Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yAS167JWtuKPmVFXWitQfHoMHJQ.roa
File: yAS167JWtuKPmVFXWitQfHoMHJQ.roa (raw, json)
Hash identifier: ziBVyHw+C0E/8ubqvMIJIyWXfFd9J1B8R5zYuYNaiO4=
Subject key identifier: C8:04:B5:EB:B2:56:B6:E2:8F:99:51:57:5A:2B:50:7C:7A:0C:1C:94
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A1D64A923F8CEE7C663A0AF8972498CA51
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yAS167JWtuKPmVFXWitQfHoMHJQ.roa
Signing time: Fri 13 Nov 2026 19:02:53 +0000
ROA not before: Fri 13 Nov 2026 19:02:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 62.76.230.0/24 maxlen: 24
185.72.10.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
194.87.59.0/24 maxlen: 24
194.87.224.0/24 maxlen: 24
194.87.225.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.40.0/23 maxlen: 23
195.133.42.0/24 maxlen: 24
195.133.50.0/23 maxlen: 23
195.133.58.0/24 maxlen: 24
195.133.92.0/23 maxlen: 23
212.193.26.0/23 maxlen: 23
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d6:4a:92:3f:8c:ee:7c:66:3a:0a:f8:97:24:98:ca:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 13 19:02:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c804b5ebb256b6e28f9951575a2b507c7a0c1c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0e:d0:84:d2:cd:e6:6a:94:68:7d:00:06:63:
1f:fe:42:2c:97:da:14:ea:2e:e6:a7:b9:23:4d:2c:
78:e9:4d:4c:a1:ea:2e:63:1c:0e:4e:9e:d7:38:85:
52:67:3e:25:ac:53:c5:f1:2b:30:2c:ae:76:0f:87:
45:e4:af:50:30:d0:39:84:f4:64:f7:60:0f:d9:a8:
1b:42:b2:4c:a3:4a:57:15:80:73:02:81:23:45:ad:
47:aa:18:28:c2:36:5b:5e:6a:cc:ba:3d:ed:ef:e9:
2d:2d:fb:86:d1:6c:dc:aa:7b:7c:fd:f4:51:d4:0a:
c1:63:77:58:a8:d3:2a:21:96:09:f8:cb:68:dd:84:
2e:2d:de:87:2a:d3:c3:99:5d:45:37:c5:ef:eb:91:
89:68:e3:63:01:76:fe:30:95:75:d3:e3:4f:b3:cd:
1d:a1:81:02:88:52:62:ea:d8:40:d5:2e:22:26:7a:
c6:13:ef:b1:56:02:50:e7:f3:e5:4d:26:f7:ef:84:
25:10:2b:a9:0e:9e:1e:4b:26:cb:56:b9:15:df:7b:
2f:be:1a:80:9a:7c:c6:f8:0c:1b:ae:11:95:b3:a1:
42:1a:1f:ef:8b:ab:5c:14:4c:40:e5:ba:0e:c6:f2:
54:74:b0:7d:77:a1:39:77:45:3a:0b:d9:2c:e2:3d:
96:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:04:B5:EB:B2:56:B6:E2:8F:99:51:57:5A:2B:50:7C:7A:0C:1C:94
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yAS167JWtuKPmVFXWitQfHoMHJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.230.0/24
185.72.10.0/24
192.124.190.0/24
193.124.6.0/24
194.58.155.0/24
194.87.7.0/24
194.87.36.0/24
194.87.59.0/24
194.87.224.0/23
195.133.24.0/23
195.133.40.0-195.133.42.255
195.133.50.0/23
195.133.58.0/24
195.133.92.0/23
212.193.26.0/23
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
21:fc:01:d3:6e:a7:1b:ef:f5:76:50:62:95:82:8d:8e:63:26:
ba:8e:63:8c:94:70:2a:29:4b:10:2f:f6:c4:6d:26:20:cb:3b:
ed:7a:ad:84:6c:89:b3:7a:ed:87:47:af:07:5a:ce:d0:e9:f3:
f3:65:81:23:72:1a:8d:dd:fc:c5:8c:b4:30:c1:da:ce:90:8d:
79:d4:12:84:e9:0c:95:79:d1:b2:57:c7:8f:40:86:98:ed:91:
83:bd:95:d5:5d:2c:92:e9:ff:1f:b3:54:48:a3:c3:5f:0f:69:
19:e9:3d:e1:ca:2c:0e:1b:9f:61:88:e5:bd:66:34:39:cb:db:
b0:47:d7:6e:11:29:10:de:52:ee:6d:6d:ed:54:7a:b7:21:93:
05:a6:34:b0:65:5d:d8:25:0c:d0:ba:f4:92:e6:5b:43:b9:87:
cd:72:2b:ed:ce:65:c0:fe:32:71:03:b8:44:ea:a3:0c:aa:62:
30:bb:e8:d5:a7:e5:c8:03:a6:4a:e6:a5:d5:6b:22:d6:5c:3d:
e0:df:09:3b:5a:99:55:4c:e3:d6:f9:15:b8:b4:6f:90:88:1a:
30:a1:b2:be:d2:fa:73:34:8f:de:41:ef:a5:11:48:27:2e:a5:
6a:45:76:e2:d5:31:9d:2c:bb:57:ee:6b:de:a8:4e:0f:e2:d9:
5e:60:be:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:24:38 2026 by rpki-client