Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/7c4576-a351-4db6-b011-32d63fa0c194/1/YSaufGYoBysG3Rq1JUwdvPVJmZs.roa
File: YSaufGYoBysG3Rq1JUwdvPVJmZs.roa (raw, json)
Hash identifier: 2pr9ejGkAE15sKcxVgGTcGKhYKEWqsjrG3vEI1IlltQ=
Subject key identifier: 61:26:AE:7C:66:28:07:2B:06:DD:1A:B5:25:4C:1D:BC:F5:49:99:9B
Certificate issuer: /CN=dee7aedf7f955514641c3a18f94fd94784f70ceb
Certificate serial: 019F79C6B89CAA4E7B559CD58DD8D7941303
Authority key identifier: DE:E7:AE:DF:7F:95:55:14:64:1C:3A:18:F9:4F:D9:47:84:F7:0C:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ueu33-VVRRkHDoY-U_ZR4T3DOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/7c4576-a351-4db6-b011-32d63fa0c194/1/YSaufGYoBysG3Rq1JUwdvPVJmZs.roa
Signing time: Sun 19 Jul 2026 09:48:14 +0000
ROA not before: Sun 19 Jul 2026 09:48:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35819
IP address blocks: 213.217.20.0/24 maxlen: 24
213.217.21.0/24 maxlen: 24
213.217.22.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/7c4576-a351-4db6-b011-32d63fa0c194/1/3ueu33-VVRRkHDoY-U_ZR4T3DOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/7c4576-a351-4db6-b011-32d63fa0c194/1/3ueu33-VVRRkHDoY-U_ZR4T3DOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ueu33-VVRRkHDoY-U_ZR4T3DOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:79:c6:b8:9c:aa:4e:7b:55:9c:d5:8d:d8:d7:94:13:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee7aedf7f955514641c3a18f94fd94784f70ceb
Validity
Not Before: Jul 19 09:48:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6126ae7c6628072b06dd1ab5254c1dbcf549999b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f5:06:a4:77:44:1f:c0:03:74:8b:66:7e:d1:
96:a1:8e:13:0f:fb:1d:58:ed:6d:f3:1c:f1:6f:31:
41:35:e8:1f:a1:9d:91:08:b9:02:f9:f9:39:45:fb:
a1:36:1e:38:40:ac:ca:e7:3c:14:ae:ac:21:0b:e0:
24:0a:92:97:8f:a9:db:3e:48:86:35:5e:fe:97:a7:
10:02:53:a8:e6:6f:19:dc:1c:f3:71:2e:b9:e2:c1:
9c:30:50:6e:98:14:cc:17:7b:e7:3c:cc:f3:e4:8d:
31:5c:14:02:32:4b:a3:a1:98:99:4f:4e:eb:7f:55:
97:54:52:e1:40:db:72:48:5b:0e:4a:8a:68:7c:9d:
77:72:7b:9c:12:b1:4e:4d:75:8a:ea:0a:9f:99:85:
b6:7e:34:56:8d:d5:93:d7:96:dd:b7:63:65:dd:be:
6a:82:c0:ac:5b:2d:77:bd:71:f1:a4:be:a0:e5:9f:
0a:f8:fe:23:ed:81:be:a9:13:29:62:52:ff:34:b1:
27:c2:4f:6f:55:f2:84:27:0b:c4:be:38:15:8d:4e:
33:21:a9:19:a2:b5:6e:52:83:80:46:15:85:8e:4a:
69:e0:94:c8:43:9f:56:70:a8:a2:cc:55:76:8f:2a:
38:5c:a6:b8:38:6d:2b:e9:95:73:30:29:7a:ff:c5:
65:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:26:AE:7C:66:28:07:2B:06:DD:1A:B5:25:4C:1D:BC:F5:49:99:9B
X509v3 Authority Key Identifier:
keyid:DE:E7:AE:DF:7F:95:55:14:64:1C:3A:18:F9:4F:D9:47:84:F7:0C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ueu33-VVRRkHDoY-U_ZR4T3DOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/7c4576-a351-4db6-b011-32d63fa0c194/1/YSaufGYoBysG3Rq1JUwdvPVJmZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/7c4576-a351-4db6-b011-32d63fa0c194/1/3ueu33-VVRRkHDoY-U_ZR4T3DOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.217.20.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:8e:63:0e:b8:ea:c4:76:57:8d:fb:81:1b:7e:a1:77:f4:da:
32:e1:b5:ce:24:a7:2d:36:2e:45:25:2e:7e:e1:af:11:e3:ff:
9d:c3:38:3c:7e:8a:62:c4:50:df:b5:9a:3d:e4:cb:d7:9a:83:
6b:7a:24:d8:f7:1a:c1:e8:83:f2:48:b9:1d:54:75:5a:b8:8e:
0e:52:39:4c:34:01:e7:87:80:54:0a:13:cd:54:0c:3d:ee:7d:
bc:62:ac:1c:f8:8b:ec:d4:49:61:1b:de:b7:e5:ff:ec:da:db:
8c:24:b1:5e:ce:6a:32:86:16:40:65:64:23:b3:f1:a6:e5:48:
ff:d0:00:f2:ab:35:04:8f:30:de:91:c6:36:10:da:22:26:e3:
be:eb:80:38:b6:31:12:15:a4:37:94:7a:81:30:95:3a:20:46:
62:4c:1c:4f:96:4e:9b:cc:94:ae:79:22:a9:85:a6:ac:1a:6f:
74:43:b8:49:0a:57:a1:89:24:de:97:56:b4:e6:7d:e2:99:7f:
4f:ff:d8:30:2f:48:d6:57:d9:8b:d8:ef:db:68:3f:a8:c1:5e:
46:61:dd:32:7f:ad:dc:63:ec:40:57:f0:38:79:00:a7:2a:61:
22:13:f5:58:8b:c7:da:28:13:29:02:34:d6:b4:40:b7:f6:26:
7c:54:2a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:43:41 2026 by rpki-client