Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/ybSsoPZ2hsy3Rw_zldDWBDKiVGo.roa
File: ybSsoPZ2hsy3Rw_zldDWBDKiVGo.roa (raw, json)
Hash identifier: +sty3LNT4g/c8g34QOpBooUUlUrWtb/8O/C5IohSZgo=
Subject key identifier: C9:B4:AC:A0:F6:76:86:CC:B7:47:0F:F3:95:D0:D6:04:32:A2:54:6A
Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial: 01A1CA2763D23B0095DBCDC82EB09F6241C2
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/ybSsoPZ2hsy3Rw_zldDWBDKiVGo.roa
Signing time: Wed 11 Nov 2026 10:29:01 +0000
ROA not before: Wed 11 Nov 2026 10:29:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6910
IP address blocks: 79.118.155.0/24 maxlen: 24
82.79.10.0/24 maxlen: 24
86.121.222.0/24 maxlen: 24
188.27.120.0/24 maxlen: 24
194.176.162.0/24 maxlen: 24
2a01:4700:1::/48 maxlen: 48
2a02:2f01:100::/48 maxlen: 48
2a02:2f09:3100::/48 maxlen: 48
2a03:9c20:1000::/48 maxlen: 48
2a03:9c20:f000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ca:27:63:d2:3b:00:95:db:cd:c8:2e:b0:9f:62:41:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Validity
Not Before: Nov 11 10:29:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c9b4aca0f67686ccb7470ff395d0d60432a2546a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:20:0d:10:94:3f:b4:f2:82:58:45:04:a7:c6:
dd:7a:25:1a:f3:e8:56:b2:16:49:74:ba:15:8e:d5:
bf:60:d5:9c:d5:84:e6:c0:a6:88:ca:b0:ec:16:bd:
0c:e4:ae:8a:98:cd:96:18:f3:d1:4c:84:b0:ef:b4:
41:04:e8:92:80:db:c8:7f:81:98:70:82:8b:a4:46:
58:86:bd:59:d3:71:29:ed:ab:74:a7:82:78:48:a3:
5a:38:fc:99:f8:5a:7e:f4:e4:fc:f2:c9:d7:c1:dd:
27:6e:0d:29:55:8d:c8:2d:aa:cd:c1:3b:a6:46:2b:
2c:69:5a:06:46:d7:c5:38:d5:d1:6c:92:61:8f:c4:
0c:e1:b3:8f:c0:91:38:04:23:f1:89:4b:74:ce:f5:
42:23:80:ec:df:f9:cc:30:eb:84:00:fd:ed:4a:a2:
63:84:37:91:ba:f9:51:4f:98:22:4a:10:0b:c2:0a:
ad:0e:6c:71:9b:8f:e6:e2:fe:81:8c:ff:6c:4f:c1:
b6:54:d6:ed:ad:29:0c:a7:4b:f9:75:da:75:3e:76:
77:fd:8c:34:0c:3c:8a:10:42:4f:c8:2f:2d:54:60:
92:87:02:2e:f1:fc:5d:d8:e2:f9:48:df:40:3e:b2:
33:34:f4:6e:e1:db:9d:2c:23:34:c6:91:4f:08:65:
98:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B4:AC:A0:F6:76:86:CC:B7:47:0F:F3:95:D0:D6:04:32:A2:54:6A
X509v3 Authority Key Identifier:
keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/ybSsoPZ2hsy3Rw_zldDWBDKiVGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.118.155.0/24
82.79.10.0/24
86.121.222.0/24
188.27.120.0/24
194.176.162.0/24
IPv6:
2a01:4700:1::/48
2a02:2f01:100::/48
2a02:2f09:3100::/48
2a03:9c20:1000::/48
2a03:9c20:f000::/48
Signature Algorithm: sha256WithRSAEncryption
4d:d7:1b:f6:81:45:65:c7:27:14:2f:81:b5:01:ea:3f:c5:a1:
ed:57:74:be:a6:6c:35:96:f7:cd:ed:7a:03:22:c2:70:86:a4:
d4:52:45:44:9f:f6:b6:86:2c:6e:36:a4:b0:91:19:57:9a:24:
03:30:d8:02:d8:57:99:06:f8:63:e3:06:1d:a8:66:23:e4:1a:
1a:f4:c5:ca:21:98:e6:f1:6b:ec:ef:a4:3a:eb:55:7d:97:33:
f5:a8:0e:7b:56:0a:dd:8a:37:f0:b8:f1:ab:20:12:57:b5:87:
59:4b:1a:60:95:52:09:ef:70:ce:be:59:c7:9f:0b:d4:49:3f:
85:b1:ad:1e:07:20:7d:40:59:e9:9e:82:be:27:6e:de:e6:e5:
cd:12:ba:f7:58:20:69:b8:d6:8b:b8:f7:fd:07:24:ac:61:97:
67:b4:8b:50:73:66:37:4e:55:b7:29:4b:21:19:aa:b8:5a:68:
30:7e:68:77:28:f4:82:d5:cd:ff:99:eb:d1:3f:8b:aa:5b:ec:
22:a1:d6:d0:eb:8a:d4:aa:f2:9b:fc:25:8b:f7:d9:56:9e:3d:
69:19:74:5d:5a:d4:75:a4:42:9a:8d:1d:15:8b:6a:a0:20:51:
ea:76:bf:cd:2b:3e:75:58:f7:a7:79:4f:43:23:79:57:3b:f1:
b0:78:7b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:16:59 2026 by rpki-client