Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Yd3mFdEmt_LtBsqc7rdYX1_ncj0.roa
File: Yd3mFdEmt_LtBsqc7rdYX1_ncj0.roa (raw, json)
Hash identifier: oFTFFNRAsNuVmsX8EoVxo2G4NqVn/6mSTpyohOkOMSk=
Subject key identifier: 61:DD:E6:15:D1:26:B7:F2:ED:06:CA:9C:EE:B7:58:5F:5F:E7:72:3D
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01A1A69BEADF7B6A7B6C4CF583EC5640290F
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Yd3mFdEmt_LtBsqc7rdYX1_ncj0.roa
Signing time: Wed 04 Nov 2026 12:49:58 +0000
ROA not before: Wed 04 Nov 2026 12:49:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200740
IP address blocks: 46.8.120.0/23 maxlen: 24
46.8.126.0/23 maxlen: 24
46.8.182.0/23 maxlen: 24
109.248.22.0/23 maxlen: 24
109.248.26.0/23 maxlen: 24
109.248.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:9b:ea:df:7b:6a:7b:6c:4c:f5:83:ec:56:40:29:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Nov 4 12:49:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61dde615d126b7f2ed06ca9ceeb7585f5fe7723d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:df:d8:60:7f:e3:8d:f1:1d:40:68:25:8e:f8:
ba:ac:86:83:99:33:3a:83:f6:88:fb:7d:1f:3a:6a:
c9:8e:c3:29:78:83:43:34:05:7c:8d:70:34:9c:4e:
50:23:de:06:8c:d9:df:55:ad:6e:6b:2b:47:c6:fa:
96:61:44:7b:6a:0e:fe:ca:cf:2e:97:09:2c:4c:5a:
1d:d6:ca:94:48:64:ab:2f:f9:27:ad:32:78:a7:b4:
ea:91:65:76:f1:ae:70:bb:39:26:1b:27:3d:5f:d8:
16:f3:a6:9e:be:ac:39:8e:97:39:fa:6c:32:10:3f:
22:88:5a:cb:d5:63:87:2d:cd:76:cf:bb:45:ba:a0:
10:04:6e:8e:42:98:74:19:ab:be:46:ad:13:a2:3a:
b7:12:be:ef:f5:a5:9b:7b:f9:09:71:09:e8:43:9b:
24:a8:f9:af:a7:26:85:a0:9d:eb:8b:b2:68:8c:5a:
3d:83:85:78:10:e8:6a:ef:e7:b4:ba:54:2f:b8:19:
18:59:c2:d5:77:6e:6d:e4:d3:94:52:e7:97:1e:29:
0b:d3:a8:e4:32:a9:73:e3:e6:5b:80:be:02:62:e6:
97:10:55:b4:83:f3:d1:f5:37:bd:ae:18:bf:15:bf:
c4:39:0b:b7:13:00:5c:dd:52:e5:77:c5:e2:dc:31:
ae:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DD:E6:15:D1:26:B7:F2:ED:06:CA:9C:EE:B7:58:5F:5F:E7:72:3D
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Yd3mFdEmt_LtBsqc7rdYX1_ncj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.120.0/23
46.8.126.0/23
46.8.182.0/23
109.248.22.0/23
109.248.26.0-109.248.29.255
Signature Algorithm: sha256WithRSAEncryption
85:83:8c:40:74:25:91:88:a8:01:49:05:0f:2f:fe:2b:b2:af:
fb:92:55:88:d8:13:ca:d2:7a:5b:aa:0e:31:3f:9c:f4:9f:69:
f3:cb:01:3c:54:bf:58:b7:80:90:ff:73:a6:1d:64:35:3f:3b:
2a:5b:c0:e8:30:19:6d:92:51:cf:28:9f:88:e8:89:67:ea:42:
b2:97:64:ee:f8:91:b1:c8:df:6b:d6:67:93:1b:be:90:20:c3:
57:f7:97:41:89:3f:ab:2e:52:f3:0b:3c:e8:b5:f5:4f:a4:25:
4b:7a:fb:1c:81:59:aa:d3:09:1a:5d:08:22:3e:e5:6b:22:7a:
5a:9e:c9:16:83:18:cc:9f:e0:ba:01:f7:cc:f9:80:15:ac:4c:
25:37:c0:4e:c4:b2:b3:f4:08:82:5e:bb:a4:46:59:69:29:f2:
03:4b:a6:2d:53:50:29:a1:54:ff:94:3a:07:be:c5:c9:b3:e4:
e2:21:86:2b:30:71:c4:ca:e4:c6:83:92:3b:8c:72:2b:26:ac:
b1:83:fc:92:1a:da:d9:a1:85:b9:a4:32:83:f2:7a:1a:10:f3:
86:ad:e7:bc:7e:42:61:3b:bd:0b:e9:37:bc:76:8c:5d:aa:3e:
a2:cf:44:6d:c7:56:2d:93:62:8a:a3:51:27:13:87:1d:c9:f2:
13:51:6c:3b
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAaGmm+rfe2p7bEz1g+xWQCkPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0
MjAzYjQwHhcNMjYxMTA0MTI0OTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MWRkZTYxNWQxMjZiN2YyZWQwNmNhOWNlZWI3NTg1ZjVmZTc3MjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyd/YYH/jjfEdQGgljvi6rIaDmTM6
g/aI+30fOmrJjsMpeINDNAV8jXA0nE5QI94GjNnfVa1uaytHxvqWYUR7ag7+ys8u
lwksTFod1sqUSGSrL/knrTJ4p7TqkWV28a5wuzkmGyc9X9gW86aevqw5jpc5+mwy
ED8iiFrL1WOHLc12z7tFuqAQBG6OQph0Gau+Rq0Tojq3Er7v9aWbe/kJcQnoQ5sk
qPmvpyaFoJ3ri7JojFo9g4V4EOhq7+e0ulQvuBkYWcLVd25t5NOUUueXHikL06jk
Mqlz4+ZbgL4CYuaXEFW0g/PR9Te9rhi/Fb/EOQu3EwBc3VLld8Xi3DGugwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFGHd5hXRJrfy7QbKnO63WF9f53I9MB8GA1UdIwQY
MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt
MTY2OTljOTZkZDVlLzEvWWQzbUZkRW10X0x0QnNxYzdyZFlYMV9uY2owLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl
LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQBLgh4AwQB
Lgh+AwQBLgi2AwQBbfgWMAwDBAFt+BoDBAFt+BwwDQYJKoZIhvcNAQELBQADggEB
AIWDjEB0JZGIqAFJBQ8v/iuyr/uSVYjYE8rSeluqDjE/nPSfafPLATxUv1i3gJD/
c6YdZDU/OypbwOgwGW2SUc8on4joiWfqQrKXZO74kbHI32vWZ5MbvpAgw1f3l0GJ
P6suUvMLPOi19U+kJUt6+xyBWarTCRpdCCI+5WsielqeyRaDGMyf4LoB98z5gBWs
TCU3wE7EsrP0CIJeu6RGWWkp8gNLpi1TUCmhVP+UOge+xcmz5OIhhiswccTK5MaD
kjuMcismrLGD/JIa2tmhhbmkMoPyehoQ84at57x+QmE7vQvpN7x2jF2qPqLPRG3H
Vi2TYoqjUScThx3J8hNRbDs=
-----END CERTIFICATE-----
Generated at Sun Nov 15 08:03:58 2026 by rpki-client