Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/YJkYtuoHk8a3jVb1let2egcsqWQ.roa
File: YJkYtuoHk8a3jVb1let2egcsqWQ.roa (raw, json)
Hash identifier: YLZuYMUOmJcYoz9pqTB22lS0t10y56S08gmDL66+LcM=
Subject key identifier: 60:99:18:B6:EA:07:93:C6:B7:8D:56:F5:95:EB:76:7A:07:2C:A9:64
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 01A1C437F4334C3B73E0E65E99DFC867E875
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/YJkYtuoHk8a3jVb1let2egcsqWQ.roa
Signing time: Tue 10 Nov 2026 06:49:23 +0000
ROA not before: Tue 10 Nov 2026 06:49:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39855
IP address blocks: 45.14.181.0/24 maxlen: 24
45.14.182.0/24 maxlen: 24
45.14.183.0/24 maxlen: 24
194.99.112.0/24 maxlen: 24
194.104.1.0/24 maxlen: 24
194.104.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:37:f4:33:4c:3b:73:e0:e6:5e:99:df:c8:67:e8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Nov 10 06:49:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=609918b6ea0793c6b78d56f595eb767a072ca964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:95:02:06:e6:3c:1b:23:3a:3a:25:90:b9:fa:
5d:f0:f9:88:4e:da:00:e8:96:68:a7:5c:96:3d:d9:
4a:ec:0b:42:8a:ab:02:fa:7d:99:11:0e:22:2b:03:
f6:ee:ee:3c:35:68:73:1f:87:36:db:63:6d:9b:7d:
2e:c2:ff:71:c1:75:94:9b:bf:28:ec:b2:24:df:76:
e6:71:97:0a:7f:53:db:19:0d:8f:b8:60:af:cd:42:
57:7d:8f:af:2c:40:04:cc:45:d2:9d:4e:f3:56:0a:
68:9d:4c:3c:de:ba:92:fa:43:a8:d6:27:c5:92:be:
9a:8f:45:79:cc:d6:cd:7d:d2:b5:3b:05:45:1b:38:
e8:f1:b2:0e:5a:3e:93:e4:10:d0:e4:dc:2b:20:a2:
70:51:6e:17:25:4b:b8:04:99:6e:30:fd:8c:95:16:
c5:fa:1e:d5:ff:a4:50:af:28:23:51:37:97:b3:76:
8c:1c:ec:a4:70:78:74:f0:9a:68:2a:5b:22:34:3f:
91:a0:c2:3e:42:af:0f:82:31:ed:50:90:ea:bd:e0:
9f:76:65:7d:ca:31:70:a5:3f:9a:8d:52:c7:b4:2c:
3a:83:cb:5b:d7:37:33:18:17:e6:41:db:9e:26:2b:
48:40:fc:1e:1c:7d:4c:b9:e3:c5:f3:2e:fb:4c:84:
76:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:99:18:B6:EA:07:93:C6:B7:8D:56:F5:95:EB:76:7A:07:2C:A9:64
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/YJkYtuoHk8a3jVb1let2egcsqWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.181.0-45.14.183.255
194.99.112.0/24
194.104.1.0/24
194.104.85.0/24
Signature Algorithm: sha256WithRSAEncryption
42:c9:79:91:68:ee:d5:b0:3f:a4:c0:47:38:18:7e:db:a1:5c:
11:4f:30:9e:5e:db:97:71:ba:9f:c2:c7:86:b1:01:c7:04:f7:
5d:9e:3f:b0:c6:50:76:88:e2:86:25:92:e1:95:c9:14:30:b6:
d6:d4:51:47:d3:c2:a7:1f:8e:dd:54:85:0f:6c:b8:eb:48:2e:
3c:f9:fb:35:48:e5:c6:e8:26:11:c5:45:7f:48:36:19:8f:db:
89:0f:42:d5:67:37:bf:0a:68:80:63:89:3d:dd:29:96:0a:54:
26:4c:83:50:18:45:2a:ac:2b:ce:b2:6e:c3:a4:b4:33:a7:21:
74:f1:0c:ed:2f:c2:29:5a:37:4d:e1:06:18:37:54:6d:40:c6:
ff:34:07:f6:ad:6f:5c:13:f7:f9:64:c4:97:80:78:56:ce:d0:
c6:e4:47:28:72:03:65:7b:57:91:be:ed:51:ce:a0:e6:29:ac:
64:16:a1:41:42:41:f5:93:5a:3d:98:bf:5f:e2:75:73:33:ce:
3f:00:b3:f1:3f:70:e1:e9:67:52:ac:e6:a3:c7:f3:ca:82:8a:
88:06:77:48:c5:90:53:69:81:33:29:b7:d1:a9:aa:87:b6:cb:
15:f4:50:d0:91:f6:22:29:4f:12:d3:65:cc:8b:99:71:a3:cc:
29:f3:10:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:12:40 2026 by rpki-client