Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/d66980-0b09-4d43-8f90-4a0d9fa36d7c/1/y1qTPFc9nEBHFkIIxjazaZniV5A.roa
File: y1qTPFc9nEBHFkIIxjazaZniV5A.roa (raw, json)
Hash identifier: c0mlcsP+bxhTMMT16pbKRSeMM6JZvi9SMVaM+mKhg+E=
Subject key identifier: CB:5A:93:3C:57:3D:9C:40:47:16:42:08:C6:36:B3:69:99:E2:57:90
Certificate issuer: /CN=0645aec22aa5a99cd5e137883c57971620e0845c
Certificate serial: 01A0CD8875958941FCE667C67683B68110A3
Authority key identifier: 06:45:AE:C2:2A:A5:A9:9C:D5:E1:37:88:3C:57:97:16:20:E0:84:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkWuwiqlqZzV4TeIPFeXFiDghFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d66980-0b09-4d43-8f90-4a0d9fa36d7c/1/y1qTPFc9nEBHFkIIxjazaZniV5A.roa
Signing time: Wed 23 Sep 2026 09:11:07 +0000
ROA not before: Wed 23 Sep 2026 09:11:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42266
IP address blocks: 87.101.32.0/21 maxlen: 24
87.101.32.0/22 maxlen: 24
87.101.36.0/22 maxlen: 24
87.101.40.0/21 maxlen: 24
87.101.40.0/22 maxlen: 24
87.101.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d66980-0b09-4d43-8f90-4a0d9fa36d7c/1/BkWuwiqlqZzV4TeIPFeXFiDghFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d66980-0b09-4d43-8f90-4a0d9fa36d7c/1/BkWuwiqlqZzV4TeIPFeXFiDghFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkWuwiqlqZzV4TeIPFeXFiDghFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:88:75:95:89:41:fc:e6:67:c6:76:83:b6:81:10:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0645aec22aa5a99cd5e137883c57971620e0845c
Validity
Not Before: Sep 23 09:11:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb5a933c573d9c4047164208c636b36999e25790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4b:5a:72:7d:9b:bb:ef:4d:6f:4b:15:03:ac:
bb:78:2d:59:b8:ca:0e:73:23:f1:9b:16:f9:ea:ad:
90:c2:ac:41:31:07:60:31:82:2b:e4:60:f0:64:d6:
44:5e:8a:52:89:d2:14:9a:e5:4f:6f:33:11:2f:74:
d0:e1:a8:6d:44:83:ec:07:e1:b2:a9:99:c7:90:34:
bd:05:9b:a1:16:d5:ed:eb:ba:a6:83:82:c6:7c:99:
f1:ba:f7:52:d8:c9:57:81:99:49:9e:e8:88:71:55:
19:a4:57:8e:b4:43:18:9a:b9:5c:61:ad:a8:63:3a:
01:84:41:1e:64:31:78:54:8a:91:4e:08:9b:a0:d4:
71:4d:b8:e0:14:7f:be:4d:7a:72:e2:04:6c:1c:e9:
77:14:aa:d0:fb:e0:3b:bd:f9:5e:5e:45:0d:cb:15:
ef:1f:4c:02:66:a4:a2:a4:a5:04:51:c0:54:eb:38:
82:1f:81:7c:d2:64:74:da:24:75:7c:f4:39:2f:e8:
d6:cd:55:1b:44:f4:b9:fc:ce:ff:3e:de:a0:df:9f:
d1:9b:43:67:02:6e:db:16:7d:cd:f7:71:cb:2b:59:
30:02:8c:60:f3:fc:a7:ee:6d:b3:96:18:be:45:67:
77:57:87:06:fc:b1:0f:2f:ad:10:3b:1d:c2:ad:1d:
91:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5A:93:3C:57:3D:9C:40:47:16:42:08:C6:36:B3:69:99:E2:57:90
X509v3 Authority Key Identifier:
keyid:06:45:AE:C2:2A:A5:A9:9C:D5:E1:37:88:3C:57:97:16:20:E0:84:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkWuwiqlqZzV4TeIPFeXFiDghFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d66980-0b09-4d43-8f90-4a0d9fa36d7c/1/y1qTPFc9nEBHFkIIxjazaZniV5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d66980-0b09-4d43-8f90-4a0d9fa36d7c/1/BkWuwiqlqZzV4TeIPFeXFiDghFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.101.32.0/20
Signature Algorithm: sha256WithRSAEncryption
56:c5:2d:c4:86:54:fb:a9:4e:59:c1:09:44:2f:85:72:4f:58:
8e:07:6a:63:95:56:75:90:b5:11:40:ae:c5:ff:4b:56:33:75:
c1:bb:ae:ec:44:9c:fa:52:3f:52:6d:52:e1:17:c6:c0:2f:d4:
e3:d1:c1:15:11:d3:cd:e2:47:62:72:02:6d:e9:8e:f4:15:2b:
9d:88:65:8b:2d:8f:d3:e1:8a:83:a8:96:42:6d:bc:a3:f7:a4:
b8:63:ec:0c:95:68:15:26:f6:72:91:34:ac:0f:7c:55:50:02:
70:8f:78:4b:d2:24:60:28:bd:a8:f4:9d:9e:f5:45:46:1e:b5:
0f:f0:99:1f:2c:86:75:3d:14:f9:dc:d4:4d:e5:81:4a:56:4b:
d3:0f:de:06:d5:86:cb:34:e8:f6:1b:ae:d5:63:2c:a8:e8:f9:
57:ad:cd:03:c2:50:3c:e9:13:26:5b:04:00:e2:52:6d:35:77:
76:55:bf:34:ad:51:da:3f:61:9b:2a:44:0c:a5:c1:b4:63:6c:
c1:de:88:07:0c:2d:2c:c2:3a:29:d5:c6:1d:3c:fa:11:44:8e:
10:0d:92:47:d5:11:71:d5:54:ed:a9:bb:fa:52:b7:a4:bd:97:
22:b6:7a:51:49:42:ba:ec:e2:3c:e2:89:f3:d6:90:be:f6:58:
e9:e0:5e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:29:25 2026 by rpki-client