Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/YD46-wu1gX9Rfc3-h0IJxr5M_6I.roa
File: YD46-wu1gX9Rfc3-h0IJxr5M_6I.roa (raw, json)
Hash identifier: eydJEhyuH7mmIcl4Z67qIv5vGkaTb2dD7M7gIFncDbg=
Subject key identifier: 60:3E:3A:FB:0B:B5:81:7F:51:7D:CD:FE:87:42:09:C6:BE:4C:FF:A2
Certificate issuer: /CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Certificate serial: 0199B4F9E7D2493BE87D1CD933DDD0083361
Authority key identifier: C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/YD46-wu1gX9Rfc3-h0IJxr5M_6I.roa
Signing time: Sun 05 Oct 2025 15:25:00 +0000
ROA not before: Sun 05 Oct 2025 15:25:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34187
IP address blocks: 78.26.128.0/18 maxlen: 18
78.26.128.0/19 maxlen: 19
78.26.128.0/24 maxlen: 24
78.26.129.0/24 maxlen: 24
78.26.130.0/24 maxlen: 24
78.26.140.0/22 maxlen: 22
78.26.151.0/24 maxlen: 24
78.26.160.0/19 maxlen: 19
78.26.161.0/24 maxlen: 24
78.26.180.0/23 maxlen: 23
78.26.192.0/18 maxlen: 18
78.26.192.0/19 maxlen: 19
78.26.192.0/20 maxlen: 20
78.26.192.0/22 maxlen: 22
78.26.200.0/21 maxlen: 21
78.26.224.0/19 maxlen: 19
185.70.108.0/22 maxlen: 22
185.70.108.0/23 maxlen: 23
185.70.110.0/23 maxlen: 23
195.245.118.0/23 maxlen: 23
195.245.118.0/24 maxlen: 24
195.245.119.0/24 maxlen: 24
2a03:1240::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b4:f9:e7:d2:49:3b:e8:7d:1c:d9:33:dd:d0:08:33:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Validity
Not Before: Oct 5 15:25:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=603e3afb0bb5817f517dcdfe874209c6be4cffa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:30:d4:f6:7e:4a:e6:1f:5c:61:5d:d2:08:03:
e9:f1:13:66:5c:7b:02:58:a2:13:ff:fd:f4:e2:58:
49:19:90:f5:99:ad:12:b9:5e:d7:1d:3e:c5:19:04:
2e:6d:6f:db:e3:fe:41:57:20:4e:14:9a:85:71:a0:
92:1d:46:ea:8d:0b:05:d1:f4:d7:72:af:fb:20:d0:
ca:00:d3:dd:30:69:67:ff:5d:03:7a:a3:f9:41:43:
86:d8:e3:5c:7b:29:6a:86:d6:4f:61:3c:6b:28:84:
f9:50:1d:33:50:6a:7d:51:73:e6:0e:ad:59:e0:5f:
49:45:c0:d8:21:13:eb:33:e1:db:d6:db:0e:b5:68:
dc:19:d5:a1:ea:4f:35:35:b4:af:d7:3f:08:e9:d8:
42:18:45:d0:96:bc:95:eb:f7:76:93:b4:d8:d9:ca:
ca:f8:3e:c2:63:bd:1c:58:a1:3f:b1:8e:ba:02:35:
16:da:73:70:13:ef:bd:ec:89:a0:25:a6:c7:db:e6:
80:4d:82:97:52:7f:01:87:33:31:ac:e0:bb:b4:23:
fc:f4:68:9a:14:c5:c5:8f:4e:f4:19:6d:49:9f:4d:
f3:b3:09:b5:e8:bf:c2:32:98:db:70:0a:78:2b:b5:
90:b1:ac:67:f2:1b:d6:13:11:63:e2:0f:f7:47:eb:
c2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3E:3A:FB:0B:B5:81:7F:51:7D:CD:FE:87:42:09:C6:BE:4C:FF:A2
X509v3 Authority Key Identifier:
keyid:C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/YD46-wu1gX9Rfc3-h0IJxr5M_6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.26.128.0/17
185.70.108.0/22
195.245.118.0/23
IPv6:
2a03:1240::/48
Signature Algorithm: sha256WithRSAEncryption
4e:f7:87:1c:ce:29:df:5a:43:3f:1d:5b:68:c7:31:a5:0b:f8:
b3:65:9e:80:3e:e5:b6:f6:f4:b2:af:e3:db:ef:ae:e4:61:34:
f6:ce:a1:8a:a3:4a:e9:7e:ec:9d:a2:bd:9b:a8:43:75:d2:47:
59:a4:d7:61:6b:b7:2c:9b:af:e7:1a:bb:83:ca:db:4e:1f:50:
64:b1:70:54:41:1e:1b:1c:de:f8:b1:25:64:f3:7a:55:e7:8a:
0d:40:0d:e1:99:4e:f3:95:ec:bf:c5:7a:07:99:32:3e:e0:a2:
fc:7f:06:3e:87:b2:40:af:9d:6e:da:d5:7a:28:20:e9:1b:ab:
02:fb:64:2e:9c:47:ce:2c:a4:db:98:4c:30:aa:1d:a4:e1:48:
25:47:d9:07:25:64:4d:9e:8b:0a:77:07:a5:2b:d0:60:0c:e1:
93:7e:ed:c8:3a:91:c0:2a:22:70:ae:cd:9b:2e:e9:1d:42:21:
ba:ea:3c:a9:b2:69:1a:f6:e6:e9:56:68:74:f5:d4:a1:39:03:
af:8b:f7:36:4a:75:90:3c:8b:38:5c:d9:d1:4e:16:91:b8:1d:
43:c8:4a:c2:42:aa:8e:55:e0:dc:12:23:1a:a4:aa:6d:04:f9:
d8:92:64:2f:61:90:7b:09:be:d8:70:3e:70:e1:dc:de:d1:60:
ff:b0:2c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:42 2025 by rpki-client