Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/YeHnQuaudJMH1H1wnqcYUdRaXFg.roa
File: YeHnQuaudJMH1H1wnqcYUdRaXFg.roa (raw, json)
Hash identifier: B03ovt4d/6ekKJcXh3AGG7Zk9EC45EsDdxVMN522cpk=
Subject key identifier: 61:E1:E7:42:E6:AE:74:93:07:D4:7D:70:9E:A7:18:51:D4:5A:5C:58
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019F7EEEF0BF9195AF9FAEF657263627CC8C
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/YeHnQuaudJMH1H1wnqcYUdRaXFg.roa
Signing time: Mon 20 Jul 2026 09:50:16 +0000
ROA not before: Mon 20 Jul 2026 09:50:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48511
IP address blocks: 95.46.196.0/24 maxlen: 24
146.120.222.0/23 maxlen: 24
2a02:128:22::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7e:ee:f0:bf:91:95:af:9f:ae:f6:57:26:36:27:cc:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jul 20 09:50:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61e1e742e6ae749307d47d709ea71851d45a5c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:20:a9:4a:7a:68:56:dd:37:a6:fc:b9:36:91:
02:89:a1:31:b1:74:f2:f5:61:78:90:17:24:0a:38:
47:4d:c7:94:78:32:99:2f:74:9a:df:3a:14:4c:7e:
95:3f:86:aa:ad:28:40:d4:f6:7b:ee:4e:72:47:ad:
05:26:ef:bb:49:80:de:bf:17:b0:b8:d6:47:68:ce:
73:bb:f1:5f:39:66:f4:09:a3:d9:07:a6:f9:69:18:
e8:0d:7a:6d:e9:de:65:78:c0:29:8e:be:d4:12:28:
71:a5:87:f0:94:c5:13:3c:a1:38:af:73:69:fe:cf:
ea:71:a0:a7:b9:5e:eb:1d:2f:32:13:86:0f:21:70:
56:00:ad:de:54:14:aa:bb:c7:3d:f2:fc:8c:14:4c:
e9:24:cf:c8:c9:a8:cb:7c:98:c8:a2:a2:56:10:a1:
a2:3c:52:97:0e:98:ca:14:14:b7:f4:ff:db:4a:d6:
dc:c8:d8:5b:c1:a1:a5:1d:8b:ee:45:f1:ef:10:f4:
cf:d8:0a:09:a7:c3:cb:8b:91:65:95:72:a6:9f:fa:
d2:60:9a:f7:22:ac:3c:ab:94:78:cc:35:14:a9:77:
23:5a:3f:67:b8:c1:7b:a7:bd:46:d9:77:cf:96:a5:
56:fa:22:61:a7:e3:e9:51:ec:aa:4d:01:ec:ee:28:
46:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E1:E7:42:E6:AE:74:93:07:D4:7D:70:9E:A7:18:51:D4:5A:5C:58
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/YeHnQuaudJMH1H1wnqcYUdRaXFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.196.0/24
146.120.222.0/23
IPv6:
2a02:128:22::/48
Signature Algorithm: sha256WithRSAEncryption
a6:6a:a2:9c:12:c4:06:5a:f8:16:46:ff:1f:7b:c9:7c:28:7f:
80:a4:e1:64:46:65:ab:82:c6:c4:f4:0e:83:7f:23:c8:51:f3:
52:60:a9:61:19:96:e2:a2:a0:6f:fa:a0:13:38:fc:77:65:78:
2c:e4:83:e1:a6:12:f7:ff:c1:07:de:0e:59:96:4f:4c:6a:6f:
6e:b1:fe:01:b4:ae:e3:6d:90:5c:a4:8d:23:ba:e6:e4:d3:7c:
fb:82:86:78:62:34:a0:ed:c7:33:d6:26:56:6f:3f:4e:57:d7:
5a:3d:cf:a3:31:43:1d:26:9f:8c:bb:fb:76:b2:a3:3e:2a:6f:
14:01:ed:76:68:5a:7b:c6:e4:a5:b1:a7:65:55:81:83:d4:fe:
f1:37:e4:41:cd:10:41:48:e5:fc:00:82:9f:26:67:3b:e1:4f:
43:5b:00:aa:fb:18:85:93:9a:f8:15:04:f8:a7:01:96:8b:f7:
a8:3d:04:ce:08:7b:1d:74:a7:c2:98:7f:9c:a0:43:8a:ee:0f:
6c:29:29:33:68:27:27:36:f4:c8:c5:23:7a:8e:0c:b3:c0:39:
91:05:1d:c6:2e:8d:76:41:48:06:85:8d:c7:45:39:77:e0:77:
fd:95:3e:49:5b:b3:03:48:a9:77:e2:ad:d8:e9:ae:4c:e9:51:
24:b5:6f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:37 2026 by rpki-client