Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/YaT_eXCXwL1ZWDZXewZpkxN006o.roa
File: YaT_eXCXwL1ZWDZXewZpkxN006o.roa (raw, json)
Hash identifier: nyKTV1EjVYygWltGf7DPPsi/IzsaU+i6l01AiKbeV5c=
Subject key identifier: 61:A4:FF:79:70:97:C0:BD:59:58:36:57:7B:06:69:93:13:74:D3:AA
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019D1F5ADEFCA41D31C82A9106D8F1395520
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/YaT_eXCXwL1ZWDZXewZpkxN006o.roa
Signing time: Tue 24 Mar 2026 10:19:02 +0000
ROA not before: Tue 24 Mar 2026 10:19:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 79.121.132.0/22 maxlen: 24
79.121.132.0/23 maxlen: 24
79.121.134.0/23 maxlen: 24
79.121.140.0/22 maxlen: 24
79.121.140.0/23 maxlen: 24
79.121.142.0/23 maxlen: 24
79.121.144.0/23 maxlen: 24
79.121.148.0/22 maxlen: 24
79.121.148.0/23 maxlen: 24
79.121.150.0/23 maxlen: 24
79.121.154.0/23 maxlen: 24
79.121.156.0/23 maxlen: 24
79.121.162.0/23 maxlen: 24
79.121.164.0/22 maxlen: 24
79.121.164.0/23 maxlen: 24
79.121.166.0/23 maxlen: 24
79.121.168.0/23 maxlen: 24
79.121.178.0/23 maxlen: 24
79.121.180.0/23 maxlen: 24
79.121.184.0/23 maxlen: 24
79.121.200.0/21 maxlen: 24
79.121.212.0/22 maxlen: 24
79.121.212.0/23 maxlen: 24
79.121.214.0/23 maxlen: 24
79.121.216.0/22 maxlen: 24
79.121.216.0/23 maxlen: 24
79.121.218.0/23 maxlen: 24
79.121.222.0/23 maxlen: 24
79.121.226.0/23 maxlen: 24
79.121.232.0/22 maxlen: 24
79.121.232.0/23 maxlen: 24
79.121.234.0/23 maxlen: 24
79.121.238.0/23 maxlen: 24
82.108.74.0/23 maxlen: 23
82.108.108.0/23 maxlen: 23
82.108.112.0/23 maxlen: 23
82.108.160.0/23 maxlen: 23
87.82.214.0/23 maxlen: 23
92.244.174.0/23 maxlen: 24
92.244.176.0/23 maxlen: 24
92.244.180.0/23 maxlen: 24
92.244.182.0/23 maxlen: 24
92.244.184.0/23 maxlen: 24
92.244.190.0/23 maxlen: 24
93.152.73.0/24 maxlen: 24
93.152.87.0/24 maxlen: 24
95.177.0.0/23 maxlen: 24
95.177.8.0/23 maxlen: 24
95.177.20.0/23 maxlen: 24
95.177.54.0/23 maxlen: 24
95.177.64.0/23 maxlen: 24
95.177.68.0/22 maxlen: 24
95.177.68.0/23 maxlen: 24
95.177.70.0/23 maxlen: 24
95.177.72.0/23 maxlen: 24
95.177.76.0/22 maxlen: 24
95.177.76.0/23 maxlen: 24
95.177.78.0/23 maxlen: 24
95.177.80.0/22 maxlen: 24
95.177.80.0/23 maxlen: 24
95.177.82.0/23 maxlen: 24
95.177.104.0/22 maxlen: 24
95.177.104.0/23 maxlen: 24
95.177.106.0/23 maxlen: 24
95.177.114.0/23 maxlen: 24
95.177.124.0/22 maxlen: 24
95.177.124.0/23 maxlen: 24
95.177.126.0/23 maxlen: 24
109.174.176.0/22 maxlen: 24
109.174.180.0/22 maxlen: 24
109.174.184.0/22 maxlen: 24
109.174.188.0/22 maxlen: 24
109.204.6.0/23 maxlen: 24
109.204.12.0/23 maxlen: 24
109.204.20.0/23 maxlen: 24
109.204.28.0/23 maxlen: 24
109.204.32.0/23 maxlen: 24
109.204.40.0/23 maxlen: 24
109.204.44.0/23 maxlen: 24
109.204.50.0/23 maxlen: 24
109.204.54.0/23 maxlen: 24
109.204.58.0/23 maxlen: 24
109.204.60.0/23 maxlen: 24
109.204.72.0/23 maxlen: 24
109.204.82.0/23 maxlen: 24
109.204.92.0/23 maxlen: 24
109.204.95.0/24 maxlen: 24
109.204.101.0/24 maxlen: 24
109.204.112.0/23 maxlen: 24
109.204.120.0/23 maxlen: 24
109.204.124.0/23 maxlen: 24
195.40.18.0/23 maxlen: 23
195.40.26.0/23 maxlen: 24
195.40.28.0/23 maxlen: 23
195.40.30.0/23 maxlen: 24
195.40.86.0/24 maxlen: 24
195.40.100.0/23 maxlen: 24
195.40.114.0/23 maxlen: 24
195.40.116.0/23 maxlen: 23
195.40.118.0/23 maxlen: 24
195.40.162.0/23 maxlen: 23
195.40.166.0/23 maxlen: 24
195.40.180.0/24 maxlen: 24
195.40.188.0/23 maxlen: 23
195.172.98.0/23 maxlen: 23
195.172.102.0/23 maxlen: 24
195.172.110.0/23 maxlen: 24
195.172.112.0/23 maxlen: 24
195.172.124.0/24 maxlen: 24
195.172.204.0/23 maxlen: 24
195.172.212.0/23 maxlen: 23
195.172.214.0/23 maxlen: 24
195.172.216.0/23 maxlen: 24
195.172.218.0/23 maxlen: 24
195.172.220.0/23 maxlen: 24
195.172.222.0/23 maxlen: 24
212.134.11.0/24 maxlen: 24
212.134.65.0/24 maxlen: 24
212.134.72.0/23 maxlen: 23
212.134.78.0/24 maxlen: 24
212.135.0.0/24 maxlen: 24
212.135.2.0/23 maxlen: 23
212.135.5.0/24 maxlen: 24
212.135.10.0/23 maxlen: 24
212.135.174.0/24 maxlen: 24
212.135.178.0/24 maxlen: 24
212.135.190.0/23 maxlen: 24
212.135.236.0/23 maxlen: 24
217.79.104.0/22 maxlen: 24
217.79.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:05:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1f:5a:de:fc:a4:1d:31:c8:2a:91:06:d8:f1:39:55:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Mar 24 10:19:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61a4ff797097c0bd595836577b0669931374d3aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:12:a8:85:98:35:16:47:f9:66:a3:1e:6c:50:
a6:0b:f9:e6:57:df:da:a5:38:83:4e:9d:e6:35:fe:
69:60:b3:a2:57:81:81:4f:d0:31:a2:74:70:c4:b9:
d6:10:d5:55:34:10:e0:90:58:fd:83:bc:0a:a1:ab:
20:ae:56:ad:1c:5c:77:41:45:5d:43:3b:fc:e9:ce:
1d:c0:fc:b8:ab:7b:df:a7:e9:e6:de:4f:18:f1:ad:
df:82:1a:28:8c:32:e0:3d:f2:95:87:80:0b:52:04:
5e:a3:83:ec:c2:15:5c:19:04:50:6d:7f:63:6c:d7:
6b:60:a0:f5:e2:d0:c1:73:67:8a:e8:84:8d:17:8e:
48:16:e4:31:44:af:04:96:05:8c:43:af:ff:97:ca:
f8:33:2e:ce:7f:bc:71:2b:dd:6a:88:49:2c:fc:f0:
43:3c:51:47:46:3f:73:ff:a7:0f:59:85:b1:4a:f3:
62:29:6f:c2:fb:cc:a9:e8:35:4c:fe:6e:b7:ab:10:
4c:68:e5:8c:2e:c1:bc:87:16:62:41:d2:40:79:ad:
3d:3b:58:7c:57:88:f6:02:e3:fa:42:08:a0:fb:6b:
c2:3f:25:08:02:87:c9:49:ee:74:57:cd:22:c4:c9:
f3:1e:b7:5d:9c:3e:99:d1:11:b8:2d:1b:3a:74:bb:
2e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A4:FF:79:70:97:C0:BD:59:58:36:57:7B:06:69:93:13:74:D3:AA
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/YaT_eXCXwL1ZWDZXewZpkxN006o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.121.132.0/22
79.121.140.0-79.121.145.255
79.121.148.0/22
79.121.154.0-79.121.157.255
79.121.162.0-79.121.169.255
79.121.178.0-79.121.181.255
79.121.184.0/23
79.121.200.0/21
79.121.212.0-79.121.219.255
79.121.222.0/23
79.121.226.0/23
79.121.232.0/22
79.121.238.0/23
82.108.74.0/23
82.108.108.0/23
82.108.112.0/23
82.108.160.0/23
87.82.214.0/23
92.244.174.0-92.244.177.255
92.244.180.0-92.244.185.255
92.244.190.0/23
93.152.73.0/24
93.152.87.0/24
95.177.0.0/23
95.177.8.0/23
95.177.20.0/23
95.177.54.0/23
95.177.64.0/23
95.177.68.0-95.177.73.255
95.177.76.0-95.177.83.255
95.177.104.0/22
95.177.114.0/23
95.177.124.0/22
109.174.176.0/20
109.204.6.0/23
109.204.12.0/23
109.204.20.0/23
109.204.28.0/23
109.204.32.0/23
109.204.40.0/23
109.204.44.0/23
109.204.50.0/23
109.204.54.0/23
109.204.58.0-109.204.61.255
109.204.72.0/23
109.204.82.0/23
109.204.92.0/23
109.204.95.0/24
109.204.101.0/24
109.204.112.0/23
109.204.120.0/23
109.204.124.0/23
195.40.18.0/23
195.40.26.0-195.40.31.255
195.40.86.0/24
195.40.100.0/23
195.40.114.0-195.40.119.255
195.40.162.0/23
195.40.166.0/23
195.40.180.0/24
195.40.188.0/23
195.172.98.0/23
195.172.102.0/23
195.172.110.0-195.172.113.255
195.172.124.0/24
195.172.204.0/23
195.172.212.0-195.172.223.255
212.134.11.0/24
212.134.65.0/24
212.134.72.0/23
212.134.78.0/24
212.135.0.0/24
212.135.2.0/23
212.135.5.0/24
212.135.10.0/23
212.135.174.0/24
212.135.178.0/24
212.135.190.0/23
212.135.236.0/23
217.79.104.0/22
217.79.116.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:1a:91:b5:e6:1f:b7:2c:09:c4:33:c1:3f:72:86:e1:7d:72:
c1:17:85:ad:41:50:72:c0:04:e9:2c:db:7e:73:7d:ec:3c:8d:
6a:01:68:c5:ec:25:9c:3f:9b:e1:02:68:28:a7:66:10:b2:45:
5a:34:02:bf:b3:b1:65:41:ce:1f:4a:2b:ad:bb:0c:65:97:44:
2b:04:5d:d7:d5:ad:d5:e5:bc:36:82:a0:d7:73:d3:ac:d4:bf:
10:d6:91:94:ab:c9:d8:2b:38:f8:39:99:87:0c:14:33:ff:79:
a6:ba:2b:ee:29:83:c9:ff:4d:ac:e6:d2:67:73:6f:81:7c:2a:
07:91:11:eb:99:54:1e:af:dd:29:70:42:62:32:4f:6d:ed:e0:
04:e5:92:c3:7b:3a:02:4b:47:5b:d1:62:72:66:8c:44:cb:28:
4d:da:3b:09:6a:97:9d:11:c6:5d:23:72:fa:1c:fe:00:d7:cb:
a0:34:7c:b4:48:78:a7:4f:d6:23:d3:b2:c7:ab:f6:e6:08:9b:
98:56:ea:df:d3:14:6c:11:61:7f:f1:6b:d6:ac:ce:a6:1a:e7:
86:a0:e1:8f:7f:42:aa:4d:6f:7a:a6:89:95:80:3f:1b:c3:b9:
b8:17:ca:c2:54:c8:16:26:1f:f1:02:82:52:c9:93:e6:86:6a:
ea:4c:64:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:47:51 2026 by rpki-client