Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/ySnZHtp6cJwxMtQWa0uJPnGnXXU.roa
File: ySnZHtp6cJwxMtQWa0uJPnGnXXU.roa (raw, json)
Hash identifier: 3nfAqDZ+jchkof/hQMbxPVQAHcDXX0FbrKywJk2nvzA=
Subject key identifier: C9:29:D9:1E:DA:7A:70:9C:31:32:D4:16:6B:4B:89:3E:71:A7:5D:75
Certificate issuer: /CN=015b6d1596ac0501a71a393447051a62ff1dda16
Certificate serial: 019F17F734E15B2CA415F2EADC1254672B42
Authority key identifier: 01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/ySnZHtp6cJwxMtQWa0uJPnGnXXU.roa
Signing time: Tue 30 Jun 2026 09:58:24 +0000
ROA not before: Tue 30 Jun 2026 09:58:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47626
IP address blocks: 5.180.240.0/22 maxlen: 24
78.24.100.0/22 maxlen: 24
91.208.35.0/24 maxlen: 24
91.222.120.0/22 maxlen: 24
91.222.120.0/24 maxlen: 24
128.0.86.0/23 maxlen: 24
128.0.92.0/24 maxlen: 24
128.0.94.0/24 maxlen: 24
176.96.189.0/24 maxlen: 24
188.93.64.0/22 maxlen: 22
193.7.216.0/22 maxlen: 24
213.241.199.0/24 maxlen: 24
2a05:9c00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f7:34:e1:5b:2c:a4:15:f2:ea:dc:12:54:67:2b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015b6d1596ac0501a71a393447051a62ff1dda16
Validity
Not Before: Jun 30 09:58:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c929d91eda7a709c3132d4166b4b893e71a75d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:62:8e:fe:a0:7a:3c:9a:14:1e:96:7c:ce:a0:
61:16:70:38:d9:9a:ae:ff:a2:fa:68:58:3a:3b:47:
d4:34:78:59:9d:60:07:97:3a:59:8d:45:cb:0e:8d:
67:88:bd:2b:a0:cd:1f:a7:e2:0f:be:66:69:70:2f:
57:9b:c4:19:c0:0e:63:00:ea:65:a7:92:12:1c:33:
30:43:7b:88:e2:ef:16:be:0d:60:e2:e6:a6:4c:02:
88:f6:86:d9:b3:b8:cc:37:5a:3c:94:e5:cb:be:d5:
4d:a5:f0:0d:43:79:0c:09:e5:54:70:f3:ad:cf:1c:
20:fc:72:a2:e1:1f:22:ef:e6:60:d5:2a:5f:47:32:
a1:53:19:32:45:8a:bd:7e:a5:d1:e6:c1:ba:56:49:
80:ce:67:02:54:7d:fb:7e:89:81:85:d9:21:73:2c:
39:7e:ea:d0:8e:8f:e9:37:c1:6a:86:ef:c5:cb:93:
38:64:5e:01:ba:1d:14:3c:44:a0:4c:f2:ef:c5:10:
de:ae:d4:b5:cd:c6:e7:01:a1:ad:3e:65:be:e1:88:
42:dc:76:2c:57:5b:70:6e:5a:c6:70:62:33:1f:a2:
95:eb:d8:17:cc:c4:55:60:32:7a:eb:3e:3f:dd:9f:
0e:2d:4f:e7:0b:29:c5:13:f7:51:9d:b0:15:80:62:
93:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:29:D9:1E:DA:7A:70:9C:31:32:D4:16:6B:4B:89:3E:71:A7:5D:75
X509v3 Authority Key Identifier:
keyid:01:5B:6D:15:96:AC:05:01:A7:1A:39:34:47:05:1A:62:FF:1D:DA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVttFZasBQGnGjk0RwUaYv8d2hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/ySnZHtp6cJwxMtQWa0uJPnGnXXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/52a88f-e9a2-4851-9148-fee8f3790567/1/AVttFZasBQGnGjk0RwUaYv8d2hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.240.0/22
78.24.100.0/22
91.208.35.0/24
91.222.120.0/22
128.0.86.0/23
128.0.92.0/24
128.0.94.0/24
176.96.189.0/24
188.93.64.0/22
193.7.216.0/22
213.241.199.0/24
IPv6:
2a05:9c00::/29
Signature Algorithm: sha256WithRSAEncryption
84:be:c1:e6:af:2f:68:a5:4d:2a:af:8d:e7:40:d1:34:20:19:
96:a1:39:ae:a7:2b:9a:0e:41:ae:65:fb:f8:79:d3:3a:63:d1:
ec:c9:10:54:46:cd:97:f4:39:f8:7d:db:c3:a7:0c:ca:4b:50:
6f:c9:b8:90:f6:5d:fd:22:e8:3d:75:81:dd:47:af:a9:75:e6:
3d:45:66:4b:1a:3a:e5:0d:8f:cc:9f:7d:dc:ba:3c:52:39:d3:
4e:a6:16:ef:8b:f1:1a:21:58:cf:da:f9:32:e2:7f:7a:67:11:
cb:77:34:15:c5:cb:02:b7:c4:f4:ba:e9:7e:88:85:49:aa:76:
79:09:5b:06:d9:e7:0f:52:b6:92:c4:fb:1f:c0:81:43:8b:7d:
46:03:36:d6:15:70:39:fe:95:4b:00:aa:c1:0b:2b:98:d2:51:
ca:9a:31:51:b3:a0:82:5d:0f:4e:aa:40:a2:4f:9b:cf:f5:84:
9d:2e:d6:a0:0a:af:3a:53:54:dd:b3:be:b4:cd:54:3f:03:00:
e5:10:14:e6:d0:ba:a4:0e:6d:3b:e3:88:24:4c:cc:75:e6:2d:
0d:00:9b:72:35:64:6e:71:a1:f5:ed:c7:f5:2c:59:29:e5:4a:
d3:88:e3:a7:e1:bb:9f:e9:6d:0e:9a:8d:61:65:02:b2:bd:6b:
dd:60:c2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:06:54 2026 by rpki-client