Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/a438a5-b9b0-4802-9909-3845a42dae0b/1/y2ErD9gPt2srsosZxZsZGcaxQRw.roa
File: y2ErD9gPt2srsosZxZsZGcaxQRw.roa (raw, json)
Hash identifier: 0tcvB5250a30cb/eASboxE8tX1iGV0W6SMgOYqA9S+0=
Subject key identifier: CB:61:2B:0F:D8:0F:B7:6B:2B:B2:8B:19:C5:9B:19:19:C6:B1:41:1C
Certificate issuer: /CN=bd63ea4f2cbfb7c8d3d6819940d37764ac5bb7d8
Certificate serial: 019F241BB6151FE1121D0C806114811B5F6D
Authority key identifier: BD:63:EA:4F:2C:BF:B7:C8:D3:D6:81:99:40:D3:77:64:AC:5B:B7:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/a438a5-b9b0-4802-9909-3845a42dae0b/1/y2ErD9gPt2srsosZxZsZGcaxQRw.roa
Signing time: Thu 02 Jul 2026 18:33:43 +0000
ROA not before: Thu 02 Jul 2026 18:33:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211346
IP address blocks: 85.8.209.0/24 maxlen: 24
153.56.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/a438a5-b9b0-4802-9909-3845a42dae0b/1/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/a438a5-b9b0-4802-9909-3845a42dae0b/1/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:24:1b:b6:15:1f:e1:12:1d:0c:80:61:14:81:1b:5f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd63ea4f2cbfb7c8d3d6819940d37764ac5bb7d8
Validity
Not Before: Jul 2 18:33:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb612b0fd80fb76b2bb28b19c59b1919c6b1411c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:dd:81:74:a4:6e:bf:83:0e:ac:e6:c5:59:5a:
6e:2b:81:35:3a:08:9f:77:e7:15:2b:c0:79:06:7f:
e4:1c:27:7b:d4:ed:9b:62:68:bf:98:e6:5e:60:62:
5a:de:10:a3:4b:f3:49:c5:d2:e8:9e:81:92:4a:85:
c3:db:a0:15:de:86:48:61:90:7b:bd:cd:01:ce:e8:
22:b6:04:0c:51:0d:6d:f2:4c:32:1a:6a:56:bb:b7:
6c:39:5f:50:1e:c2:08:a7:11:2d:41:36:5f:67:b0:
8a:1d:f1:0d:be:87:69:7d:c2:6b:90:4a:65:11:7d:
1d:03:fd:96:84:fe:cf:37:3d:0d:61:05:64:2a:ad:
6c:5a:13:a7:ec:f5:df:6a:3a:e9:68:4e:b5:fe:e8:
02:af:2e:6f:0c:0a:fe:e8:f1:67:9d:77:84:1f:8a:
cd:8d:c3:ed:d7:1d:00:ca:5c:0e:ff:10:4f:4c:3a:
04:1f:2c:98:83:5b:8a:df:df:8e:1b:67:a0:06:da:
bb:05:25:11:50:e6:a1:81:47:88:a4:c0:bf:d8:a9:
e9:90:86:e4:5b:1a:2d:f6:7d:db:a4:8f:d3:91:a2:
5a:47:a2:7b:44:32:2a:e0:34:90:0d:72:db:d2:3d:
8b:89:bb:5a:c1:84:0d:d9:57:95:81:02:2f:e4:8d:
ce:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:61:2B:0F:D8:0F:B7:6B:2B:B2:8B:19:C5:9B:19:19:C6:B1:41:1C
X509v3 Authority Key Identifier:
keyid:BD:63:EA:4F:2C:BF:B7:C8:D3:D6:81:99:40:D3:77:64:AC:5B:B7:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a438a5-b9b0-4802-9909-3845a42dae0b/1/y2ErD9gPt2srsosZxZsZGcaxQRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a438a5-b9b0-4802-9909-3845a42dae0b/1/vWPqTyy_t8jT1oGZQNN3ZKxbt9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.209.0/24
153.56.142.0/24
Signature Algorithm: sha256WithRSAEncryption
42:15:b5:7d:c7:44:79:b5:7d:13:02:3c:c4:bb:05:a9:97:98:
7d:93:7e:2a:e9:55:29:c8:5c:bd:4c:d7:73:df:f0:22:35:d5:
0e:bc:77:7c:b0:30:a1:7d:b0:48:5f:df:5a:72:5e:5d:11:7d:
ed:90:4f:db:98:08:d1:68:4a:e3:6f:4b:e2:5f:b0:f9:f0:d1:
15:3d:f2:c9:f2:74:03:d9:78:4a:c0:4e:49:62:b8:5d:4c:02:
40:2b:b2:a2:53:a5:fe:13:29:d4:22:b7:5c:1a:12:29:17:aa:
06:6a:2f:b6:40:eb:26:ee:58:03:87:1e:c1:a8:aa:2d:24:c7:
8e:6e:1f:e2:70:24:3d:3a:ce:34:28:60:0c:0a:87:74:10:89:
77:4e:4f:bd:08:55:41:af:4b:b5:8d:82:c5:92:ab:0e:43:96:
f4:96:09:cf:f0:f4:88:af:fb:30:b6:c1:4c:81:20:b3:b0:3a:
9d:3b:f8:71:c5:36:b6:c9:ca:d1:54:16:56:f4:e6:32:26:dc:
df:b8:7f:bd:db:d2:c4:b9:e6:2b:52:e0:5d:e9:28:fa:74:74:
67:3f:c5:32:c2:c3:76:c7:77:06:57:b6:c2:94:18:af:dc:7f:
54:7f:76:dd:e0:92:93:63:47:0b:0d:48:f0:40:00:93:fe:f6:
33:5f:74:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:14 2026 by rpki-client