Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/YL5-cegmFZXufNHSGCwGwZa1g1s.roa
File: YL5-cegmFZXufNHSGCwGwZa1g1s.roa (raw, json)
Hash identifier: czEAZRcp2762Y56GS+8T7txRT5yj1pm9IuJDko2o2ew=
Subject key identifier: 60:BE:7E:71:E8:26:15:95:EE:7C:D1:D2:18:2C:06:C1:96:B5:83:5B
Certificate issuer: /CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Certificate serial: 01A0CDFBD09902E25F5895295894B387815A
Authority key identifier: 1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/YL5-cegmFZXufNHSGCwGwZa1g1s.roa
Signing time: Wed 23 Sep 2026 11:17:07 +0000
ROA not before: Wed 23 Sep 2026 11:17:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59521
IP address blocks: 45.115.108.0/22 maxlen: 22
45.149.52.0/24 maxlen: 24
82.163.44.0/22 maxlen: 22
103.55.100.0/22 maxlen: 22
195.72.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:fb:d0:99:02:e2:5f:58:95:29:58:94:b3:87:81:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Validity
Not Before: Sep 23 11:17:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=60be7e71e8261595ee7cd1d2182c06c196b5835b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8c:3d:ea:2a:39:2d:86:27:7f:3f:bf:33:78:
b1:6f:2e:0d:2f:6e:7b:3c:c3:11:6d:fc:26:d7:c2:
97:7f:d5:98:5b:ac:54:0e:6d:6c:a3:af:a3:11:a3:
f9:89:b1:4a:11:2c:2b:7c:58:4b:44:23:cc:89:a7:
d7:c2:14:85:a0:c3:52:15:ea:f2:f7:04:fc:ff:38:
4f:ce:92:da:13:a9:65:e2:4f:8d:65:26:4c:9e:ea:
b1:85:a8:23:55:e1:68:3f:b1:f8:d6:4b:11:aa:93:
70:a2:d9:53:aa:14:5c:57:59:44:fb:ca:5d:33:0b:
61:da:1a:ab:a5:23:7f:3c:a8:a5:ad:3c:5e:3d:1e:
ae:94:0d:db:5c:3a:3b:02:3e:d1:76:a6:69:bd:68:
cc:5d:cb:a3:72:4c:01:67:73:89:e4:69:3b:59:97:
d4:a4:c5:a5:f2:46:05:b4:4c:b4:86:31:51:5d:29:
c0:a2:ee:af:8d:c2:46:78:a8:6e:7b:52:d5:f9:10:
a6:0b:63:d3:b4:83:fc:e1:8e:d7:c6:d2:a4:e4:98:
30:f6:e7:93:da:20:89:b0:c7:c4:af:91:08:ec:38:
74:95:d2:97:58:cc:26:5f:c3:f4:05:12:9d:fa:30:
22:b9:5c:44:a2:b2:98:33:f8:04:3d:b2:77:97:74:
d7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BE:7E:71:E8:26:15:95:EE:7C:D1:D2:18:2C:06:C1:96:B5:83:5B
X509v3 Authority Key Identifier:
keyid:1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/YL5-cegmFZXufNHSGCwGwZa1g1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.115.108.0/22
45.149.52.0/24
82.163.44.0/22
103.55.100.0/22
195.72.124.0/22
Signature Algorithm: sha256WithRSAEncryption
81:5a:b1:2f:5b:07:4a:98:f4:d0:cf:c3:0d:fb:e1:33:5a:44:
64:c3:38:1b:70:1c:10:55:63:af:82:78:76:d5:85:af:41:d2:
1d:b4:a5:78:7e:b3:bc:24:de:91:8d:35:49:8c:08:1d:2c:17:
43:78:60:03:95:f0:0d:31:b1:b1:50:86:cb:2a:5d:a0:21:af:
6a:41:ad:19:f4:4a:d4:36:5a:ff:1e:00:f1:d4:74:56:3c:d7:
f2:34:2d:6f:6c:9d:99:c8:ba:26:90:ca:3e:9b:16:97:30:1b:
55:12:ac:18:49:7c:1a:6f:4c:23:2f:b0:d0:ab:bf:1d:31:54:
88:13:a0:8a:6e:3e:85:f6:26:3b:c9:71:43:28:c8:5f:e7:80:
8c:12:b3:0a:9a:1a:7e:47:a2:04:64:d3:5b:7a:5c:c4:a9:08:
09:06:fc:81:d0:a8:c8:57:d1:8a:a1:63:ee:94:3e:d1:b1:6f:
8d:bb:c0:56:04:68:c9:62:56:9a:72:09:96:fa:46:52:c3:f0:
f6:4b:9e:3c:fa:7d:85:7a:b9:f2:47:3c:67:da:08:3c:0f:15:
5e:c6:35:b4:ad:e1:65:b4:97:18:2f:ab:53:10:97:43:e6:11:
81:13:bf:2f:96:be:95:1b:e1:90:d0:65:44:d3:5d:4a:c8:74:
3a:aa:63:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 17:28:44 2026 by rpki-client