Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Yh_cG_0Lg3s43e8xlyEZJcntTUI.roa
File: Yh_cG_0Lg3s43e8xlyEZJcntTUI.roa (raw, json)
Hash identifier: EUvQ9IaRZU9um2l3a605iVhTXJjTdUoNNXPGLDUq/wk=
Subject key identifier: 62:1F:DC:1B:FD:0B:83:7B:38:DD:EF:31:97:21:19:25:C9:ED:4D:42
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019E0BB4C72E618E59224F115FFC073CAEA1
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Yh_cG_0Lg3s43e8xlyEZJcntTUI.roa
Signing time: Sat 09 May 2026 07:47:37 +0000
ROA not before: Sat 09 May 2026 07:47:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 194.231.131.0/24 maxlen: 24
194.231.148.0/24 maxlen: 24
194.231.151.0/24 maxlen: 24
194.231.152.0/24 maxlen: 24
194.231.159.0/24 maxlen: 24
194.231.214.0/24 maxlen: 24
194.231.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:0b:b4:c7:2e:61:8e:59:22:4f:11:5f:fc:07:3c:ae:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: May 9 07:47:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=621fdc1bfd0b837b38ddef3197211925c9ed4d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8f:27:a5:bb:63:9b:84:75:5c:d2:ca:61:e5:
d3:b5:c0:e6:9e:1f:4e:6c:bf:8f:68:25:c6:64:d1:
3b:53:47:15:1f:e8:80:cf:27:af:cc:d0:85:6c:41:
e7:b2:5a:7a:e6:3d:19:97:1f:e6:6a:45:5e:bb:c4:
c6:2a:d0:ac:4b:9c:2d:63:b2:8d:f1:bc:9c:a7:e0:
ac:35:e0:e0:66:33:74:3a:32:a5:82:6f:45:29:7e:
c4:e4:f5:45:39:3c:f5:e9:85:a1:d6:ef:b7:36:19:
62:41:8e:9a:20:7e:0f:33:ca:6f:45:32:64:9f:47:
18:06:a7:e6:3d:e7:c1:32:27:13:e8:13:66:f0:4a:
c8:b3:e4:9c:c0:4e:8b:08:af:2a:f2:a4:a9:ea:61:
ec:e0:e6:06:d1:ac:3c:b1:10:eb:f0:99:c6:2c:ab:
91:14:23:0e:df:8e:05:00:c3:a2:37:02:53:65:29:
3c:7b:26:f2:ca:77:6c:5a:7a:3a:50:4b:0b:a2:a4:
f7:b4:ed:1f:66:b0:0d:48:aa:38:43:89:1e:f6:9c:
d7:79:ac:5d:91:24:31:df:db:56:b4:96:c2:62:d9:
17:b5:98:81:52:ce:a2:8b:34:ee:27:ef:e8:48:ef:
39:3c:53:99:81:7e:86:df:19:c6:cc:dc:30:d6:b4:
c6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1F:DC:1B:FD:0B:83:7B:38:DD:EF:31:97:21:19:25:C9:ED:4D:42
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Yh_cG_0Lg3s43e8xlyEZJcntTUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.131.0/24
194.231.148.0/24
194.231.151.0-194.231.152.255
194.231.159.0/24
194.231.214.0/24
194.231.218.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:c5:64:fb:4d:57:90:e5:89:f7:6e:11:22:21:7c:29:b0:ae:
9b:13:a8:31:dc:a1:8f:69:a1:78:91:26:1d:d6:2c:74:5a:8a:
21:27:0f:60:5d:3a:53:ff:15:79:a9:b1:04:a8:7d:08:13:da:
90:5f:85:18:94:6c:ae:70:ab:ba:bf:5f:2e:8c:89:93:cc:5e:
2b:98:76:8b:6c:f1:b6:26:03:81:6e:f1:4a:0b:bc:3d:2d:f0:
5a:b7:19:6b:81:e4:14:aa:fd:d3:1f:0d:c8:29:e9:4f:b8:71:
b4:7c:97:3e:0e:bd:42:7b:52:44:1a:02:4a:eb:6b:79:34:1e:
fd:c3:a7:a3:19:41:39:be:30:d2:50:c9:14:6b:eb:cf:ff:1d:
38:57:24:39:29:d0:e1:4b:c7:29:b7:1f:8e:6c:93:c5:2f:95:
68:97:11:9a:e9:e2:ad:0c:6b:3c:ed:67:32:6b:68:9e:00:42:
9f:92:d9:3a:51:44:fc:a2:e8:48:1e:73:38:6c:72:d0:41:cb:
83:e7:9d:f7:90:89:85:a1:f1:cf:24:fd:75:a7:59:9d:16:a0:
7e:fd:3c:dd:cb:d8:25:d5:71:ba:5f:bf:96:4c:18:46:55:a6:
8d:87:cd:8f:fc:32:af:bd:4b:95:32:df:a6:d6:cf:2e:7a:24:
02:c0:ff:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:37 2026 by rpki-client