Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/Yh__IxotubMeOa82sMvmQUaBHl8.roa
File: Yh__IxotubMeOa82sMvmQUaBHl8.roa (raw, json)
Hash identifier: E16zbGBIdZ2QaT6+6cP2+s5Eumca3TcRDTuXCjFf19A=
Subject key identifier: 62:1F:FF:23:1A:2D:B9:B3:1E:39:AF:36:B0:CB:E6:41:46:81:1E:5F
Certificate issuer: /CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Certificate serial: 01999601793371B35D4FF07CA7318D5C9C21
Authority key identifier: 7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/Yh__IxotubMeOa82sMvmQUaBHl8.roa
Signing time: Mon 29 Sep 2025 15:05:02 +0000
ROA not before: Mon 29 Sep 2025 15:05:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59796
IP address blocks: 5.252.32.0/24 maxlen: 24
5.252.33.0/24 maxlen: 24
5.252.34.0/24 maxlen: 24
5.252.35.0/24 maxlen: 24
160.79.120.0/24 maxlen: 24
160.79.121.0/24 maxlen: 24
160.79.122.0/24 maxlen: 24
160.79.123.0/24 maxlen: 24
185.121.240.0/22 maxlen: 22
185.121.240.0/24 maxlen: 24
185.121.241.0/24 maxlen: 24
185.121.242.0/24 maxlen: 24
185.121.243.0/24 maxlen: 24
2a06:a180:10::/48 maxlen: 48
2a06:a180:30::/48 maxlen: 48
2a06:a180:40::/48 maxlen: 48
2a06:a180:50::/48 maxlen: 48
2a06:a180:60::/48 maxlen: 48
2a06:a180:70::/48 maxlen: 48
2a06:a180:80::/48 maxlen: 48
2a06:a180:a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:96:01:79:33:71:b3:5d:4f:f0:7c:a7:31:8d:5c:9c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Validity
Not Before: Sep 29 15:05:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=621fff231a2db9b31e39af36b0cbe64146811e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3d:33:81:bf:e1:a8:b8:e5:c5:f8:76:a2:35:
1a:37:11:26:2e:58:13:a7:51:3b:eb:e2:6e:1a:73:
9f:cb:38:1d:e3:be:a5:15:43:31:7a:a9:7e:5d:96:
41:c9:f9:fd:c6:37:39:5c:df:ca:00:7c:91:50:a5:
ab:40:4f:c2:1a:5c:09:c4:27:a7:b8:a6:c1:36:f9:
e8:09:ca:7a:da:c6:8c:80:8b:00:a4:da:99:d5:15:
72:bd:5b:5d:87:7c:fc:64:0c:db:0c:4e:6a:53:03:
23:76:db:8d:ca:01:bc:17:f9:92:67:b6:ed:f6:17:
b7:f3:a9:14:54:77:04:0e:37:53:68:3a:df:1e:37:
8f:06:fb:c3:8b:f5:17:ca:f3:77:4d:56:d0:1f:da:
1f:4c:93:81:0e:9a:07:19:47:8a:fd:f0:15:5e:b7:
a2:ca:63:b5:23:ec:2a:95:61:be:cc:10:fa:10:91:
1a:8c:3e:48:c9:d1:47:16:0d:f1:ce:3c:a1:68:47:
34:17:7e:78:3a:cf:2b:eb:0c:9a:69:dc:e8:36:58:
19:ff:7d:ba:95:ac:49:7c:ed:04:de:71:01:da:19:
19:c6:14:a3:ed:8f:78:54:31:d4:9b:6b:7d:e4:e7:
b4:b1:86:16:8d:bf:8c:89:ed:1e:2b:f6:34:8b:e5:
61:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1F:FF:23:1A:2D:B9:B3:1E:39:AF:36:B0:CB:E6:41:46:81:1E:5F
X509v3 Authority Key Identifier:
keyid:7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/Yh__IxotubMeOa82sMvmQUaBHl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.32.0/22
160.79.120.0/22
185.121.240.0/22
IPv6:
2a06:a180:10::/48
2a06:a180:30::/48
2a06:a180:40::/48
2a06:a180:50::/48
2a06:a180:60::/48
2a06:a180:70::/48
2a06:a180:80::/48
2a06:a180:a0::/48
Signature Algorithm: sha256WithRSAEncryption
0b:57:8f:6a:6c:35:48:f4:6b:f1:56:6e:e4:a5:63:bc:88:59:
1d:fd:d0:12:e3:9c:0c:13:77:c2:97:10:88:ac:be:df:e5:43:
a8:20:58:fb:35:96:4a:f4:dc:1a:39:95:d4:1f:66:c0:35:9d:
6a:1f:2d:e1:eb:9c:ce:dd:90:06:0c:69:b7:39:85:96:5d:e3:
97:66:aa:6c:81:b5:c1:de:4e:33:c8:42:26:98:69:80:67:67:
28:d1:9c:c8:77:30:b5:a0:82:75:9d:00:68:79:5c:87:03:a1:
eb:9a:55:60:dd:6d:e2:1d:39:3e:a9:fc:b5:46:67:e0:8f:58:
1d:58:94:91:7c:5a:b8:0e:a8:a4:35:10:cd:ec:d8:6c:a1:69:
56:85:ef:52:46:30:f9:9d:1f:55:ae:20:76:77:86:ef:b9:ce:
c1:65:79:c5:fc:c7:eb:17:12:99:57:24:05:01:ca:d2:9a:8c:
c0:35:c5:f7:30:1e:e0:b2:b3:06:f7:42:5f:e9:d2:2c:c7:2f:
f5:83:35:50:1b:62:43:eb:99:72:4f:82:db:5f:93:2b:dc:39:
31:f1:8f:c1:ee:36:8b:cb:2f:44:b7:7a:77:7e:5c:5c:4a:09:
ef:ca:f5:72:7c:12:da:67:06:da:b7:86:f2:7a:12:84:ae:30:
d6:5d:5b:5c
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgISAZmWAXkzcbNdT/B8pzGNXJwhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjZiMWVmNzQxMDA3MmNlOTZlODJkNzU4MWJlNDM2ZTYz
OWE3YzQwHhcNMjUwOTI5MTUwNTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjFmZmYyMzFhMmRiOWIzMWUzOWFmMzZiMGNiZTY0MTQ2ODExZTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmj0zgb/hqLjlxfh2ojUaNxEmLlgT
p1E76+JuGnOfyzgd476lFUMxeql+XZZByfn9xjc5XN/KAHyRUKWrQE/CGlwJxCen
uKbBNvnoCcp62saMgIsApNqZ1RVyvVtdh3z8ZAzbDE5qUwMjdtuNygG8F/mSZ7bt
9he386kUVHcEDjdTaDrfHjePBvvDi/UXyvN3TVbQH9ofTJOBDpoHGUeK/fAVXrei
ymO1I+wqlWG+zBD6EJEajD5IydFHFg3xzjyhaEc0F354Os8r6wyaadzoNlgZ/326
laxJfO0E3nEB2hkZxhSj7Y94VDHUm2t95Oe0sYYWjb+Mie0eK/Y0i+VhowIDAQAB
o4ICZTCCAmEwHQYDVR0OBBYEFGIf/yMaLbmzHjmvNrDL5kFGgR5fMB8GA1UdIwQY
MBaAFH4mse90EAcs6W6C11gb5DbmOafEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlheDczUVFCeXpwYm9MWFdCdmtOdVk1cDhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jYWM2M2MtNTVlNS00MTU0LTg4NzYt
OGMzMmMzNTFlZTcwLzEvWWhfX0l4b3R1Yk1lT2E4MnNNdm1RVWFCSGw4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9jYWM2M2MtNTVlNS00MTU0LTg4NzYtOGMzMmMzNTFlZTcw
LzEvZmlheDczUVFCeXpwYm9MWFdCdmtOdVk1cDhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHsGCCsGAQUFBwEHAQH/BGwwajAYBAIAATASAwQCBfwgAwQC
oE94AwQCuXnwME4EAgACMEgDBwAqBqGAABADBwAqBqGAADADBwAqBqGAAEADBwAq
BqGAAFADBwAqBqGAAGADBwAqBqGAAHADBwAqBqGAAIADBwAqBqGAAKAwDQYJKoZI
hvcNAQELBQADggEBAAtXj2psNUj0a/FWbuSlY7yIWR390BLjnAwTd8KXEIisvt/l
Q6ggWPs1lkr03Bo5ldQfZsA1nWofLeHrnM7dkAYMabc5hZZd45dmqmyBtcHeTjPI
QiaYaYBnZyjRnMh3MLWggnWdAGh5XIcDoeuaVWDdbeIdOT6p/LVGZ+CPWB1YlJF8
WrgOqKQ1EM3s2GyhaVaF71JGMPmdH1WuIHZ3hu+5zsFlecX8x+sXEplXJAUBytKa
jMA1xfcwHuCyswb3Ql/p0izHL/WDNVAbYkPrmXJPgttfkyvcOTHxj8HuNovLL0S3
end+XFxKCe/K9XJ8EtpnBtq3hvJ6EoSuMNZdW1w=
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:58:35 2025 by rpki-client