Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/yyonxWMV91Z2Iy_izhRbZlfmQz8.roa
File: yyonxWMV91Z2Iy_izhRbZlfmQz8.roa (raw, json)
Hash identifier: U35LAOz/goOJLZMkOqSlfS1X+wiK+fXvB4Ca7DHTgOo=
Subject key identifier: CB:2A:27:C5:63:15:F7:56:76:23:2F:E2:CE:14:5B:66:57:E6:43:3F
Certificate issuer: /CN=b441fc81be1c699bffc4528bdc9c93330125a36d
Certificate serial: 019F2368E19F07C3A91DBEC24926628A0836
Authority key identifier: B4:41:FC:81:BE:1C:69:9B:FF:C4:52:8B:DC:9C:93:33:01:25:A3:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEH8gb4caZv_xFKL3JyTMwElo20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/yyonxWMV91Z2Iy_izhRbZlfmQz8.roa
Signing time: Thu 02 Jul 2026 15:18:23 +0000
ROA not before: Thu 02 Jul 2026 15:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40627
IP address blocks: 80.81.128.0/20 maxlen: 32
185.23.248.0/22 maxlen: 32
2a04:28c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/tEH8gb4caZv_xFKL3JyTMwElo20.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/tEH8gb4caZv_xFKL3JyTMwElo20.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEH8gb4caZv_xFKL3JyTMwElo20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e1:9f:07:c3:a9:1d:be:c2:49:26:62:8a:08:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b441fc81be1c699bffc4528bdc9c93330125a36d
Validity
Not Before: Jul 2 15:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb2a27c56315f75676232fe2ce145b6657e6433f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:50:80:bc:68:d0:23:29:75:2c:fa:67:e9:6a:
90:7f:ff:47:3e:ba:42:b3:6a:78:d1:73:1c:7a:6a:
7f:3d:84:a2:5e:08:3b:42:8c:b6:1f:ca:6a:33:1f:
97:cc:e1:d9:f5:74:a7:95:71:7c:67:40:f5:98:04:
d8:88:10:8b:6c:7c:15:a4:e9:ac:74:d1:93:15:ba:
0a:f7:c6:65:5f:be:6f:4a:38:cd:e1:5d:ad:9c:dd:
6f:ba:fe:a2:c1:64:12:8f:c1:46:6f:3a:83:6d:d7:
87:72:f5:9e:71:5e:36:79:6e:94:6b:0a:a5:0e:44:
e5:0f:b0:fa:70:ec:8f:26:e5:c0:e9:dd:bc:6e:db:
eb:ca:da:44:e2:77:2b:05:b6:25:d2:45:f8:78:04:
8e:63:3c:2e:d1:28:0e:31:7d:2d:85:b1:0d:87:21:
5a:92:07:5e:b4:c1:b3:c3:df:79:81:0a:89:ea:d3:
58:01:24:d7:59:7f:b1:be:64:70:7b:74:cd:96:ac:
f0:0f:28:77:8f:ed:ea:4b:35:e5:89:c8:b5:32:57:
c1:72:db:a9:81:c7:31:0b:4e:d1:b4:a0:e5:a6:2a:
87:80:90:80:5b:b0:91:dd:e5:d5:bc:e5:fd:e1:6b:
23:ae:e0:40:f8:0d:ea:e3:39:23:c2:14:32:8a:8b:
19:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2A:27:C5:63:15:F7:56:76:23:2F:E2:CE:14:5B:66:57:E6:43:3F
X509v3 Authority Key Identifier:
keyid:B4:41:FC:81:BE:1C:69:9B:FF:C4:52:8B:DC:9C:93:33:01:25:A3:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEH8gb4caZv_xFKL3JyTMwElo20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/yyonxWMV91Z2Iy_izhRbZlfmQz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/tEH8gb4caZv_xFKL3JyTMwElo20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.81.128.0/20
185.23.248.0/22
IPv6:
2a04:28c0::/29
Signature Algorithm: sha256WithRSAEncryption
49:e2:94:91:bd:5f:00:05:56:d4:9c:5c:2b:dc:de:f0:ac:93:
69:1b:cb:aa:6d:fd:60:0e:44:8a:ac:3a:89:35:f0:b8:9c:25:
21:e4:6a:07:c0:ff:f5:51:a0:5d:71:f2:14:5b:3d:ff:64:53:
91:91:11:68:7b:95:d4:44:1e:bd:28:19:50:c1:e7:ae:14:1f:
95:86:f0:6e:a0:be:2e:52:42:e6:95:c1:97:12:40:3d:55:da:
58:c9:57:42:11:a6:e7:2d:0e:c0:76:18:5f:fc:0e:92:19:9b:
3f:51:6e:8e:b2:65:ac:e7:0e:12:33:cd:0b:d3:83:3e:aa:ab:
d7:d5:51:75:a5:f9:78:af:eb:a4:34:03:3b:7a:6f:16:33:64:
30:c0:a0:79:37:98:02:6d:a8:e2:a0:5c:ab:5e:2d:d9:20:c4:
c7:9c:92:9b:f0:3c:74:f6:ba:81:2c:b8:7f:56:e0:88:8f:25:
de:ca:b4:7e:f4:46:13:f0:1e:44:c8:e5:7a:67:05:82:72:f2:
34:97:31:ff:f3:88:b5:2c:0e:df:45:4a:10:da:5d:e1:5f:74:
5b:49:47:c0:56:10:f6:34:d1:de:cd:f5:be:c0:82:96:fd:c2:
48:59:e7:f9:ca:53:03:c6:21:ce:fe:b0:62:6a:ae:b1:2d:30:
0d:fe:92:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:15:06 2026 by rpki-client