Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/ymtz7tZ7VsR7uhHtiM417mN1oGU.roa
File: ymtz7tZ7VsR7uhHtiM417mN1oGU.roa (raw, json)
Hash identifier: 7atGAbK/0riIRAfcbxTbkU3haIi42uU74/nAJ93XXGs=
Subject key identifier: CA:6B:73:EE:D6:7B:56:C4:7B:BA:11:ED:88:CE:35:EE:63:75:A0:65
Certificate issuer: /CN=d37969f5d253210b0abe8e07a086f608d6f2a0af
Certificate serial: 019E49EFDC870CDDE39CA3417B04845639F5
Authority key identifier: D3:79:69:F5:D2:53:21:0B:0A:BE:8E:07:A0:86:F6:08:D6:F2:A0:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03lp9dJTIQsKvo4HoIb2CNbyoK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/ymtz7tZ7VsR7uhHtiM417mN1oGU.roa
Signing time: Thu 21 May 2026 09:48:36 +0000
ROA not before: Thu 21 May 2026 09:48:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43030
IP address blocks: 77.95.0.0/21 maxlen: 21
77.95.0.0/24 maxlen: 24
77.95.1.0/24 maxlen: 24
77.95.2.0/24 maxlen: 24
77.95.3.0/24 maxlen: 24
77.95.4.0/24 maxlen: 24
77.95.5.0/24 maxlen: 24
77.95.6.0/24 maxlen: 24
77.95.7.0/24 maxlen: 24
185.194.198.0/24 maxlen: 24
2a0b:ae80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/03lp9dJTIQsKvo4HoIb2CNbyoK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:49:ef:dc:87:0c:dd:e3:9c:a3:41:7b:04:84:56:39:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d37969f5d253210b0abe8e07a086f608d6f2a0af
Validity
Not Before: May 21 09:48:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca6b73eed67b56c47bba11ed88ce35ee6375a065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f6:bc:80:4a:46:33:57:74:ec:3c:8b:ec:93:
f6:e5:fd:f2:12:71:55:67:3b:f2:ab:74:99:68:a6:
30:b2:e5:23:99:d0:45:ae:80:21:f2:48:f6:2b:3f:
fb:dd:2b:54:98:f9:5b:d6:2f:de:96:12:aa:58:d7:
9c:9f:84:6e:82:82:a9:b8:68:a5:9f:ce:d7:d8:4a:
09:76:12:3f:66:83:f2:bc:03:4f:9b:d8:99:94:d8:
31:f1:65:bc:9a:da:4e:ee:e1:c0:26:3f:30:69:ac:
ff:b2:d7:fe:0c:f5:92:23:aa:2a:d3:f6:5e:3d:cf:
30:7d:f3:2f:f2:05:d0:cb:68:9c:79:8d:d1:bc:c1:
6a:35:a2:cb:2b:a3:41:ba:a1:15:2f:52:3f:e9:84:
e1:38:0b:a9:0e:ac:e3:3d:a7:03:eb:ed:a6:a0:80:
20:1a:2a:41:2a:3b:fa:39:e5:68:1d:98:26:c3:3b:
95:e6:f9:7a:f7:20:c4:f0:b6:2f:e9:c4:5c:d1:85:
b4:56:e1:21:b8:07:84:6c:24:74:de:3d:d4:40:75:
cd:fe:44:2e:de:2d:c5:5e:96:d9:fc:96:a3:4d:74:
1a:66:35:2a:10:73:a4:9c:a9:ac:19:49:3a:bd:f2:
a9:72:8c:f1:56:65:0a:f5:28:b6:be:d1:05:70:00:
88:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6B:73:EE:D6:7B:56:C4:7B:BA:11:ED:88:CE:35:EE:63:75:A0:65
X509v3 Authority Key Identifier:
keyid:D3:79:69:F5:D2:53:21:0B:0A:BE:8E:07:A0:86:F6:08:D6:F2:A0:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03lp9dJTIQsKvo4HoIb2CNbyoK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/ymtz7tZ7VsR7uhHtiM417mN1oGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.0.0/21
185.194.198.0/24
IPv6:
2a0b:ae80::/32
Signature Algorithm: sha256WithRSAEncryption
ba:10:d4:a6:85:fa:bc:44:04:22:94:8f:c6:af:0e:da:be:3c:
3b:e2:06:07:e6:d5:43:07:c9:6d:99:62:42:d5:b2:b7:ce:22:
21:bb:1f:6b:77:e7:9b:32:36:3a:00:5e:90:76:db:42:7d:3e:
26:d8:fb:58:70:69:17:0e:8d:1b:09:86:98:f1:38:27:4c:d2:
6b:70:2e:dd:de:11:a4:4f:a9:22:e7:f8:34:08:16:f7:8a:ce:
be:03:10:22:50:07:dd:b2:ec:39:36:4c:6e:11:68:f1:79:6e:
e2:2f:2e:e6:9b:51:aa:e4:19:3e:b0:b2:38:ee:ab:a3:6a:31:
c9:f1:c1:c8:63:9a:d6:3d:a9:56:c9:31:60:eb:7f:61:1e:b9:
8d:12:c8:87:61:bb:71:ac:6a:fd:40:4f:bb:99:d9:65:98:0e:
df:60:0c:03:2e:67:e2:ca:b5:d3:bc:6d:9a:f0:26:58:3a:f1:
df:51:ce:c3:f5:de:e0:77:2f:db:8c:82:17:1d:2f:62:51:62:
74:2f:c3:56:3a:d1:38:0f:1c:18:24:33:e5:82:c0:6b:71:38:
75:f7:af:c3:23:ea:bc:b1:38:32:cc:00:eb:8d:ca:b0:ba:1b:
8a:84:e5:48:d3:91:64:16:d5:23:66:cc:1e:80:98:ea:2b:20:
34:3f:ca:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:16:46 2026 by rpki-client