ff:b5:
b5:34:d2:12:f5:a1:ed:6f:2e:d0:38:76:d4:8e:76:
fc:17:8f:4a:44:46:7a:ff:0f:a4:e3:33:72:1b:58:
be:d8:9b:41:6b:03:04:56:c5:0c:27:6c:ef:b5:16:
fc:9f:fd:c8:9c:1b:1d:b0:d2:4c:2c:14:a9:83:89:
af:13:f2:08:4f:6c:bb:ff:cf:d4:fc:e8:cb:0e:97:
5a:2b:23:20:99:3c:51:f7:d2:f9:23:ad:5e:b9:3a:
42:49:77:59:94:18:40:99:d3:f1:4d:39:2c:ce:a8:
f6:1a:04:4b:95:98:be:fe:33:3d:61:73:37:d6:72:
b8:8d:ba:53:38:f4:2e:fd:78:b1:cc:55:72:70:12:
cd:8d:88:33:af:e1:af:10:91:4b:05:66:8f:2a:50:
52:5e:21:03:22:d0:53:75:7d:18:ea:fe:30:d5:50:
62:0a:6d:cb:84:a7:c6:03:af:91:07:bc:8e:4a:c0:
a2:73:2a:e4:66:81:89:bd:18:9a:f8:2b:b5:9e:0b:
03:9c:72:9b:a5:d4:80:d3:7b:2c:5e:60:41:7c:84:
80:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BF:F2:CA:C5:71:00:F7:6C:AD:82:02:7A:F7:B2:D9:5C:FD:EF:50
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/xL_yysVxAPdsrYICevey2Vz971A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.74.144.0/21
45.142.24.0/23
45.142.27.0/24
62.101.160.0/24
103.93.40.0/22
103.111.0.0/22
103.124.164.0-103.124.166.255
103.204.120.0/24
103.204.122.0/23
109.104.132.0-109.104.134.255
109.104.140.0/23
144.48.52.0/23
185.153.124.0/22
185.233.124.0/22
199.168.120.0/22
Signature Algorithm: sha256WithRSAEncryption
12:d4:65:eb:d3:63:96:75:a9:2b:56:08:ab:5b:07:7f:58:ee:
54:5f:08:35:8b:2e:40:70:4e:2e:ba:62:50:ff:0d:d4:65:62:
67:6d:29:e0:bb:9c:0a:d6:5d:9d:7d:93:96:ef:82:4f:6f:43:
53:24:d5:0b:ed:c5:4b:93:30:a1:e4:77:1c:2b:e1:00:9c:c0:
56:fd:05:8b:ea:40:08:9d:6a:f6:c9:38:3d:eb:96:60:10:fd:
0a:bf:da:72:0b:e6:1d:64:7f:f4:2e:ae:44:1f:3c:6a:50:52:
3b:03:9e:8f:03:f3:4b:23:08:20:3e:34:be:44:b0:9e:d1:15:
3b:2d:c6:c2:1a:b7:f3:c4:4a:dd:8d:7c:81:86:bf:49:b2:e9:
2a:15:5c:79:a0:03:40:38:4d:c1:ab:f4:11:09:18:52:da:9a:
ff:be:44:a0:80:df:22:e5:29:5b:1d:3c:3c:2d:c0:79:da:05:
01:5f:89:29:e3:b7:09:64:45:ff:e0:f6:d4:dc:81:f4:99:97:
55:14:0f:c4:7e:92:2f:1c:e2:f5:fe:00:8d:bf:65:48:8a:00:
9a:fd:dc:93:2c:65:f2:71:d7:70:16:e0:51:3b:94:71:ae:29:
62:e9:6e:a0:e4:06:64:1c:c5:50:f7:77:97:2a:63:c3:bb:23:
4c:d5:73:b3
-----BEGIN CERTIFICATE-----
MIIFYjCCBEqgAwIBAgISAaG/Rneg41uc87HBqDHskTkDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNGFkNDUzNWFjODhkZDUzNDE5OWYyYTcyNjA5NWFmNzFh
ZmU0NGUwHhcNMjYxMTA5MDc0NzA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNGJmZjJjYWM1NzEwMGY3NmNhZDgyMDI3YWY3YjJkOTVjZmRlZjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIJR3wKg6/2gQ2mGlE9D9SaEQiZe
1ljzF7VHn2eKItPSwvoWYE2TcyoP/7W1NNIS9aHtby7QOHbUjnb8F49KREZ6/w+k
4zNyG1i+2JtBawMEVsUMJ2zvtRb8n/3InBsdsNJMLBSpg4mvE/IIT2y7/8/U/OjL
DpdaKyMgmTxR99L5I61euTpCSXdZlBhAmdPxTTkszqj2GgRLlZi+/jM9YXM31nK4
jbpTOPQu/XixzFVycBLNjYgzr+GvEJFLBWaPKlBSXiEDItBTdX0Y6v4w1VBiCm3L
hKfGA6+RB7yOSsCicyrkZoGJvRia+Cu1ngsDnHKbpdSA03ssXmBBfISA3QIDAQAB
o4ICbjCCAmowHQYDVR0OBBYEFMS/8srFcQD3bK2CAnr3stlc/e9QMB8GA1UdIwQY
MBaAFGJK1FNayI3VNBmfKnJgla9xr+ROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTct
ZmI1OTQ5ODA4ZGRjLzEveExfeXlzVnhBUGRzcllJQ2V2ZXkyVno5NzFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTctZmI1OTQ5ODA4ZGRj
LzEvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGDBggrBgEFBQcBBwEB/wR0MHIwcAQCAAEwagMEAy1KkAME
AS2OGAMEAC2OGwMEAD5loAMEAmddKAMEAmdvADAMAwQCZ3ykAwQAZ3ymAwQAZ8x4
AwQBZ8x6MAwDBAJtaIQDBABtaIYDBAFtaIwDBAGQMDQDBAK5mXwDBAK56XwDBALH
qHgwDQYJKoZIhvcNAQELBQADggEBABLUZevTY5Z1qStWCKtbB39Y7lRfCDWLLkBw
Ti66YlD/DdRlYmdtKeC7nArWXZ19k5bvgk9vQ1Mk1QvtxUuTMKHkdxwr4QCcwFb9
BYvqQAidavbJOD3rlmAQ/Qq/2nIL5h1kf/QurkQfPGpQUjsDno8D80sjCCA+NL5E
sJ7RFTstxsIat/PESt2NfIGGv0my6SoVXHmgA0A4TcGr9BEJGFLamv++RKCA3yLl
KVsdPDwtwHnaBQFfiSnjtwlkRf/g9tTcgfSZl1UUD8R+ki8c4vX+AI2/ZUiKAJr9
3JMsZfJx13AW4FE7lHGuKWLpbqDkBmQcxVD3d5cqY8O7I0zVc7M=
-----END CERTIFICATE-----
Generated at Sat Nov 14 21:50:40 2026 by rpki-client