Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/pY02DqomIdtJtnZlcibIQbGy468.roa
File: pY02DqomIdtJtnZlcibIQbGy468.roa (raw, json)
Hash identifier: 7YVKUvmd7ZBcZH2oHWvJUTsdAEoWLob7LqtLKFrMCQA=
Subject key identifier: A5:8D:36:0E:AA:26:21:DB:49:B6:76:65:72:26:C8:41:B1:B2:E3:AF
Certificate issuer: /CN=57619321cbc5d73babc2a9423a8f4ee3480f27f4
Certificate serial: 019F2368A74EB512BB75CE9BADE814E29E97
Authority key identifier: 57:61:93:21:CB:C5:D7:3B:AB:C2:A9:42:3A:8F:4E:E3:48:0F:27:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2GTIcvF1zurwqlCOo9O40gPJ_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/pY02DqomIdtJtnZlcibIQbGy468.roa
Signing time: Thu 02 Jul 2026 15:18:08 +0000
ROA not before: Thu 02 Jul 2026 15:18:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213671
IP address blocks: 95.142.148.0/24 maxlen: 24
192.48.111.0/24 maxlen: 24
2a05:b100:1000::/36 maxlen: 36
2a05:b100:2000::/36 maxlen: 36
2a05:b100:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/V2GTIcvF1zurwqlCOo9O40gPJ_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/V2GTIcvF1zurwqlCOo9O40gPJ_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/V2GTIcvF1zurwqlCOo9O40gPJ_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a7:4e:b5:12:bb:75:ce:9b:ad:e8:14:e2:9e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57619321cbc5d73babc2a9423a8f4ee3480f27f4
Validity
Not Before: Jul 2 15:18:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a58d360eaa2621db49b676657226c841b1b2e3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bd:08:a0:0e:a2:6c:70:aa:81:d5:1c:cf:a3:
53:87:bb:1d:36:6a:1a:13:96:3f:55:ff:03:31:8d:
d9:85:c5:e3:63:3b:54:8b:27:32:5f:46:c2:6d:59:
f1:fc:3e:7c:54:81:10:98:e8:38:c7:b0:f2:61:ce:
d4:32:6b:7c:ff:57:57:c6:8b:c7:f7:48:69:77:15:
65:10:78:cf:83:10:95:84:8e:be:e2:7b:66:64:02:
d5:fc:ab:1c:05:a4:ef:7f:d6:dc:b6:b6:3e:96:cd:
16:e2:31:16:22:3b:a6:b0:b6:4e:20:ef:23:31:d0:
cb:c3:af:d5:32:f5:29:fe:ee:d0:61:46:70:d0:0f:
4b:d8:de:da:5d:ad:b3:b1:5b:a1:e1:6f:43:64:8a:
5c:a7:74:ae:1a:cd:2c:e1:00:12:36:5f:15:16:a1:
01:18:18:88:3c:3a:10:6b:86:79:8d:47:8e:4b:ae:
a8:67:97:5b:02:07:01:0e:a5:cd:fa:36:14:82:32:
37:a5:ba:dd:d8:9e:e3:84:55:bc:da:08:f9:e1:e9:
18:61:c8:d7:00:18:44:7a:06:b3:f7:7f:93:89:0e:
bd:4e:e9:de:b7:c8:78:b5:64:54:5e:da:80:64:a8:
c2:f4:8f:da:24:d5:fd:27:48:50:73:a3:4f:ab:47:
56:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8D:36:0E:AA:26:21:DB:49:B6:76:65:72:26:C8:41:B1:B2:E3:AF
X509v3 Authority Key Identifier:
keyid:57:61:93:21:CB:C5:D7:3B:AB:C2:A9:42:3A:8F:4E:E3:48:0F:27:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2GTIcvF1zurwqlCOo9O40gPJ_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/pY02DqomIdtJtnZlcibIQbGy468.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/V2GTIcvF1zurwqlCOo9O40gPJ_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.142.148.0/24
192.48.111.0/24
IPv6:
2a05:b100:1000::-2a05:b100:3fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
14:0d:ce:fe:18:8a:23:4b:d4:b8:03:54:ab:94:a2:ff:55:9d:
9b:96:9e:f9:57:13:df:2a:aa:c2:31:b7:ab:8f:8f:43:9c:08:
0c:22:45:50:9c:d1:a2:b4:a6:e1:84:f3:3f:d3:49:7d:1e:48:
a5:6e:56:c5:0c:a5:32:42:d2:a5:8c:e5:20:6b:cf:83:a8:a9:
fa:38:fa:a4:db:0c:76:bb:7f:fc:56:33:e4:d9:62:1e:6f:9a:
91:dc:0f:c5:91:5f:60:fb:44:45:7e:08:d5:1d:f4:d9:7e:57:
e1:32:93:75:08:08:6b:7e:9d:aa:8d:4c:6f:cc:ae:c3:73:8b:
9b:e8:1d:8e:71:77:97:70:6e:df:f1:3b:bd:1d:ed:1c:a2:00:
43:92:07:f4:40:60:00:ec:3e:b9:a7:12:65:ff:b7:72:d8:c8:
8c:1a:cf:d7:23:7c:e1:60:66:af:04:46:53:e1:23:e1:46:03:
be:39:9f:6f:26:f7:ae:43:2a:f0:1c:2f:84:8e:6a:8a:6e:58:
10:a6:2d:d8:dd:92:e0:fd:0c:0f:22:91:6b:55:d9:4f:93:05:
7f:c3:bb:1d:9b:95:97:da:a8:c0:c2:8b:0e:b9:4a:93:16:9d:
04:7f:2d:0a:77:8f:1e:29:c9:1b:e0:cb:d4:5c:62:b8:19:3b:
4a:5e:4e:07
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZ8jaKdOtRK7dc6bregU4p6XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NjE5MzIxY2JjNWQ3M2JhYmMyYTk0MjNhOGY0ZWUzNDgw
ZjI3ZjQwHhcNMjYwNzAyMTUxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNThkMzYwZWFhMjYyMWRiNDliNjc2NjU3MjI2Yzg0MWIxYjJlM2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb0IoA6ibHCqgdUcz6NTh7sdNmoa
E5Y/Vf8DMY3ZhcXjYztUiycyX0bCbVnx/D58VIEQmOg4x7DyYc7UMmt8/1dXxovH
90hpdxVlEHjPgxCVhI6+4ntmZALV/KscBaTvf9bctrY+ls0W4jEWIjumsLZOIO8j
MdDLw6/VMvUp/u7QYUZw0A9L2N7aXa2zsVuh4W9DZIpcp3SuGs0s4QASNl8VFqEB
GBiIPDoQa4Z5jUeOS66oZ5dbAgcBDqXN+jYUgjI3pbrd2J7jhFW82gj54ekYYcjX
ABhEegaz93+TiQ69Tunet8h4tWRUXtqAZKjC9I/aJNX9J0hQc6NPq0dWnQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFKWNNg6qJiHbSbZ2ZXImyEGxsuOvMB8GA1UdIwQY
MBaAFFdhkyHLxdc7q8KpQjqPTuNIDyf0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjJHVEljdkYxenVyd3FsQ09vOU80MGdQSl9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS80YmUyMjItNjQ4Mi00ZGI5LTlhNWYt
NzUyZTliOGIwNzU2LzEvcFkwMkRxb21JZHRKdG5abGNpYklRYkd5NDY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS80YmUyMjItNjQ4Mi00ZGI5LTlhNWYtNzUyZTliOGIwNzU2
LzEvVjJHVEljdkYxenVyd3FsQ09vOU80MGdQSl9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAX46UAwQA
wDBvMBgEAgACMBIwEAMGBCoFsQAQAwYGKgWxAAAwDQYJKoZIhvcNAQELBQADggEB
ABQNzv4YiiNL1LgDVKuUov9VnZuWnvlXE98qqsIxt6uPj0OcCAwiRVCc0aK0puGE
8z/TSX0eSKVuVsUMpTJC0qWM5SBrz4Ooqfo4+qTbDHa7f/xWM+TZYh5vmpHcD8WR
X2D7REV+CNUd9Nl+V+Eyk3UICGt+naqNTG/MrsNzi5voHY5xd5dwbt/xO70d7Ryi
AEOSB/RAYADsPrmnEmX/t3LYyIwaz9cjfOFgZq8ERlPhI+FGA745n28m965DKvAc
L4SOaopuWBCmLdjdkuD9DA8ikWtV2U+TBX/Dux2blZfaqMDCiw65SpMWnQR/LQp3
jx4pyRvgy9RcYrgZO0peTgc=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:50:37 2026 by rpki-client