Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/yL0hxGs-iDWvNvAyxt8xT1zHaR8.roa
File: yL0hxGs-iDWvNvAyxt8xT1zHaR8.roa (raw, json)
Hash identifier: BVWyk3NMs+7Xt86vWb448KpKWpUV6n9NpVqigWIYXSY=
Subject key identifier: C8:BD:21:C4:6B:3E:88:35:AF:36:F0:32:C6:DF:31:4F:5C:C7:69:1F
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F8D54D6EFFE8393EA4AEDD80D9AC4E329
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/yL0hxGs-iDWvNvAyxt8xT1zHaR8.roa
Signing time: Thu 23 Jul 2026 04:56:15 +0000
ROA not before: Thu 23 Jul 2026 04:56:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42960
IP address blocks: 195.21.155.0/24 maxlen: 24
212.189.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8d:54:d6:ef:fe:83:93:ea:4a:ed:d8:0d:9a:c4:e3:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 23 04:56:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8bd21c46b3e8835af36f032c6df314f5cc7691f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2d:49:8e:18:70:3b:e8:57:d3:68:a9:6d:8f:
ad:bf:73:2a:52:b2:af:be:ae:c6:23:6d:2a:ed:6d:
bf:99:86:bb:be:26:36:83:9e:bc:9f:4a:3d:27:eb:
2c:b6:62:c4:7f:66:e2:25:0a:95:e3:8f:e9:32:3f:
01:9a:1c:d4:c4:e5:22:3e:58:7b:06:c6:3a:7f:7b:
38:f6:2c:34:94:a8:ab:ff:04:5c:cf:3b:08:50:ff:
1c:ca:05:a0:4e:fa:f0:b8:83:10:07:8d:4a:e1:de:
ff:5b:45:fc:11:44:df:04:ec:2b:93:4b:00:f6:7e:
e6:a3:ea:d1:43:61:7f:be:0a:ba:7c:3a:0c:d7:ef:
6c:8a:92:25:fc:6d:74:7f:18:7e:e4:3b:ed:dc:a2:
49:37:90:eb:d0:ee:60:16:49:60:c8:5f:f6:03:cf:
3a:cc:5e:7a:a4:fd:7f:72:f9:75:32:10:1e:ff:93:
79:9b:9c:eb:a8:c8:09:02:7d:6a:d1:5d:d7:72:40:
a7:7f:84:78:37:eb:a2:aa:6b:4b:b3:53:c9:00:6b:
8b:39:c4:18:05:3d:79:58:e0:a2:17:bc:c7:f8:73:
cc:b3:07:42:ab:b1:81:3a:b5:ec:5b:ba:98:f5:4a:
33:c4:1b:11:c0:12:1d:bc:07:12:c7:29:4b:2f:f0:
b6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BD:21:C4:6B:3E:88:35:AF:36:F0:32:C6:DF:31:4F:5C:C7:69:1F
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/yL0hxGs-iDWvNvAyxt8xT1zHaR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.21.155.0/24
212.189.21.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:83:e2:d9:32:e3:f6:ec:de:f4:4f:ee:3e:43:7f:32:ad:b8:
2e:df:02:04:ca:6f:20:ad:8a:18:7b:fe:a2:b5:37:9b:33:c5:
35:b8:56:32:d3:f8:f3:78:73:38:f1:8f:c0:12:9b:54:51:10:
e8:64:a9:71:15:a5:c6:63:81:0a:9b:e8:4e:4f:dc:2b:33:b9:
c1:75:33:f1:68:86:ff:6c:87:39:aa:16:95:e4:7e:2b:b7:94:
d5:de:c7:ea:80:10:60:06:df:fe:e1:a4:b8:07:72:8f:3c:37:
cd:ac:6d:db:e4:95:2f:28:fa:30:b5:fa:d5:d6:60:98:8b:91:
72:8d:24:2f:51:c8:b3:57:54:8b:5e:16:a6:34:5b:3f:d8:f3:
ae:33:3c:21:65:7b:3e:1b:ff:0a:b9:98:06:f2:76:d7:13:0a:
09:5c:63:b5:01:2f:88:33:6e:8b:c2:5f:bc:55:7b:55:6b:22:
89:7f:71:a2:74:2b:e5:fc:df:e4:72:fe:4a:33:4b:86:ff:7f:
57:7b:51:2d:03:8f:fe:ae:d0:d8:3b:b8:42:7c:9e:f5:bc:0e:
78:43:3e:99:be:fa:e4:fb:8e:f2:49:53:29:47:4d:5a:f9:ac:
c7:f8:af:7d:f6:ae:11:c1:ec:ee:be:d2:bd:eb:64:51:cd:0f:
ea:02:15:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:50:22 2026 by rpki-client