Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/YQKMXVm06N8zD3NDnbfHYsCtcuU.roa
File: YQKMXVm06N8zD3NDnbfHYsCtcuU.roa (raw, json)
Hash identifier: 4zO+32jaiCVPHg0DG0Z719jsGnydWv+/YMvSSq/GIt4=
Subject key identifier: 61:02:8C:5D:59:B4:E8:DF:33:0F:73:43:9D:B7:C7:62:C0:AD:72:E5
Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Certificate serial: 019DF2B92FDD8D84F1AEB079F3E26D1CDB29
Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/YQKMXVm06N8zD3NDnbfHYsCtcuU.roa
Signing time: Mon 04 May 2026 11:21:55 +0000
ROA not before: Mon 04 May 2026 11:21:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 5.45.64.0/21 maxlen: 21
5.45.72.0/22 maxlen: 22
5.45.76.0/22 maxlen: 22
5.45.84.0/22 maxlen: 22
5.45.88.0/22 maxlen: 22
5.45.92.0/22 maxlen: 22
5.61.48.0/22 maxlen: 22
5.61.52.0/22 maxlen: 22
5.61.56.0/22 maxlen: 22
37.1.200.0/21 maxlen: 21
37.1.216.0/21 maxlen: 21
37.252.3.0/24 maxlen: 24
37.252.13.0/24 maxlen: 24
37.252.14.0/23 maxlen: 23
45.136.48.0/22 maxlen: 22
45.137.212.0/24 maxlen: 24
45.137.213.0/24 maxlen: 24
45.137.214.0/24 maxlen: 24
45.137.215.0/24 maxlen: 24
62.197.48.0/23 maxlen: 23
176.97.79.0/24 maxlen: 24
185.238.168.0/23 maxlen: 23
185.238.170.0/23 maxlen: 23
188.116.20.0/24 maxlen: 24
188.116.21.0/24 maxlen: 24
188.116.23.0/24 maxlen: 24
188.116.24.0/24 maxlen: 24
188.116.25.0/24 maxlen: 24
188.116.26.0/24 maxlen: 24
188.116.27.0/24 maxlen: 24
195.54.174.0/23 maxlen: 23
213.142.146.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f2:b9:2f:dd:8d:84:f1:ae:b0:79:f3:e2:6d:1c:db:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7
Validity
Not Before: May 4 11:21:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61028c5d59b4e8df330f73439db7c762c0ad72e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:34:15:4d:f3:14:06:24:6e:83:d5:c6:ee:c2:
54:d7:76:f2:53:d3:67:46:f7:9e:c7:b7:0f:17:af:
fe:e7:b4:28:e5:56:50:fe:ad:a7:02:b2:65:81:c2:
3a:79:cd:9b:a6:7f:13:19:36:c2:4f:42:57:5e:01:
6d:2f:89:49:51:98:5e:a2:b8:c3:68:58:4b:e8:33:
a6:44:cd:29:33:cc:65:ad:a6:6e:f6:51:9a:28:22:
3d:83:be:19:6a:da:0a:c8:58:44:73:82:a8:29:fe:
43:25:b9:6f:0b:fa:7a:1d:7d:6d:fa:58:25:ad:3d:
09:d0:55:a6:ca:72:0a:7f:5c:cc:d1:f0:6c:38:e8:
fe:8c:b4:bd:57:60:cb:66:a3:5e:68:7d:90:14:b5:
10:68:4d:20:0d:37:8f:79:72:8a:38:0d:a9:1b:da:
1c:9d:4f:9a:b6:7f:3a:9c:c9:a9:1f:6f:a7:32:a6:
d3:a5:bb:7e:ff:ee:3e:c9:79:d6:72:ac:71:b1:20:
dc:92:7b:9b:3c:f0:cf:76:eb:92:a2:6b:7f:0d:e2:
5e:79:89:21:23:f6:b2:50:64:24:4a:31:d8:b5:8f:
39:e2:c1:ad:6e:cd:a7:0f:a2:57:96:61:3e:71:ce:
56:d1:b6:c4:06:e9:41:b5:6a:8d:02:ed:dd:36:35:
fb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:02:8C:5D:59:B4:E8:DF:33:0F:73:43:9D:B7:C7:62:C0:AD:72:E5
X509v3 Authority Key Identifier:
keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/YQKMXVm06N8zD3NDnbfHYsCtcuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.64.0/20
5.45.84.0-5.45.95.255
5.61.48.0-5.61.59.255
37.1.200.0/21
37.1.216.0/21
37.252.3.0/24
37.252.13.0-37.252.15.255
45.136.48.0/22
45.137.212.0/22
62.197.48.0/23
176.97.79.0/24
185.238.168.0/22
188.116.20.0/23
188.116.23.0-188.116.27.255
195.54.174.0/23
213.142.146.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:e4:9b:ca:7c:b2:38:f8:f6:1b:26:7d:ff:81:e4:ae:69:27:
97:ee:07:d5:e7:69:36:b0:4e:f7:c8:99:3e:a8:7d:4f:e1:41:
75:df:7f:64:a0:d7:30:d5:e4:77:19:19:f5:01:90:fc:59:4a:
05:c7:63:c8:da:b7:8d:cc:a8:c8:b9:c0:11:90:b2:ff:a7:5e:
47:06:f2:80:64:cd:51:82:d5:f0:6d:a0:03:0f:42:a6:32:e0:
25:82:73:b0:73:ee:0f:37:41:0b:8c:91:3f:63:1b:15:43:23:
53:ac:3e:a0:10:8b:db:eb:e3:ea:2d:67:a4:39:e3:f5:ef:37:
82:63:b5:d2:b7:aa:ff:c4:f7:a6:0e:d4:b9:0e:0d:cc:31:1c:
a0:55:ac:cd:57:eb:44:85:67:46:24:9d:bb:80:30:2e:23:5b:
a8:f8:47:07:5f:8d:ca:bc:fb:cc:71:99:c9:16:57:74:61:13:
a3:d2:72:7f:2c:8d:7c:0c:26:80:6c:60:b5:52:c8:65:02:b7:
29:84:f6:f4:26:3a:1c:8a:e3:4f:f3:07:c3:7b:bd:99:f2:32:
20:0d:f7:fd:88:cb:b4:47:fd:27:ef:c9:2a:83:98:94:60:b0:
e9:47:14:dc:03:a2:99:fe:dd:b0:41:7b:0f:6d:b4:1f:61:0f:
b8:fd:5b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:14:17 2026 by rpki-client