Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/yqYb9KwfwwXKE2rcVISlhs45-I0.roa
File: yqYb9KwfwwXKE2rcVISlhs45-I0.roa (raw, json)
Hash identifier: oNoUQWiHNno5tw+lx0wfQhWSvrFVM7WgGPmf6DKYvLo=
Subject key identifier: CA:A6:1B:F4:AC:1F:C3:05:CA:13:6A:DC:54:84:A5:86:CE:39:F8:8D
Certificate issuer: /CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Certificate serial: 01A110F9A3EC01CD7022272F263F29DCA72A
Authority key identifier: B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/yqYb9KwfwwXKE2rcVISlhs45-I0.roa
Signing time: Tue 06 Oct 2026 11:29:18 +0000
ROA not before: Tue 06 Oct 2026 11:29:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44901
IP address blocks: 46.253.4.0/24 maxlen: 24
91.92.247.0/24 maxlen: 24
91.132.60.0/24 maxlen: 24
91.132.61.0/24 maxlen: 24
91.132.63.0/24 maxlen: 24
93.94.140.0/24 maxlen: 24
95.169.196.0/24 maxlen: 24
95.169.202.0/24 maxlen: 24
95.169.203.0/24 maxlen: 24
185.1.156.0/24 maxlen: 24
185.7.219.0/24 maxlen: 24
185.243.212.0/24 maxlen: 24
185.243.213.0/24 maxlen: 24
2a09:be80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:f9:a3:ec:01:cd:70:22:27:2f:26:3f:29:dc:a7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Validity
Not Before: Oct 6 11:29:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=caa61bf4ac1fc305ca136adc5484a586ce39f88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5e:02:81:28:20:ec:e2:f9:97:04:16:a2:57:
ef:77:ea:da:10:49:94:56:85:48:bd:be:c3:e0:b1:
da:3b:94:f0:99:78:9a:6a:ba:46:be:de:5a:62:43:
88:f8:11:90:f6:49:68:9e:2b:c2:6b:d2:41:70:cc:
13:cd:2c:0e:2b:49:ca:7d:fe:9c:ee:62:3a:01:66:
ed:78:96:cc:74:a4:03:6f:54:be:d0:ac:f8:01:50:
e1:33:74:e0:01:c8:9b:77:0b:38:06:73:e2:df:95:
a1:fb:e6:8f:7b:d7:11:9e:e5:95:27:1e:4c:a2:32:
1b:4c:d7:c7:c2:2f:57:ce:0a:32:6c:72:84:ac:cf:
d8:0f:d4:9d:b8:03:53:41:48:e6:48:6e:1f:c3:27:
9b:8b:31:d4:3c:5c:2a:b2:40:0b:95:a5:5f:63:92:
b8:d5:5a:b4:78:b5:4d:b7:3b:07:5b:e2:ba:ce:41:
01:e9:d6:e6:bd:32:95:06:d0:73:59:a9:81:e2:56:
05:90:da:5a:0a:66:14:4b:15:44:8e:2f:be:52:8a:
3a:95:40:4f:97:1e:c8:dc:89:54:b8:61:1c:20:df:
9d:c3:5e:00:8a:85:29:a4:0d:fc:9a:48:ae:99:16:
23:51:f4:f6:c4:d7:b3:b8:26:7c:11:33:aa:06:97:
f5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A6:1B:F4:AC:1F:C3:05:CA:13:6A:DC:54:84:A5:86:CE:39:F8:8D
X509v3 Authority Key Identifier:
keyid:B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/yqYb9KwfwwXKE2rcVISlhs45-I0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.4.0/24
91.92.247.0/24
91.132.60.0/23
91.132.63.0/24
93.94.140.0/24
95.169.196.0/24
95.169.202.0/23
185.1.156.0/24
185.7.219.0/24
185.243.212.0/23
IPv6:
2a09:be80::/32
Signature Algorithm: sha256WithRSAEncryption
6a:b5:53:06:7f:1e:19:69:75:d8:85:5c:89:10:6a:11:24:c2:
b7:00:df:5c:fd:52:c4:87:2e:75:fa:6a:91:55:34:aa:2a:e7:
b3:ae:d8:3d:b9:52:af:42:69:4e:23:fb:45:df:46:d7:41:29:
c9:60:63:f6:d4:41:7f:ee:3f:25:62:a4:ad:93:c3:69:cd:2e:
f2:de:4c:fd:ab:4e:e6:1c:bc:c4:fb:cf:77:cc:ec:16:d5:d1:
41:ab:cf:54:c9:96:75:1b:82:45:14:e7:0f:4f:f3:54:16:90:
fc:64:27:35:ef:92:95:f5:c6:ef:96:b5:ec:5e:dd:a8:b1:24:
8c:5e:0e:6d:a5:7b:f3:7f:a7:dd:5e:af:66:4f:01:03:7c:d4:
49:82:78:90:66:12:15:b6:59:69:e7:26:08:f4:97:9c:42:41:
1c:27:f3:54:de:cd:03:13:66:58:d8:d8:55:4d:1e:03:c6:8d:
c4:59:e3:9f:da:df:1c:cc:1b:51:63:ef:12:f3:43:34:94:05:
7a:14:52:19:c1:e6:6d:da:6d:ce:3e:ff:33:14:8c:ce:0b:44:
f0:eb:5f:0a:e5:ac:bf:89:19:ac:84:a5:f6:91:0c:63:ab:1d:
26:03:1d:45:af:c6:55:c9:75:41:5d:2d:a9:11:09:57:7a:6c:
26:60:90:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:17:05 2026 by rpki-client