Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/YD9VjWHyH-vfyC8n2lK0SYz_aFY.roa
File: YD9VjWHyH-vfyC8n2lK0SYz_aFY.roa (raw, json)
Hash identifier: WUKhyXws1SQvrjGVYbc+2Vfnn8gCZB6XHQcDtBS1m78=
Subject key identifier: 60:3F:55:8D:61:F2:1F:EB:DF:C8:2F:27:DA:52:B4:49:8C:FF:68:56
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A0D912ACBE755905DF8F97727E0045794B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/YD9VjWHyH-vfyC8n2lK0SYz_aFY.roa
Signing time: Fri 25 Sep 2026 14:57:54 +0000
ROA not before: Fri 25 Sep 2026 14:57:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 62.76.236.0/24 maxlen: 24
62.76.237.0/24 maxlen: 24
193.124.17.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
194.58.56.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.58.223.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.48.0/24 maxlen: 24
194.87.51.0/24 maxlen: 24
194.87.54.0/24 maxlen: 24
194.87.55.0/24 maxlen: 24
194.87.78.0/24 maxlen: 24
194.87.125.0/24 maxlen: 24
194.87.157.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.233.0/24 maxlen: 24
194.87.255.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
195.133.9.0/24 maxlen: 24
195.133.42.0/24 maxlen: 24
212.193.20.0/24 maxlen: 24
212.193.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 17:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:12:ac:be:75:59:05:df:8f:97:72:7e:00:45:79:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 25 14:57:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=603f558d61f21febdfc82f27da52b4498cff6856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:65:76:ae:46:86:f2:b8:57:a7:4c:4f:5c:c5:
68:47:ae:84:39:e5:cb:c9:c3:59:e6:a3:69:db:54:
b4:c9:25:63:f0:91:1e:11:76:ab:75:4b:6b:f4:dc:
72:44:1b:48:91:48:06:f9:b1:10:ca:33:84:97:a7:
b6:fc:f4:a3:17:57:71:a6:35:4e:5b:8e:88:5d:bf:
d0:c7:01:cf:2f:fa:5c:ce:66:31:62:bc:a3:c5:e2:
d9:b4:e9:c1:1e:07:6a:18:71:24:3d:6e:af:85:cc:
ca:76:d3:61:ec:7f:70:ab:5a:85:ef:da:0c:31:41:
2d:b7:ba:d2:02:87:8f:82:c9:6f:25:90:de:dc:bb:
b8:d4:c9:1f:80:5d:8b:e7:f2:08:83:fa:56:2f:ff:
c1:a3:09:b0:99:7e:1b:2b:b3:b9:71:2b:57:19:02:
fd:11:f8:d4:e4:64:e2:18:09:9d:36:c4:53:7d:cf:
0c:1d:26:1f:a2:22:39:6a:1b:c9:05:94:0d:40:ad:
1d:e2:c3:35:d1:2c:75:8d:5b:64:4f:09:91:f1:90:
b5:42:90:39:67:6e:27:d9:93:a8:86:85:ed:77:26:
20:8b:e3:2d:c1:17:c1:e9:45:ee:93:5e:2b:4f:a1:
7c:42:60:d5:61:aa:44:25:29:eb:c6:30:cd:bf:fb:
fa:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3F:55:8D:61:F2:1F:EB:DF:C8:2F:27:DA:52:B4:49:8C:FF:68:56
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/YD9VjWHyH-vfyC8n2lK0SYz_aFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.236.0/23
193.124.17.0/24
193.124.95.0/24
194.58.56.0/24
194.58.154.0/23
194.58.223.0/24
194.87.1.0/24
194.87.18.0/24
194.87.48.0/24
194.87.51.0/24
194.87.54.0/23
194.87.78.0/24
194.87.125.0/24
194.87.157.0/24
194.87.166.0/24
194.87.178.0/24
194.87.233.0/24
194.87.255.0/24
195.58.62.0/24
195.133.9.0/24
195.133.42.0/24
212.193.20.0/24
212.193.23.0/24
Signature Algorithm: sha256WithRSAEncryption
44:b1:18:a4:41:e5:f3:e4:af:ac:4a:98:bb:fd:0e:7d:0f:3f:
eb:0a:04:d3:68:2c:6f:5c:ab:e8:f8:9b:9f:fe:54:22:7d:ea:
25:9a:dd:8f:b6:df:ba:67:52:af:b9:b0:0b:47:43:d1:9b:99:
8b:3a:c2:fd:a8:2f:30:16:31:49:36:39:8d:de:88:5a:48:4d:
ab:91:c8:f1:67:f4:16:bf:ac:b1:91:6c:09:3e:d7:94:47:48:
a2:ec:11:d2:75:47:c8:9e:72:f4:56:9a:80:df:8a:dd:38:b8:
4d:11:ce:fc:30:52:d5:cc:6b:21:d6:0f:98:d8:e7:64:7f:0c:
2a:18:ae:dc:01:d9:9a:b4:72:a2:b0:ac:c6:87:52:d1:84:63:
77:e7:d0:7d:66:cf:b1:37:b0:42:ea:d9:b0:86:f4:3a:45:8a:
e6:a3:fb:ea:0f:24:58:ae:98:5f:4e:9d:fb:63:f1:aa:e4:4f:
a1:49:47:7e:83:c0:29:45:56:d5:ba:4b:24:61:67:57:40:a5:
6d:22:34:b5:e2:de:50:d9:ba:98:f3:20:33:6b:81:0c:4f:3d:
7f:0d:f4:9e:70:0c:55:12:fb:12:f8:1e:21:6a:8b:e0:60:90:
56:9b:ca:42:27:31:d9:7b:05:c4:07:e7:7d:bf:21:af:48:f4:
fa:0c:57:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:11:35 2026 by rpki-client