Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/Ya7gHcOJW_wjSJWa4WLFKiSUkcU.roa
File: Ya7gHcOJW_wjSJWa4WLFKiSUkcU.roa (raw, json)
Hash identifier: zf47OzJ7ZBqDdrfAJUX5U6MlyOVPwuqS2R07zroieCs=
Subject key identifier: 61:AE:E0:1D:C3:89:5B:FC:23:48:95:9A:E1:62:C5:2A:24:94:91:C5
Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial: 019F845F6F3454456AEB2393183520AC2B29
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/Ya7gHcOJW_wjSJWa4WLFKiSUkcU.roa
Signing time: Tue 21 Jul 2026 11:11:14 +0000
ROA not before: Tue 21 Jul 2026 11:11:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200845
IP address blocks: 45.85.180.0/22 maxlen: 22
185.227.216.0/24 maxlen: 24
185.227.217.0/24 maxlen: 24
185.240.165.0/24 maxlen: 24
185.240.166.0/24 maxlen: 24
185.240.167.0/24 maxlen: 24
194.30.161.0/24 maxlen: 24
194.30.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:5f:6f:34:54:45:6a:eb:23:93:18:35:20:ac:2b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Validity
Not Before: Jul 21 11:11:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61aee01dc3895bfc2348959ae162c52a249491c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:50:cb:60:bb:eb:4b:3a:60:58:6a:59:f0:91:
6a:fb:87:6b:b1:3c:da:6a:6f:fd:c8:d9:34:c3:43:
84:f9:c7:15:b0:5f:50:0a:bf:4d:0a:0b:df:56:95:
18:79:69:9d:07:b4:dd:20:c5:64:7a:c9:ac:01:ba:
d7:1d:e9:55:70:4a:8a:52:1a:90:1f:cf:53:90:0b:
6b:53:c1:f3:26:2b:6f:79:ce:1e:cb:60:44:ec:4d:
cd:0e:9e:73:f9:13:34:cf:36:a0:a1:2e:e7:eb:a4:
d1:c1:98:a6:5f:6f:99:e8:b3:d7:ef:84:7e:5d:8c:
03:fa:b1:a4:6b:58:17:04:33:2b:11:d7:0b:1d:80:
61:37:fe:d9:d9:6f:c6:fc:d6:45:99:62:25:bd:23:
ae:aa:43:4b:f9:57:15:e3:8d:b9:20:6c:a1:16:56:
f7:3f:23:2e:0c:f8:c0:1a:8d:8b:da:c5:ac:9d:bc:
e3:88:90:7d:b8:10:34:27:a1:13:88:2d:27:d6:c8:
8b:50:55:92:77:46:9a:67:96:52:56:cf:5f:b7:a7:
4f:84:e5:93:b8:af:79:fa:d9:8c:5f:52:46:cb:4d:
9f:f7:fc:b7:e4:67:27:a8:b1:49:02:aa:2a:d6:59:
ac:e5:c7:11:06:9c:52:fe:29:39:e5:ac:dc:13:ea:
06:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:AE:E0:1D:C3:89:5B:FC:23:48:95:9A:E1:62:C5:2A:24:94:91:C5
X509v3 Authority Key Identifier:
keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/Ya7gHcOJW_wjSJWa4WLFKiSUkcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.180.0/22
185.227.216.0/23
185.240.165.0-185.240.167.255
194.30.161.0/24
194.30.165.0/24
Signature Algorithm: sha256WithRSAEncryption
16:7f:e6:04:5f:f6:ea:2e:f7:a5:92:22:ab:1a:8a:ba:f0:1c:
48:be:c1:f2:d7:6e:b4:84:67:53:8b:9f:d1:59:38:f3:dc:ff:
c5:33:78:80:99:e1:d1:84:37:70:f2:c3:1e:be:ae:6f:41:99:
2b:01:07:a3:60:d8:73:bb:3f:e3:99:01:24:d0:af:32:59:81:
2f:3e:75:f3:49:44:6f:b3:87:a3:be:ad:fe:4e:74:81:2e:9f:
97:d0:db:60:56:27:70:c1:37:2f:22:b8:d1:95:df:9a:07:f4:
50:8b:4e:b0:57:49:a3:1d:94:77:36:0f:db:91:68:e5:95:62:
2b:41:e9:ec:f2:bc:eb:88:33:44:4f:f6:58:94:b8:6b:0d:3d:
b8:36:65:c4:f3:d0:8b:0c:28:45:9b:fd:fc:ee:6c:50:72:b5:
b9:cd:df:f5:9a:8e:c5:75:ef:3a:74:c0:31:03:66:b3:a9:47:
aa:72:79:af:5f:f4:e6:da:e4:9f:a6:87:21:19:55:a8:b9:18:
f0:bb:31:ac:ea:87:45:f7:2f:7d:29:02:c8:ab:9b:c5:24:d6:
47:d3:24:97:58:b5:7c:f2:d1:d0:bb:e2:00:4c:ec:c9:9c:b9:
17:8f:5d:d1:1d:e3:21:ab:17:9f:83:9d:c1:24:1d:57:3e:aa:
a5:2e:31:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:49:44 2026 by rpki-client